1. Controller

CPI Technologies GmbH
Brüsseler Straße 1-3
60327 Frankfurt am Main
Phone: +49 6131 4909028
Email: info@cpitech.io

2. Data processing when accessing the website

When you access vibecodingbuch.de, technically necessary data is processed on the server side (IP address, timestamp, page requested). The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure operation).

3. Members area

When you register, we store your name, email address and the date of registration. Purpose: provision of the members area and sending of update notifications. Legal basis: Art. 6(1)(b) GDPR.

4. Orders and payment processing (Stripe)

When you order the book through this website, we process the data required for the order (name, email address, shipping and billing address, and for certain offers also phone number and company) to fulfil the contract (Art. 6(1)(b) GDPR). Payment is processed by Stripe (Stripe Payments Europe Ltd., Ireland; Stripe Inc., USA — certified under the EU-US Data Privacy Framework), which receives the data required for the payment. We retain order and invoice data for the statutory commercial and tax retention periods. The order confirmation and, where applicable, the ebook are sent to you by email.

5. Cookies and consent

We use technically necessary cookies without consent (e.g. for the members-area login and to store your cookie choice in the "ads_consent" cookie, 180 days). Marketing and analytics services only run if you consent via the cookie banner (Art. 6(1)(a) GDPR); you can withdraw your consent at any time by deleting the "ads_consent" cookie in your browser. If you reach the site via an ad, we additionally store campaign parameters from the URL (UTM parameters and click IDs such as gclid or li_fat_id) in the first-party cookies "vcb_attr" (30 days) and "_vc_gcl" (90 days) to attribute a later order to the campaign (Art. 6(1)(f) GDPR — measuring our own advertising). These cookies are read only by us, not by third parties.

6. Analytics and advertising services (only with consent)

With your consent, we use the following services to understand how the site is used and to measure the success of our ads. Data may be transferred to the USA; the providers are certified under the EU-US Data Privacy Framework.

Google Ads & Google Analytics 4 (Google Ireland Ltd., Dublin) — conversion measurement for our ads and pseudonymous usage analytics. We use Google Consent Mode v2: no advertising cookies are set before you consent.

Meta Pixel (Meta Platforms Ireland Ltd., Dublin) — measurement of orders placed via Facebook/Instagram ads and creation of advertising audiences.

LinkedIn Insight Tag (LinkedIn Ireland Unlimited Company, Dublin) — measurement of orders placed via LinkedIn ads and creation of retargeting audiences. The tag only loads after you consent.

7. Server-side conversion measurement

If an order results from one of our ads, we transmit the order value, currency and a SHA-256-hashed (pseudonymised) form of your email address server-side to the respective ad network (Google Ads API or LinkedIn Conversions API) to count the ad as successful. Ad click IDs (e.g. li_fat_id) are only transmitted if you consented to marketing cookies. Legal basis: Art. 6(1)(f) GDPR (measuring the success of our advertising); you can object at any time via info@cpitech.io.

8. Customer management (HubSpot)

When you place an order, we store your contact details (name, email address, and where provided phone and company) and the campaign origin of the order in our CRM system HubSpot (HubSpot Ireland Ltd.; data hosted in the EU) — for customer care and order handling (Art. 6(1)(b) and (f) GDPR).

9. Your rights

You have the right at any time to access, rectification, erasure, restriction, data portability and objection. Please send requests to the email address stated above.

10. Right to lodge a complaint

You may lodge a complaint with the competent supervisory authority — for us: the Hessian Commissioner for Data Protection and Freedom of Information (Hessischer Beauftragter für Datenschutz und Informationsfreiheit).

This privacy policy is updated whenever the services we use change — the version date above is authoritative.

Privacy Policy