Privacy policy

1. Controller and contact

Denys Vorobiov
E-Mail: dencc@gadgetcompass.de
Open contact form

2. Representative in the EU (Article 27 GDPR)

Natalia Yarkina
Esterwagnerstr. 11
85635 Höhenkirchen-Siegertsbrunn
Germany
E-Mail: natalia@gadgetcompass.de

Contact form

When you use the contact form, we process your name, email address and message solely to handle your enquiry. The required checkbox confirms that you have read the privacy policy; it is not consent to advertising. The legal basis is Article 6(1)(b) GDPR for pre-contractual or contractual enquiries, otherwise Article 6(1)(f) GDPR (responding to enquiries).

The application sends the message to our contact inbox through the transactional email service Resend. It stores no database copy and does not log form contents. Details are processed in memory only for the duration of the sending attempt. Resend and the receiving email inbox process the message for delivery and handling.

The service processes the data in accordance with the provider's data protection terms. Data may be processed in the USA or other countries outside the European Union. Further information is available in Resend's privacy notices.

For spam protection, salted IP hashes and attempt counters are held in server memory for up to 15 minutes and removed no later than the next one-minute cleanup. A hidden trap field and a global sending limit provide additional protection. This prevents abuse (Article 6(1)(f) GDPR); it is not visitor analytics.

3. Hosting and delivery

This website is delivered through Replit. The hosting infrastructure processes the IP address and technical connection information needed to serve requests. The purpose is delivery and security of the website; the legal basis is Article 6(1)(f) GDPR.

Processing takes place in accordance with the provider's data protection terms. Data may be processed in the USA or other countries outside the European Union. Further information is available in Replit's privacy notices.

4. Server logs and security

The application logs timestamps, request IDs, HTTP methods, URL paths without query parameters, response status and processing duration. Its normal request logger does not log passwords, cookie values or full IP addresses. Additional connection logs maintained by the host must be checked separately.

A hash of the IP address is temporarily processed in server memory to rate-limit login attempts to the private editor, not to analyse visitors. The legal basis is Article 6(1)(f) GDPR (abuse prevention).

5. Cookies and browser storage

The public catalogue currently uses no application analytics or marketing cookies, localStorage or sessionStorage. Search, filters, favourite markers and photo-reel playback state are held only temporarily in page memory.

__Host-catalog_admin

Set only after successful login to the private editor. Necessary authentication cookie, Secure, HttpOnly, SameSite=Strict. Lifetime up to 8 hours; removed on logout.

The device-storage access serves the explicitly requested login (section 25(2)(2) TDDDG). Associated processing is based on Article 6(1)(f) GDPR to secure the private editor. Session hashes and expiry information are stored server-side; the cookie lifetime is not automatically the deletion period for every database record.

No analytics tools, tracking pixels or external video/social-media embeds are used. Before adding non-essential cookies or similar storage access, a consent mechanism must be provided; those features must not activate before valid consent.

6. Merchant and affiliate links

The catalogue links to Amazon.de and, where provided for a product, AliExpress. Amazon links may be affiliate links. Simply displaying a link does not load the shop or embedded advertising. Clicking it takes you to the merchant website, where its privacy information applies. Technical connection information and affiliate identifiers may then be sent to and processed by the merchant.

Providing advertising-funded content is based on Article 6(1)(f) GDPR. This does not replace any consent required for tracking by a merchant or on this website.

7. Contact and retention

If you contact us by email or through the contact form, we process your information to handle your enquiry under Article 6(1)(f) GDPR.

8. Fonts and images

We load the fonts (Inter and Manrope) and the home-page reel photos from our own server. Some product images are loaded directly from the respective manufacturers’ or retailers’ servers, currently cdn.shopify.com (Shopify), www.steinel.de (STEINEL). When you open such a page, your browser sends your IP address to the provider to retrieve the image file. The legal basis is Article 6(1)(f) GDPR (displaying product images). The providers process the data under their own privacy notices. We list sources under Image credits.

9. Your rights

Subject to the statutory conditions, you have rights of access (Article 15 GDPR), rectification (16), erasure (17), restriction (18), portability (20) and objection to processing based on legitimate interests (21). You may withdraw consent at any time for the future (Article 7(3)).

Send requests to dencc@gadgetcompass.de. You may also complain to a data protection supervisory authority (Article 77 GDPR), particularly where you live, work or where the alleged infringement occurred.