Privacy policy

1. Controller The controller responsible for data processing on wopool.de is: Peter Holzhauser Dinkelsbühlerstr. 38 70374 Stuttgart Germany Email: [email protected] 2. Hosting wopool.de is operated on its own server in Germany. The website is delivered via Cloudflare as a content delivery network (CDN) and reverse proxy. In the process, technically necessary connection data (e.g. IP address) may be processed in order to provide the website securely and reliably. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure operation). 3. Server log files When the website is accessed, data is automatically processed in so-called server log files (e.g. IP address, date and time of access, page requested, referrer, browser type and operating system). This data serves the secure and stable operation of the website and error analysis. The legal basis is Art. 6(1)(f) GDPR. Log files are generally deleted or anonymised after 14 days at the latest. 4. Cookies wopool.de only uses technically necessary cookies. No cookies requiring consent are needed in the public area of the website. A session cookie is used exclusively internally for logging in to the administration area and is not relevant for visitors to the website. If you choose a language using the language switcher (DE | EN), we store this choice in the cookie "wo_lang" (value "de" or "en" only, stored for one year) so that the website does not redirect you automatically again. The legal basis is § 25(2) TDDDG (technically necessary) and Art. 6(1)(f) GDPR. 5. Web analytics (Umami) To measure reach we use Umami, a self-hosted analytics software. Umami works without cookies and collects data in anonymised form; no personal profiles are created and no data is passed on to third parties. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in data-minimising reach measurement). Search terms you enter into the search fields of the website are stored together with the time, language and number of results without your IP address or any other personal reference in order to improve the search; the legal basis is Art. 6(1)(f) GDPR (legitimate interest in a working search function), and the entries are deleted after 180 days. 6. Affiliate and partner programmes wopool.de is financed through affiliate and partner programmes (including Amazon, eBay, AliExpress, MediaMarkt/Saturn). If you click on a partner link, you will be forwarded to the respective third-party provider. The partner or affiliate network carries out its own data processing there; cookies or other tracking technologies may be used to attribute a purchase to the commission. We have no influence on this processing. Please refer to the privacy notices of the respective providers. The legal basis for the forwarding is Art. 6(1)(f) GDPR. Product images: The images in our price overviews are loaded directly from the partners' image servers (Amazon: m.media-amazon.com, eBay: i.ebayimg.com, AliExpress: aliexpress-media.com). For technical reasons, the respective provider receives your IP address and browser information; no cookies are set in the process. We load images from MediaMarkt/Saturn via our own server, so no connection to MediaMarkt is established. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in an illustrated, up-to-date price display). 7. Price alerts by email If you set up a price alert on a product page, we process your email address, the selected product, the target price or the selected alert type ("on every price drop") and the times of registration, confirmation and notification. The sole purpose is to inform you about price changes for this product. The alert only becomes active after you have clicked the link in the confirmation email (double opt-in). The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time: via the link "Delete this alert" in every email or via "Delete all my alerts" on the management page. The alert and the data stored for it are then deleted immediately. We delete unconfirmed alerts after 7 days and triggered or replaced alerts after 30 days. To send the emails we use the service Brevo (Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany) as a processor pursuant to Art. 28 GDPR. For this purpose Brevo processes your email address, the content of the notification and technical delivery data (e.g. delivery status); the data is processed on servers in the EU. Replies to an alert email reach the controller named above. 8. Protection against abuse (Cloudflare Turnstile) To protect the price alert form against automated requests (spam, misuse of other people's email addresses), we use Cloudflare Turnstile (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). When the form is submitted, Turnstile checks whether the request comes from a human and processes technical data such as IP address and browser and device information for this purpose. Turnstile does not set advertising cookies. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in protection against abuse). Cloudflare is certified under the EU-US Data Privacy Framework; there is therefore an adequacy decision of the European Commission for transfers to the USA. 9. Share function The "Share" button opens your device's share menu or simple links to WhatsApp, X, Facebook, Pinterest, Telegram or email. No data is transmitted to these networks when our pages are accessed; only when you click one of these links are you forwarded to the respective provider, which processes the data in accordance with its own privacy policy. 10. Contacting us If you contact us by email, we process the data you provide (e.g. email address, name, content of the message) exclusively to handle your enquiry. The legal basis is Art. 6(1)(b) or (f) GDPR. 11. Your rights You have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) and the right to object to processing (Art. 21 GDPR). An informal email to the address given above is sufficient to exercise your rights. 12. Right to lodge a complaint with a supervisory authority You have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data (Art. 77 GDPR).