Privacy Policy
Last updated: [Insert publish date]
We take the protection of your personal data seriously. This Privacy Policy explains what
data we collect when you use cardboardreview.de (the “Website”), why we collect it,
and what rights you have under the EU General Data Protection Regulation (GDPR) and
applicable German data protection law (BDSG).
1. Controller
DIGICOM Informationstechnologie GmbH
Wasserbergstr. 5
73037 Göppingen
Germany
Phone: +49 7161 68 30 84
Email:
info@digicom-gp.de
2. Data Protection Officer
Daniele Marseglia is the appointed Data Protection Officer and can be reached at
info@digicom-gp.de
using the subject line “Data Protection”.
3. Overview of Data We Process
Depending on how you use the Website, we may process the following categories of personal data:
- Server log data: IP address, browser type and version, operating system, referring URL, date and time of access, pages requested (collected automatically by our hosting provider).
- Account data: Name, email address, username, and password hash if you register directly, or your name, email address, and profile picture if you sign in via “Continue with Google”.
- Deal submission data: Product title, product link, prices, discount codes, shipping cost, country, and uploaded images.
- Voting/rating data: Your votes and temperature ratings.
- Newsletter / deal alert data: Email address and selected categories.
- Contact data: Information submitted through email, phone or contact form.
- Cookie and tracking data: As described in Section 7.
4. Purposes and Legal Basis for Processing
| Purpose | Data Used | Legal Basis (GDPR) |
|---|---|---|
| Operating and securing the Website | Server log data | Art. 6(1)(f) – Legitimate interest |
| Creating and managing your user account | Account data | Art. 6(1)(b) – Performance of a contract |
| Sign-in via Google OAuth | Account data from Google | Art. 6(1)(a), Art. 6(1)(b) |
| Publishing and moderating submitted deals | Deal submission data | Art. 6(1)(b), Art. 6(1)(f) |
| Community voting/rating features | Voting data | Art. 6(1)(f) |
| Sending deal alerts/newsletter | Newsletter data | Art. 6(1)(a) – Consent |
| Responding to inquiries | Contact data | Art. 6(1)(b), Art. 6(1)(f) |
| Analytics and site improvement | Cookie/tracking data | Art. 6(1)(a) – Consent |
| Affiliate link tracking | Click and referral data | Art. 6(1)(f) |
5. Hosting
Our Website is hosted by a third-party hosting provider.
[Insert hosting provider name, address, and if outside the EU/EEA, reference to Standard Contractual Clauses].
The hosting provider processes server log data on our behalf under a Data Processing Agreement pursuant to Art. 28 GDPR.
6. Sign-in with Google
If you choose “Continue with Google”, you will be redirected to Google’s login page.
We receive your name, email address, and profile picture from Google to create or match your Cardboard Review account.
We do not receive your Google password.
Google Privacy Policy:
https://policies.google.com/privacy
Google LLC (or Google Ireland Limited for EEA users) is the controller for this part of the process.
Where data is transferred to the US, Google relies on the EU-US Data Privacy Framework and/or Standard Contractual Clauses.
7. Cookies and Tracking Tools
We use cookies and similar technologies to operate the Website and, subject to your consent,
to analyze traffic and improve our content.
Essential Cookies
- Required for login
- Session management
- Deal submission form functionality
Analytics / Marketing Cookies
- Google Analytics / Google Tag Manager
Used to understand how visitors use the Website.
https://policies.google.com/privacy - Meta Pixel (Facebook / Instagram)
Used to measure campaign effectiveness.
https://www.facebook.com/privacy/policy/ - [Add or remove tools as applicable]
These non-essential cookies are activated only after your consent via the cookie banner.
You may withdraw your consent at any time using the cookie settings link in the website footer.
8. Affiliate Links and Third-Party Offers
Cardboard Review publishes deals, coupon codes, and product links from third-party merchants.
Some links are affiliate links. If you click and make a purchase, we may earn a commission
at no extra cost to you.
Affiliate Network Example:
https://www.awin.com/gb/legal/privacy-policy
We are not responsible for the accuracy of prices, stock availability, or terms displayed on third-party websites.
9. Social Media
We link to YouTube, Instagram, and Facebook from the Website.
Clicking these links takes you to the respective platform, which processes your data under its own privacy policy.
10. Recipients of Personal Data
- Hosting provider
- Email / Newsletter provider (e.g. Mailchimp, Brevo)
- Google (for account sign-in)
- Affiliate networks and merchants
- Authorities where legally required
We do not sell personal data to third parties.
11. International Data Transfers
Some recipients (e.g. Google and Meta) transfer data to the United States.
Where applicable, transfers rely on the EU-US Data Privacy Framework,
Standard Contractual Clauses (Art. 46 GDPR), or another lawful transfer mechanism.
12. Storage Period
We retain personal data only as long as necessary for the purposes described above or as required by law.
German commercial and tax regulations may require retention periods of 6–10 years.
Server logs are typically deleted after [Insert period].
13. Your Rights
You have the right to:
- Access your personal data (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Object to processing (Art. 21 GDPR)
- Withdraw consent at any time (Art. 7(3) GDPR)
- Lodge a complaint with a supervisory authority
Supervisory Authority:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Lautenschlagerstraße 20
70173 Stuttgart
Germany
https://www.baden-wuerttemberg.datenschutz.de
To exercise any of these rights, contact us at
info@digicom-gp.de.
14. Children
The Website is not directed at children under 16.
We do not knowingly collect personal data from children under 16 without parental consent.
15. Changes to this Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements.
The current version is always available on this page.
