Privacy Policy

1. Data Controller

The controller under the General Data Protection Regulation (GDPR), applicable national data protection laws, and other data protection provisions is:

2. Collection and Storage of Personal Data

When you visit our Website, general information is collected automatically. These server logs may include your browser type, operating system, internet service provider's domain name, IP address, and similar technical data.

We otherwise collect personal data only when you provide it voluntarily, such as when completing a contact form, placing an order, or registering on our Website. Unless there is another legal basis, we do not collect personal data without your knowledge and consent.

Your IP address is recorded during your visit and deleted automatically when the retention period expires. It is stored to protect the Website and prevent misuse.

3. Use of Personal Data

We process your personal data for the following purposes:

• Processing contracts and orders
• Answering inquiries and communicating with you
• Improving our Website and services
• Compiling statistics about Website use
• Meeting legal and record-retention obligations
• Preventing fraud and protecting our systems

We disclose personal data to third parties only when required to perform a contract, when you have consented, or when we are legally required to do so. We do not disclose your data to third parties for their own commercial purposes.

Processing on this Website is based on Article 6(1)(b) GDPR (performance of a contract), Article 6(1)(f) GDPR (legitimate interests), and your express consent under Article 6(1)(a) GDPR.

4. Cookies

Our Website uses cookies. These are small text files that your browser creates automatically and stores on your device when you visit the Website. Cookies do not contain personal data and cannot be used to identify you personally.

We use the following types of cookies:

• Essential cookies: These cookies are required to operate the Website and cannot be disabled. They include session cookies used for security and functionality.
• Functional cookies: These cookies enable enhanced features and a personalized experience, such as storing language preferences.
• Analytics cookies: These cookies help us understand how visitors interact with the Website so that we can continuously improve the user experience.

You can configure your browser to notify you when cookies are set, allow cookies in individual cases, reject cookies in certain cases or generally, and delete cookies automatically when you close the browser.

Disabling cookies may limit some Website functionality.

5. Third-Party Services

We use third-party services that may process data:

• Payment provider: We use DodoPayment to process payments. Data is processed as part of the payment transaction in accordance with the payment provider's privacy policy.
• WhatsApp: The WhatsApp contact button transmits data to WhatsApp Inc., a Meta Platforms Inc. company. Using the button sends your IP address and potentially other data to WhatsApp.
• CDN services: We use content delivery network services to deliver the Website quickly. These services may create server logs containing IP addresses.

Where required, we have entered into data processing agreements with these providers under Article 28 GDPR to protect your data.

6. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access (Article 15 GDPR): You may request information about the personal data we process.
• Right to rectification (Article 16 GDPR): You may have inaccurate personal data corrected.
• Right to erasure (Article 17 GDPR): You may request deletion of your personal data unless legal retention obligations apply.
• Right to restriction (Article 18 GDPR): You may request that processing of your data be restricted.
• Right to data portability (Article 20 GDPR): You may receive your data in a structured, commonly used, machine-readable format.
• Right to object (Article 21 GDPR): You may object to the processing of your personal data.
• Withdrawal of consent (Article 7(3) GDPR): You may withdraw consent to data processing at any time.
• Right to lodge a complaint (Article 77 GDPR): You may lodge a complaint with a data protection supervisory authority.

To exercise these rights, contact info@buysreviews.com. We will respond as soon as possible and no later than 30 days after receiving your request.

7. Data Security

We use SSL (Secure Socket Layer) with the highest level of encryption supported by your browser. Transmitted data cannot be read by third parties.

We use technical and organizational measures to protect your data against unauthorized access, loss, misuse, or falsification. We update these safeguards continuously as technology develops.

Technical measures include encrypted data transmission, restricted system access, regular security reviews, and firewalls. Organizational measures include staff data protection training and strict compliance with internal privacy policies.

8. Retention of Personal Data

We retain personal data only for as long as necessary to fulfill the purpose for which it was collected. Data processed on the basis of consent is retained until you withdraw that consent, subject to any legal obligations.

Contract data is retained for 6 years after performance under applicable statutory requirements (Section 257 HGB and Section 147 AO). Invoices are retained for the statutory period of 10 years.

Server logs are deleted automatically after no more than 30 days unless they are needed to investigate a security incident.

9. Contact for Data Requests

For questions about how your personal data is processed, access requests, or to exercise your rights, contact: