Privacy policy

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

• Without your consent, the public price comparison site sets no cookies and uses no analytics, tracking or advertising services.
• We do not store IP addresses in log files when you visit the pages.
• Hosting takes place on servers in Germany.
• Cookies are used exclusively when logging in to the merchant portal or the admin area (strictly necessary session cookies).

This website is hosted on servers of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany (server location Germany). A data processing agreement pursuant to Art. 28 GDPR is in place with Hetzner. The legal basis is our legitimate interest in providing the service securely and efficiently (Art. 6(1)(f) GDPR).

When you access our pages, the web server processes your IP address for technical reasons in order to deliver the content to your browser. This processing is necessary for the operation of the website (Art. 6(1)(f) GDPR). We do not store IP addresses permanently in server log files. We use web analytics exclusively with your consent (see section 5a).

Merely visiting the public area (price comparison, product pages, search, shop directory) sets no cookies. We set strictly necessary cookies in only two cases: (1) If you actively choose a country via the country selector, a functional cookie ("country", lifetime 12 months) stores that choice so that you see your country version directly on your next visit. (2) If you log in as a merchant or member of staff, session cookies serve session management (login session, CSRF protection). Both cases are expressly requested by you and therefore do not require consent (Section 25(2) no. 2 TDDDG, German Telecommunications Digital Services Data Protection Act; Art. 6(1)(b) GDPR). In addition, a cookie ("ua-consent", lifetime 6 months) stores your decision in the cookie banner — this too does not require consent, being the technical implementation of your choice. Cookies requiring consent (section 5a) are set only after you have agreed in the banner.

If you consent in the cookie banner, we load Google Tag Manager of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Tag Manager itself collects no usage data; it is the tool through which the measurement tools of this site are delivered. Running through it is Google Analytics 4, a web analytics service of the same provider. Google Analytics uses cookies (including "_ga") which enable an analysis of how the portal is used. The IP address is not stored by Google Analytics 4. Before your consent, no Google services are loaded and no data is transmitted to Google; for this we use Google Consent Mode v2 with the default setting "denied" for all storage and advertising purposes (ad_storage, ad_user_data, ad_personalization, analytics_storage).

The legal basis is your consent (Art. 6(1)(a) GDPR; Section 25(1) TDDDG). You can withdraw your consent at any time with effect for the future by opening "Cookie settings" in the footer and selecting "Decline"; Google cookies already set are deleted in the process. Data may also be transferred to the USA; Google LLC is certified under the EU-US Data Privacy Framework (Art. 45 GDPR). A data processing agreement pursuant to Art. 28 GDPR is in place with Google. Google retains the analytics data for a maximum of 14 months.

Product images are loaded directly from the servers of the respective merchants or their service providers (e.g. content delivery networks, Google). For technical reasons, the respective server operator receives your IP address and standard browser information, because your browser retrieves the image file there. Without this processing, the product images could not be displayed (Art. 6(1)(f) GDPR). We have no influence on the data processing carried out by these third parties; their privacy notices apply.

When you click on an offer, we redirect you to the merchant's shop via an internal redirect URL. In doing so, we store the offer clicked, the time, the referring page (referrer) and your browser's user agent, but no IP address and no other directly identifying characteristics. The purpose is statistical analysis and billing towards the listed merchants (Art. 6(1)(f) GDPR).

Your search queries are processed in order to display the results, but are not stored permanently and are not linked to your person.

For registered merchants we process the data provided during registration and performance of the contract (email address, shop name and domain, Merchant Center ID, feed URL as well as contract and billing data). Login takes place via one-time, time-limited sign-in links sent by email; for this we store the time of use. Within the scope of the contract we retrieve the merchant's product data from its Google Merchant Center or via the Google CSS programme. The legal basis is performance of the contract (Art. 6(1)(b) GDPR).

Billing of the merchant subscription takes place via the payment service provider Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. The data required for payment processing is transmitted to Stripe (name, email address, payment data, subscription information). We do not store complete payment data (e.g. card numbers) ourselves. Stripe may transfer data to Stripe, Inc. in the USA; the transfer is safeguarded by the EU-US Data Privacy Framework or EU standard contractual clauses. The legal basis is performance of the contract (Art. 6(1)(b) GDPR). Further information: Stripe's privacy policy at stripe.com/privacy.

We send transactional emails only (sign-in links, notices about payment and subscription). No newsletters or promotional mailings are sent. The legal basis is performance of the contract (Art. 6(1)(b) GDPR).

Personal data is disclosed only to the processors and service providers named in this policy. We do not sell any data and do not pass on any data to third parties for advertising purposes.

We store merchants' contract and billing data for the duration of the contractual relationship and beyond that within the scope of statutory retention obligations (6 or 10 years under HGB, the German Commercial Code, and AO, the German Fiscal Code). Click statistics contain no directly identifying characteristics and are kept for statistical purposes. Sign-in tokens expire after 24 hours.

You have the following rights towards us regarding your personal data: access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing based on legitimate interests (Art. 21). To exercise them, please use the contact details given above.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is das Bayerische Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach.

Automated decision-making including profiling within the meaning of Art. 22 GDPR does not take place.

We adapt this privacy policy when the service or the legal situation changes. The version published here at the relevant time applies.

When you set up a price alert, we process your email address and the target of the alert — a product, a category, a shop or a whole country — in order to notify you about price drops. For a product alert we also store the price at the time of sign-up; for category, shop and country alerts we store which price drop we have already sent you, so that the same message does not arrive twice. The legal basis is your consent (Art. 6(1)(a) GDPR). You give that consent through a confirmation procedure (double opt-in): after entering your address you receive a single email with a confirmation link; we only send notifications after you have clicked it. If you do not confirm, we delete the entry after 14 days. Every notification contains an unsubscribe link; after unsubscribing we delete the entry within 30 days. You may withdraw your consent at any time with effect for the future.