Privacy policy

1. Controller The controller responsible for data processing on woesim.de is: Peter Holzhauser Dinkelsbühlerstr. 38 70374 Stuttgart Germany Email: [email protected] 2. Hosting woesim.de is operated on its own server in Germany. The website is delivered via Cloudflare as a content delivery network (CDN) and reverse proxy. In the process, technically necessary connection data (e.g. IP address) may be processed in order to provide the website securely and reliably. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure operation). 3. Server log files When the website is accessed, data is automatically processed in so-called server log files (e.g. IP address, date and time of access, page requested, referrer, browser type and operating system). This data serves the secure and stable operation of the website and error analysis. The legal basis is Art. 6(1)(f) GDPR. Log files are generally deleted or anonymised after 14 days at the latest. 4. Cookies woesim.de only uses technically necessary cookies. No cookies requiring consent are needed in the public area of the website. A session cookie is used exclusively internally for logging in to the administration area and is not relevant for visitors to the website. The language switcher (DE | EN) does not set a cookie; the language follows solely from the address you open (/en for English). The legal basis for the session cookie is § 25(2) TDDDG (technically necessary) and Art. 6(1)(f) GDPR. 5. Web analytics (Umami) To measure reach we use Umami, a self-hosted analytics software. Umami works without cookies and collects data in anonymised form; no personal profiles are created and no data is passed on to third parties. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in data-minimising reach measurement). Search terms you enter into the search fields of the website are stored together with the time, language and number of results without your IP address or any other personal reference in order to improve the search; the legal basis is Art. 6(1)(f) GDPR (legitimate interest in a working search function), and the entries are deleted after 180 days. 6. Affiliate and partner programmes woesim.de is financed through affiliate and partner programmes (including Amazon, eBay, AliExpress, MediaMarkt/Saturn and partner shops via the affiliate network Tradedoubler). If you click on a partner link, you will be forwarded to the respective third-party provider. The partner or affiliate network carries out its own data processing there; cookies or other tracking technologies may be used to attribute a purchase to the commission. We have no influence on this processing. Please refer to the privacy notices of the respective providers. The legal basis for the forwarding is Art. 6(1)(f) GDPR. Tradedoubler: Some of our partner links run via the affiliate network Tradedoubler, operated by Nyorda AB, Centralplan 15, 111 20 Stockholm, Sweden. Only when you click on such a link are you forwarded to the respective retailer via a Tradedoubler server. On behalf of the retailer, Tradedoubler processes your IP address, a cookie ID and – if you make a purchase – the order number in order to attribute the purchase or commission to the correct partner. For this purpose Tradedoubler may also use cross-device tracking and hashing. Data may be transferred to countries outside the EU/EEA; such transfers are based on an adequacy decision of the European Commission or on the EU standard contractual clauses. No data is transmitted to Tradedoubler when you merely visit our pages; Tradedoubler only sets cookies on its own domain after the click. The legal basis is Art. 6(1)(f) GDPR. Data protection contact at Tradedoubler: [email protected], data protection officer: [email protected]. Further information: https://www.tradedoubler.com/privacy-policy Product images: The images in our price overviews are loaded directly from the partners' image servers (Amazon: m.media-amazon.com, eBay: i.ebayimg.com, AliExpress: aliexpress-media.com). For technical reasons, the respective provider receives your IP address and browser information; no cookies are set in the process. Images from partner shops linked via Tradedoubler are loaded directly from the respective retailer's image server; for technical reasons the retailer receives your IP address and browser information, while Tradedoubler itself receives no data in the process. We load images from MediaMarkt/Saturn via our own server, so no connection to MediaMarkt is established. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in an illustrated, up-to-date price display). Map (woklima.de only): The store map on woklima.de loads map tiles from OpenStreetMap (OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom). For technical reasons the OpenStreetMap Foundation receives your IP address and browser information; no cookies are set in the process. There is an adequacy decision of the European Commission for the United Kingdom. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in showing the stores on a map). Further information: https://osmfoundation.org/wiki/Privacy_Policy 7. Price alerts by email If you set up a price alert on a product page, we process your email address, the selected product, the target price or the selected alert type ("on every price drop") and the times of registration, confirmation and notification. The sole purpose is to inform you about price changes for this product. Price alerts are only available where we offer this function, and they only take into account prices from selected partner shops whose terms permit this – prices from Amazon and eBay are not included. The alert only becomes active after you have clicked the link in the confirmation email (double opt-in). The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time: via the link "Delete this alert" in every email or via "Delete all my alerts" on the management page. The alert and the data stored for it are then deleted immediately. We delete unconfirmed alerts after 7 days and triggered or replaced alerts after 30 days. To send the emails we use the service Brevo (Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany) as a processor pursuant to Art. 28 GDPR. For this purpose Brevo processes your email address, the content of the notification and technical delivery data (e.g. delivery status); the data is processed on servers in the EU. Replies to an alert email reach the controller named above. 8. Protection against abuse (Cloudflare Turnstile) To protect the price alert form against automated requests (spam, misuse of other people's email addresses), we use Cloudflare Turnstile (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). When the form is submitted, Turnstile checks whether the request comes from a human and processes technical data such as IP address and browser and device information for this purpose. Turnstile does not set advertising cookies. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in protection against abuse). Cloudflare is certified under the EU-US Data Privacy Framework; there is therefore an adequacy decision of the European Commission for transfers to the USA. 9. Share function The "Share" button opens your device's share menu or simple links to WhatsApp, X, Facebook, Pinterest, Telegram or email. No data is transmitted to these networks when our pages are accessed; only when you click one of these links are you forwarded to the respective provider, which processes the data in accordance with its own privacy policy. 10. Contacting us If you contact us by email, we process the data you provide (e.g. email address, name, content of the message) exclusively to handle your enquiry. The legal basis is Art. 6(1)(b) or (f) GDPR. 11. Your rights You have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) and the right to object to processing (Art. 21 GDPR). An informal email to the address given above is sufficient to exercise your rights. 12. Right to lodge a complaint with a supervisory authority You have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data (Art. 77 GDPR).