Privacy notice

This privacy notice applies to our website at unicon.kids and unicodd.com, including their www addresses. It also covers the technical connection data processed when these domains are accessed or when a redirect takes place within this website.

1. Data controller

Sebastian Litschko
trading under the business name unic & odd
Bahnstr. 16
63505 Langenselbold, Germany
Email: [email protected]

2. Accessing the website and hosting

When you access a website, technically necessary connection data is processed. This may include your IP address, the date and time of access, requested files, browser and operating system information and the page previously visited.

For public hosting, we use the Stellar shared hosting plan from Namecheap, Inc., 4600 East Washington Street, Suite 300, Phoenix, AZ 85034, USA. The selected EU server location is Amsterdam, the Netherlands. As our hosting provider, Namecheap receives the technical data processed when the website is accessed. Further information can be found in Namecheap's privacy policy and in Namecheap's Data Processing Addendum.

The purpose of technical processing is to provide the website securely and reliably. Where this processing is carried out by the website operator, it is based on Article 6(1)(f) GDPR; the legitimate interest is secure operation. The specific retention period for access logs under this hosting plan still needs to be confirmed with Namecheap. Namecheap is headquartered in the USA. An EU server location alone does not rule out access from third countries. Namecheap's Data Processing Addendum contains standard contractual clauses for such data transfers. Its incorporation and the third-country access that actually occurs still need to be confirmed for the hosting service booked.

3. Cloudflare: DNS and website proxy

We use Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, to manage DNS for unicon.kids and unicodd.com and as a proxy in front of the website. DNS assigns the domain name to the correct server address. As the Cloudflare proxy is enabled, connections between your browser and our website also pass through Cloudflare's network. Cloudflare receives the technical data processed for these services.

For DNS queries, the requested domain name, query type, time and IP address of the requesting DNS server may be processed. For website access, Cloudflare may process your IP address, date and time, requested URLs, browser and operating system information, HTTP headers, and connection and security data. Processing supports reliable availability, website delivery and protection against attacks and abusive access. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is providing the website securely and reliably.

Cloudflare operates a global network. Personal data may therefore be processed outside the European Union or European Economic Area, particularly in the USA. Cloudflare describes its arrangements for processing on behalf of customers and transfers to third countries, including the EU-US Data Privacy Framework and supplementary standard contractual clauses, in its Data Processing Addendum. Further information about data processing and retention can be found in Cloudflare's privacy policy.

Cloudflare's Network Error Logging (NEL) is also enabled on our website. Browsers that support it may send reports of failed network connections to Cloudflare. These contain technical information about the error and the connection. Cloudflare states that it does not log client IP addresses in NEL processing. This feature helps identify and resolve availability problems; where personal data is processed, the legal basis is Article 6(1)(f) GDPR. Further information is provided in the Network Error Logging documentation.

Cloudflare's retention of technical data depends on the services used, what is needed to provide and secure them, and legal obligations. Cloudflare lists the nature and sensitivity of the data, processing purposes and legal requirements among its criteria. Specific retention periods for the logging and security features used in our account still need to be confirmed. The validity period of an NEL browser policy does not indicate how long error reports are retained.

4. Cookies and external content

Our own page code does not set cookies or use browser storage. Cloudflare Web Analytics is disabled; no web analytics measurement script is embedded on our website. Images and design are delivered as files from our website; fonts are selected from those available on your device. Delivery takes place through the Cloudflare proxy described above. There are no newsletters or embedded content. Namecheap creates server-side access logs in shared hosting. These may include IP address, time of access, requested file, HTTP status, amount of data transferred, referrer and browser information. They are used to create server-side statistics, which can be viewed in the hosting account through tools including AWStats.

We have enabled Cloudflare Bot Fight Mode and security challenges to defend against automated attacks and abusive access. Cloudflare may set cookies for this purpose, in particular __cf_bm to detect automated access, or cf_clearance to demonstrate that a security check has been passed. According to Cloudflare, the cookie __cf_bm expires after 30 minutes of continuous inactivity; the validity of cf_clearance depends on the security configuration. Where storing or reading this information is strictly necessary to securely provide the website access expressly requested, the legal basis is Section 25(2)(2) TDDDG. The associated processing of personal data is based on Article 6(1)(f) GDPR, given our legitimate interest in protecting the website. Cloudflare explains the details in its information about Cloudflare cookies.

5. Contact by form and email

If you contact us using the contact form or by email, we process your email address, message, chosen topic and, where voluntarily provided, your name to handle your enquiry. The contact form sends this information to us by email through our hosting provider Namecheap. Messages are not additionally stored in a form database. The legal basis is Article 6(1)(b) GDPR for contract-related enquiries, or otherwise Article 6(1)(f) GDPR, given our legitimate interest in responding to enquiries. Data is deleted once handling is complete, unless statutory retention obligations or other legitimate grounds require otherwise.

6. Links to Amazon and Instagram

The book links lead to Amazon. Simply visiting our site does not load any Amazon content through these links. Only when you click a link do you leave our website. Amazon is independently responsible for processing the data collected there. The links contain no affiliate identifier. Information can be found in Amazon's privacy notice.

The Instagram link leads to our Instagram profile. No Instagram content is loaded when you visit our website. Only when you click the link does Instagram open in a new tab. The respective provider is responsible for processing personal data there.

7. Your rights

Subject to the applicable legal requirements, you have rights of access, rectification, erasure, restriction of processing and data portability. Where processing is based on consent, you may withdraw it at any time with effect for the future.

Where processing is based on Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation. Please contact the email address given above.

You also have the right to lodge a complaint with a data protection supervisory authority, particularly where you normally live, work or where the alleged infringement took place. For Hesse: The Hessian Commissioner for Data Protection and Freedom of Information.

Last updated: 2 October 2026