How we handle the small amount of data that touches this site. Written in plain English; the legal bases (Art. 6 GDPR) are cited where relevant.
This site uses Google Tag Manager to coordinate tracking scripts. Tracking is consent-based — a cookie banner lets you accept or reject cookies before they fire. Fonts are self-hosted. If you buy the playbook, the payment is handled by Paddle (acting as merchant of record) — they collect the minimum data needed to process the order and issue a VAT invoice.
The controller responsible for the processing of personal data on this site within the meaning of the GDPR is:
Full company details are listed in the imprint.
This site uses Google Tag Manager (GTM) to coordinate tracking scripts. GTM loads a small container from googletagmanager.com (Google LLC). GTM itself sets a temporary technical cookie to coordinate tag firing.
Tracking is consent-based: a cookie banner is shown on first visit. Until you accept, tracking scripts remain inactive. You can change or withdraw your consent at any time via the Cookie Settings button in the footer.
The only other browser storage used is a small localStorage entry that remembers which page of the playbook you were last reading, so the book reopens where you left it. This value never leaves your browser.
The site is served from a virtual private server running Nginx. When your browser requests a page, the web server automatically records technical access data — your IP address, the requested URL, the date and time, the response status, the referring URL, and your browser’s user agent string. These logs are automatically deleted after 30 days. They are not combined with any other data source and are not used to identify individual visitors.
Legal basis: Art. 6 (1) (f) GDPR — legitimate interest in a stable, secure website.
Fonts (Space Grotesk, JetBrains Mono) are self-hosted and served from this domain.
If you email us, your message and email address are stored for the purpose of handling your inquiry and any follow-up. These messages are not shared with third parties. Data is deleted once the matter is resolved, and at the latest after 6 months of inactivity, unless statutory retention applies (§147 AO requires up to 10 years for tax-relevant correspondence).
Legal basis: Art. 6 (1) (b) GDPR — pre-contractual or contractual communication — or Art. 6 (1) (f) GDPR for general inquiries.
Purchases of the playbook are processed by Paddle.com Market Ltd., Judd House, 18–29 Mora Street, London EC1V 8BT, United Kingdom. Paddle acts as the merchant of record: when you buy, your contract of sale is with Paddle, and Paddle resells the product to you. Paddle collects the billing data necessary to complete the transaction — name, email, billing address, country, VAT status, and payment-method details — and is responsible for handling EU VAT on the sale.
We receive only the minimum information we need to fulfil your order: your email address (to send the access link), the country of sale, the order ID, and the amount. We do not see or store your card, bank, or PayPal details at any time.
Paddle’s own privacy policy applies to the data it collects directly: paddle.com/legal/privacy.
Order data we receive from Paddle is retained for up to 10 years under §257 HGB / §147 AO (commercial and tax retention).
Legal basis: Art. 6 (1) (b) GDPR — performance of the sales contract.
When you view this site, your browser fetches a few resources from third-party CDNs. These providers may receive your IP address and basic request metadata (referrer, user agent) simply because your browser connects to their servers:
unpkg.com, a CDN operated by Cloudflare. Cloudflare’s privacy policy: cloudflare.com/privacypolicy. Cloudflare Inc. is certified under the EU-US Data Privacy Framework.Legal basis: Art. 6 (1) (f) GDPR — legitimate interest in serving a fast, working site via established CDNs.
We use Google Tag Manager (container ID GTM-NK8VJHZS) to manage tracking scripts on this site. GTM loads from googletagmanager.com (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).
GTM itself does not perform analytics — it only coordinates which tracking tags are active based on your cookie consent. The actual data collected depends on the tags loaded (currently: Matomo analytics). All tracking is consent-based per § 25 TDDDG.
You can change or withdraw your consent at any time via the Cookie Settings link in the site footer. Withdrawing consent stops future tag firings and, for Matomo, applies retroactively.
Google LLC processes data under the EU-US Data Privacy Framework (EU Commission adequacy decision of July 10, 2023). Standard Contractual Clauses (SCCs) also apply.
Legal basis: Art. 6 (1) (a) GDPR (consent) + § 25 TDDDG.
We use Matomo (open-source web analytics) to understand how visitors use this site. Matomo is self-hosted on our own server in Germany at matomo.textileplaybook.com — data does not leave our infrastructure unless explicitly exported.
Matomo collects the following data about each visit: IP address (anonymized to the last octet), pages viewed, referrer URL, browser and operating system, screen resolution, and time spent on each page. No personal names or email addresses are linked to analytics data unless you explicitly complete a form.
Matomo sets the following cookies:
Analytics data is retained for 24 months by default. You can opt out of Matomo tracking at any time via the Cookie Settings button in the footer, or by visiting the Matomo opt-out page.
Legal basis: Art. 6 (1) (a) GDPR (consent) + § 25 TDDDG.
We implement appropriate technical and organizational measures to protect your data:
Under § 38 BDSG, Get Map UG is not currently required to appoint a Data Protection Officer (fewer than 20 persons are continuously engaged in the automated processing of personal data). Should this change, we will update this policy. You can address data protection inquiries to hello@textileplaybook.com.
This site is not directed at children under the age of 16. If data from a child under 16 is collected (e.g., via email inquiry), processing is based on parental consent or the child’s implied consent, depending on the circumstances.
When you purchase the playbook, we receive your email address, country of sale, order ID, and amount from Paddle (acting as merchant of record). From our perspective as a data controller, this data is received from Paddle under Art. 14 GDPR. Your email address is used to deliver the access link and for order-related communication.
You have the right to:
To exercise any of these rights, email us at hello@textileplaybook.com. For payment-related data held by Paddle, please contact Paddle directly using the link in section 05.
We may update this policy if we change the site, add a new processor, or if the law changes. The “last updated” date above always reflects the current version. Substantive changes affecting existing customers will be notified by email.