Last updated 8 November 2026.
This notice explains how I handle your information when you read the author website, contact me, or use the bookshop to order, pay for and download the book, Workbook or audio editions.
1. Controller and contact
The person responsible for processing personal data on this website is Henrique Miguel Barroso Oliveira, operating as an individual under the author name Miguel Oliveira.
Drömlingsweg 3a
38471 Rühen
Deutschland (Germany)
Email: contact@miguel-oliveira.com. You can use this address for privacy enquiries and requests concerning your personal data.
2. Hosting and website security
The website is hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. IONOS processes hosting data under a data-processing agreement.
When you open a page, your browser sends technical information to the host so it can return the page. This includes your IP address, the page or file requested, the time, browser and device information and, if your browser sends it, the referring page. The legal basis is Article 6(1)(f) GDPR. I have a legitimate interest in delivering the website reliably, diagnosing faults and protecting it against misuse.
Hosting logs. Section 4 of the IONOS data-processing service description gives a maximum of seven days for hosting log files. IONOS support has separately quoted up to eight weeks for webspace access logs. Its log-file guide gives eight weeks for older hosting contracts and describes newer contracts separately. IONOS has not confirmed which additional log categories, if any, follow that longer period on this installation.
3. Contact enquiries
If you contact me by email, I use your email address, the contents of your message and any correspondence needed to answer your enquiry.
If you ask me to take steps towards a contract with you, or write about an existing contract with you, I process your enquiry under Article 6(1)(b) GDPR. For other messages I rely on Article 6(1)(f) GDPR. My legitimate interest is to answer readers, publishers, journalists and others who choose to contact me.
You choose what to include. Please share only the information needed for me to answer your enquiry.
IONOS hosts the professional author mailbox. Clicking the email link opens your email application. Your message is sent when you choose to send it. The Contact page also lists a separate mail.com address for coaching enquiries.
4. Statistics, cookies and website features
IONOS WebAnalytics provides website usage statistics. IONOS describes collecting page requests, referrers, browser and device information, access times and an approximate location. A browser sends its IP address with a request. IONOS says it anonymises the address immediately after transmission and uses the anonymised address to determine the approximate location.
IONOS describes two collection methods, server logs and a measurement pixel, and says WebAnalytics uses no cookies. To the extent that personal data are processed before anonymisation, the basis is Article 6(1)(f) GDPR. My interest is to understand which pages readers use and improve the website. IONOS support quotes thirteen months for analytics events while the account is active. This period concerns analytics events; hosting logs are described in section 2. How IONOS WebAnalytics works.
The public author pages can be read without a visitor account. The Contact page provides email and social-profile links. The audio pages provide reading and listening instructions.
WordPress uses cookies for functions such as signing an administrator in and remembering editing preferences. You can use your browser’s site-data settings to inspect or clear stored data.
5. Audio pages and external links
The two audio pages describe the English audiobook and the twelve Workbook practices in the voices of Frank and Niki. You can read the instructions without starting a player or providing contact details.
The Contact page links to the author’s profiles on LinkedIn, Instagram and Facebook. Following a link opens the chosen service, which receives the information your browser sends and applies its own privacy policy. The same applies to links to other external websites.
6. Service providers, transfers and retention
IONOS SE and its authorised service providers handle the data needed for hosting, email delivery, security and recovery. The IONOS agreement provides for processing in the European Union or European Economic Area. Where a transfer outside that area is necessary to deliver a service, IONOS must meet the requirements of Chapter V GDPR.
IONOS publishes its data-processing agreement and list of providers. You can ask the author for information about any safeguards relevant to your data, including how to obtain a copy.
Correspondence. I keep emails while the enquiry or its follow-up remains open. Once that work is complete, I delete the correspondence unless I must retain it by law or need it for a specific legal claim. You can write to the address in section 1 to ask about a particular message.
Bookshop orders. The bookshop uses WooCommerce. Order attribution is switched off, so WooCommerce does not record which campaign or referring channel led to an order. If an unpaid order is still pending or marked as failed 30 days after it was created, WooCommerce moves it to the bin. This setting applies only to those unpaid orders.
Recovery copies. IONOS makes daily backups of the website files and database. The hosting panel specifies at least fourteen days. The maximum depends on the host’s backup rotation and has not been confirmed for this installation. I keep manual copies while they are needed to recover the website and remove them when that purpose ends. If older data reappear after a restore, applicable deletion requests still apply.
7. Your basket and order
When you add a title to the basket, WooCommerce uses session cookies to remember the items you choose. Its basket session identifier normally lasts two days. These cookies are necessary to provide the basket and checkout you request under section 25(2)(2) of the German TDDDG. I use the associated personal data to take steps towards your purchase under Article 6(1)(b) GDPR.
