Privacy notice

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other data-protection rules is:

2. Data processed by Kaufampel

You can use Kaufampel without an account. We do not operate personalised advertising, build user profiles, or sell personal data. Personal data arises only to a limited extent:

• technical connection and access data when pages are requested,
• a search term entered by you,
• technical error and performance data,
• data generated when an external retailer link is clicked, and
• data you voluntarily send to us by email.

3. Website access and hosting by Vercel

When you access Kaufampel, your browser sends technically necessary data to our servers. This may include your IP address, date and time, requested address, referrer, browser and operating system, device characteristics, transferred data volume, and HTTP status. We process this data to deliver the website, defend against attacks, and investigate errors.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure, stable, and economical operation of the service. Our hosting and CDN provider is Vercel Inc., USA. The application's primary execution region is Frankfurt am Main; its global delivery network may process technical data at other locations as well.

We do not create our own permanent visitor history in the application. Technical logs held by the hosting provider are deleted under the configured or contractual time limits when no longer needed for operation, security, and troubleshooting. See the Vercel Privacy Notice for more information.

4. Product search and product database

When you use search, your query is sent to Kaufampel as part of the requested URL and processed on the server to find matching products. It may therefore also appear in your device's browser history. Do not enter names, email addresses, or other personal content into the search field.

The product database is provided by PlanetScale, Inc., USA, as our processor and is configured for Kaufampel in Frankfurt am Main. The query is used for the database request; Kaufampel does not create a permanent search history or user profile from it. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is to provide the product search you requested. See the PlanetScale security documentation for information on security and data locations.

5. Error and performance monitoring with Sentry

We use Sentry, provided by Functional Software, Inc. (Sentry), USA, to detect technical errors and keep the website stable where the service is enabled in the relevant environment. Data may include the time of an error, affected page path, error message, program flow, browser and operating-system type, device class, technical identifiers, and performance data. In production, performance transactions are currently sampled at a rate of 10 per cent.

Kaufampel disables the default transmission of directly identifying user data, removes IP addresses and sensitive request headers, and removes search parameters from request URLs and navigation data before transmission. Session replay and profiling are not enabled. The data is not used for advertising or personal analysis.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interests are error detection, IT security, and technical optimisation. Event data is deleted automatically after the retention period configured in the Sentry project, or earlier when it is no longer needed. See the Sentry Privacy Policy for more information.

6. Price-alert preview

The price alert currently shown is only a local feature preview. When submitted, entries in the product, target-price, and email fields are not transmitted to Kaufampel, not saved to a database, and no message is sent. The data remains temporarily in your browser's working memory and is discarded when the page is reloaded or left.

Before real notifications are enabled, we will update this notice with the delivery provider, retention period, double opt-in, and unsubscribe process.

7. Affiliate links and retailer websites

Retailer buttons are marked affiliate links and first lead through our internal /go/… address. The technical access data described in section 3 is generated for that request; Kaufampel does not create a personal click history in the product database. The legal basis for the internal redirect is Article 6(1)(f) GDPR. Our legitimate interest is a user-friendly redirect and funding the free service.

You then leave Kaufampel. Depending on the offer, your browser is sent to Amazon.de or via the Awin affiliate network (www.awin1.com) to a retailer. These recipients technically receive at least your IP address, browser information, the time, and the referring domain. Acting under their own responsibility, they may use cookies or other attribution technology to associate a later purchase with the affiliate link. Their privacy notices and consent controls apply. Our affiliate disclosure explains the commercial relationship.

• Awin Privacy Policy
• Amazon.de Privacy Notice

8. Contact by email

If you contact us by email, we process your email address and the message's content, time, and technical metadata to respond. The legal basis is Article 6(1)(b) GDPR where your request concerns entering into or performing a contract, and otherwise Article 6(1)(f) GDPR based on our interest in handling enquiries. Contracted email and IT providers may be recipients.

We delete correspondence when the matter has been completed and no statutory documentation or retention obligations or legitimate interests require continued storage. Email can pose security risks; do not send particularly sensitive information to us without encryption.

9. Cookies and similar technologies

Kaufampel currently sets no first-party advertising or analytics cookies and uses no comparable persistent identifiers for personalised tracking. We do not embed social-media pixels, advertising-network tags, or session replay. We therefore do not currently display a consent banner.

Cookies or other technology on external retailer, Amazon, or Awin pages are outside Kaufampel and subject to the settings provided there. If we add non-essential technology in the future, we will update this notice and obtain prior consent where required.

10. Recipients, processors, and international transfers

Recipients of personal data may be our hosting, database, error monitoring, email, and IT providers, in each case only where necessary for the stated purpose. We enter into processor agreements under Article 28 GDPR where required.

Vercel, Sentry, and PlanetScale are based in the USA or may process data there or through subprocessors. Where data is processed outside the European Economic Area, transfers rely, depending on the provider, on an adequacy decision—particularly valid certification under the EU-US Data Privacy Framework—and/or the European Commission's Standard Contractual Clauses plus supplementary safeguards. You may request copies or further information about the safeguards using the contact details above.

11. Retention

Where this notice does not specify a period, we retain personal data only for as long as necessary for the relevant purpose. It is then deleted or anonymised unless statutory retention obligations, security purposes, or the establishment, exercise, or defence of legal claims justify longer storage. Data held by service providers is also subject to their configured and contractually agreed deletion periods.

12. Your rights

Subject to the statutory conditions, you have the right in particular:

• to access under Article 15 GDPR,
• to rectification under Article 16 GDPR,
• to erasure under Article 17 GDPR,
• to restriction of processing under Article 18 GDPR,
• to data portability under Article 20 GDPR, and
• to object under Article 21 GDPR.

Send requests to business@buybridge.de. To prevent unauthorised disclosures, we may request appropriate proof of identity.

13. Right to lodge a complaint

You may lodge a complaint with a data-protection supervisory authority, particularly at your place of residence, workplace, or the place of an alleged infringement. The authority responsible for BuyBridge GmbH is:

14. Requirement to provide data and automated decisions

You are not legally or contractually required to provide personal data to us. Without technically necessary connection data, however, the website cannot be delivered; without a search term, search cannot return matching results.

Kaufampel does not make decisions about individuals based solely on automated processing that produce legal or similarly significant effects within the meaning of Article 22 GDPR. The traffic-light signal evaluates products and price histories, not users.

15. Security and changes

We use appropriate technical and organisational measures, including encrypted HTTPS transmission, access controls, and data minimisation. We update this privacy notice when functions, providers, or legal requirements change. The version published on this page is the current version.