Privacy Policy

1. Introduction

We are pleased that you are visiting our website. We take the protection of your personal data very seriously.

In the following, you will find information on the type and scope of the processing of your personal data in accordance with Art. 13 GDPR by Bloomsbury Holding GmbH (hereinafter: “we”, “us”, “Bloomsbury”).

2. Name and contact information of the controller; contact for data protection

  • Controller:
    Bloomsbury Holding GmbH
    Braunschweiger Straße 53–55
    12055 Berlin, Germany

    E-mail: info(at)bloomsbury-group.com

    You can find additional legal details in our Legal Notice (Imprint).

  • Data protection contact:
    We are not legally required to appoint a data protection officer. For all GDPR-related matters, please visit our Contact Page or contact privacy(at)bloomsbury-group.com.

3. Processing of personal data when using our website

Accessing the website

  • When accessing our website, the following technical data is automatically processed:

    • IP address

    • Date and time of access

    • URL or file requested

    • HTTP status code

    • Amount of data transferred

    • Referrer URL

    • Browser type and version

    • Operating system and device details

    • Language settings

  • Processing is carried out on the basis of Art. 6(1)(f) GDPR. Our legitimate interests are:

    • ensuring website functionality

    • maintaining IT security

    • evaluating system stability

    • detecting and preventing misuse or attacks

  • Log data is deleted after seven days unless a longer retention period is required for security reasons.

Contacting us

  • If you contact us (e.g., via email or a contact form), we process:

    • Name

    • Email address

    • Any information you voluntarily submit

    • Content of your message

  • The legal basis is:

    Art. 6(1)(b) GDPR (pre-contractual communication), or

    Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries)

  • We store data only as long as required to process your inquiry or meet legal retention duties.

  • Emails are processed through Google Workspace (Gmail). Google acts as a processor under Art. 28 GDPR with applicable safeguards, including Standard Contractual Clauses when data is transferred to the United States.

4. Notes on consent

  • Where processing is based on your consent (e.g., analytical cookies), you may withdraw this consent at any time with effect for the future.

  • Withdrawal options include:

    adjusting settings in the cookie banner

    contacting us at privacy@bloomsbury-group.com

  • Withdrawal does not affect the lawfulness of processing prior to withdrawal.

5. Use of cookies

  • General:
    Our website uses cookies to enable essential functionality and — with your consent — analytics.

  • Essential cookies (§ 25(2) TTDSG):
    These cookies are necessary for the technical operation of the website. Processing is based on Art. 6(1)(f) GDPR.

  • Analytics cookies (with consent):
    Analytics cookies are used only with your prior consent in accordance with Art. 6(1)(a) GDPR and § 25(1) TTDSG.

6. Services and third-party content used on the website

  • Google Analytics 4:
    Used to analyse website usage.

    Provider: Google Ireland Limited, Dublin, Ireland

    Legal basis: Art. 6(1)(a) GDPR (consent)

    Data processed:

    • device information

    • shortened IP address

    • browser data

    • pages visited

    • usage patterns

    • geographic region (approximate)

    • referrer URLs

    • interaction data

    • unique identifiers

    Transfers: Data may be transferred to the United States and other third countries based on Standard Contractual Clauses or the EU–US Data Privacy Framework.

    Retention: up to 50 months (depending on our Analytics settings).

    You can revoke your consent at any time via the cookie settings.

  • Google Tag Manager
    Used to manage analytics tags. Does not store personal data itself.

    Legal basis: Art. 6(1)(a) GDPR (consent)

  • Hosting provider
    Our website is hosted by an external provider.

    Processing is based on Art. 6(1)(f) GDPR (legitimate interest in secure, efficient hosting).

    The hosting provider acts as a processor under Art. 28 GDPR.

  • LinkedIn (external link)

    Our website contains an external link to our LinkedIn company page: https://www.linkedin.com/company/bloomsbury-group

    When you click this link, LinkedIn Ireland Unlimited Company becomes responsible for your data.

    LinkedIn processes personal data independently under its own Privacy Policy.

    If LinkedIn provides anonymised “page insights” to us, LinkedIn and Bloomsbury act as joint controllers under Art. 26 GDPR. LinkedIn assumes primary responsibility for compliance.

7. Recipients of personal data & third-country transfers

  • We share personal data only when necessary and legally permitted. Possible recipients include:

    • IT/hosting providers

    • Google (Google Workspace, Google Analytics)

    • External advisors (lawyers, accountants)

    • Public authorities (only where legally required)

  • We may store internal business documents using Dropbox, used solely for internal file storage. Dropbox acts as a processor under Art. 28 GDPR, with transfers secured by Standard Contractual Clauses or equivalent safeguards.

  • Transfers to third countries are based on:

    • Adequacy decisions,

    • Standard Contractual Clauses (Art. 46 GDPR), or

    • Data Privacy Framework (where applicable).

8. Your rights

  • You have the following rights under GDPR:

    Right of access – Art. 15

    Right to rectification – Art. 16

    Right to erasure – Art. 17

    Right to restriction – Art. 18

    Right to data portability – Art. 20

    Right to object – Art. 21

    Right to withdraw consent – Art. 7(3)

    Right to lodge a complaint – Art. 77 (with your relevant supervisory authority)

  • For Berlin, the competent authority is Berliner Beauftragte für Datenschutz und Informationsfreiheit.

9. External links

Our website may contain links to external sites. We are not responsible for the content of these external providers.

10. Changes to this Privacy Policy

We may update this Privacy Policy whenever necessary due to legal or technical developments. The latest version is always available on our website.

Status: December 2025