At checkout I use your name, email, billing address, the titles and prices you choose, the currency, applicable tax, order number and payment status to calculate the total, fulfil your purchase and help with it afterwards. Your billing country and postcode help determine the applicable tax. The shop can also record your IP address and browser to investigate misuse. Required billing and contact details are needed to complete a purchase and provide the receipt and files.
WooCommerce stores the order on my IONOS-hosted website. My email service delivers transactional messages. I process order and delivery information to perform our contract under Article 6(1)(b) GDPR, tax information to meet legal obligations under Article 6(1)(c), and security records to protect buyers and investigate specific incidents under Article 6(1)(f).
8. Payments and fraud checks
Stripe processes payments. When its payment interface loads, your browser can send Stripe your IP address and device and browser information. To process your payment, Stripe receives billing details, the transaction amount, currency, order reference and the card or payment credentials you enter. My shop receives a payment reference and status so it can confirm the order or process a refund. Full card numbers and security codes are entered with the payment provider.
Depending on your location and device, checkout may offer cards, Klarna, Apple Pay, Google Pay or Link by Stripe. If you select one, the relevant provider handles the contact, billing and payment details needed for that method. Klarna may use credit and fraud checks to decide which payment options to offer. If you choose to save a payment method, Stripe may keep the credentials and the shop may receive a reusable payment reference, card brand and last four digits. See Klarna’s privacy information and the privacy notices for Apple Pay, Google Pay and Link.
I rely on Article 6(1)(b) GDPR to process your chosen payment and on Article 6(1)(f) for my legitimate interest in preventing fraud and handling disputes. Stripe uses browser and device signals, including fraud-prevention cookies. Its checks can result in extra authentication or a declined payment. If a payment seems to have been declined in error, email me with the order reference so I can investigate. Please keep card details out of your message.
Depending on the service, Stripe processes information on my behalf or as a controller in its own right. Recipients may include Stripe’s Irish entities, banks, card networks and your chosen provider. For transfers outside the European Economic Area, Stripe describes the adequacy decisions and standard contractual clauses it relies on, as applicable. You can request information about the relevant safeguards using the contact in section 1. See the Stripe Privacy Policy, Data Processing Agreement and Data Transfers Addendum.
9. Invoices, immediate delivery and withdrawal requests
I use your billing details, purchased items, prices, tax amounts and invoice number and date to issue the invoice and keep accounting records. I disclose relevant records to the tax authorities when required. The legal basis is Article 6(1)(c) GDPR. Under German law invoices and accounting vouchers are generally retained for eight years, qualifying business correspondence for six years, and specified books and accounting records for ten years. The period normally starts at the end of the relevant calendar year and some tax proceedings can extend it. See section 14b UStG and section 147 AO.
If you request immediate digital delivery, the shop records the declaration you accepted, its version, language and time of acceptance with your order. The confirmation email includes that record. If you use the withdrawal form, I process your name, email address, order reference, scope of withdrawal, submission time and any details you choose to add. The shop sends an acknowledgement to you and a notice to my professional mailbox. I use these records to fulfil the contract, meet consumer-law obligations and, where necessary, establish or defend a legal claim (Article 6(1)(b), (c) and (f) GDPR). I keep records for the applicable statutory periods and for as long as a specific claim requires. Withdrawal form · Terms of sale.
10. Download links and access records
After payment is confirmed, the receipt and completed-order email provide personal links for the files you purchased. WooCommerce checks the permission for each file against your order. A download record can include the file, order or permission reference, access time and IP address. I use these details to deliver your files and help with access problems under Article 6(1)(b) GDPR, and to investigate suspected misuse under Article 6(1)(f). Please keep your download links private.
An hourly clean-up deletes individual download records older than 30 days. Order details, download permissions and counts are stored separately so the files can remain available to you. I keep those permissions while providing the agreed access or resolving a delivery issue. Entries you make in the downloaded Workbook stay in your own copy. The QR codes lead to public listening information.
11. Your rights
Under the conditions set by the GDPR, you may request access to your personal data, correction, deletion, restriction of processing or data portability. If processing is based on your consent, you may withdraw it at any time. Withdrawal takes effect for future processing.
You can object to processing based on legitimate interests for reasons relating to your particular situation. To object or exercise any of your rights, write to contact@miguel-oliveira.com.
You may also complain to a data-protection supervisory authority, particularly where you live or work or where an alleged infringement occurred. For the operator’s current location, the regional authority is Der Landesbeauftragte für den Datenschutz Niedersachsen. See its complaint information.
The author website does not use your email enquiries to make solely automated decisions that have legal or similarly significant effects on you.