Privacy Policy

Working translation. The German version is legally binding. This policy is a working draft – please have it reviewed by a lawyer or data protection officer before going live.

1. Controller

Bewertungsheld.org, Schillingstr. 1, 09648 Mittweida
Email: info@bewertungsheld.org

2. Visiting this website

When you visit our website, the hosting provider automatically records server log files (IP address, date/time, page accessed, browser type). Processing is based on our legitimate interest in the secure operation of the website (Art. 6 (1) (f) GDPR). The log files are deleted after a short period.

3. Contact and order form

If you send us an enquiry via the contact form or the order form, your details are stored for the purpose of processing the enquiry and for any follow-up questions. The legal basis is Art. 6 (1) (b) or (f) GDPR. The data is deleted as soon as the purpose no longer applies and no statutory retention periods prevent deletion.

4. Connection to the Google Business Profile

If you connect your Google Business Profile, the official Google Business Profile API is used. You thereby grant us access to the reviews of your profile. We store the access data (refresh token) in encrypted form on our server and use it exclusively to read reviews, prepare reports and verify results. We do not delete reviews; Google alone makes that decision.

The legal basis is Art. 6 (1) (b) GDPR (performance of a contract) in conjunction with your consent in Google's authorisation dialog. You can revoke the connection at any time; this deletes the stored access data.

5. Payments via PayPal

For payment processing we use the payment service provider PayPal (Europe) S.à r.l. or PayPal (Europe) Ltd. A contractual relationship for the payment services is required with these providers. Your payment data is transmitted directly to PayPal and we only store the transaction (amount, reference, status). PayPal's privacy policy applies in addition.

6. Hosting and server logs

6.1 Google Analytics

This website uses Google Analytics (GA4) to analyse website usage in anonymised form and to improve our services. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The measurement ID is G-JGLGMWQ3VR.

No usage profiles are created. Google Analytics generally operates in IP anonymisation mode; the full IP address is not stored. Beyond the stored data, we do not transfer any personal data to third parties.

The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest is the statistical evaluation of page views and the improvement of our services. Integration is automatic via the base template; a separate opt-in is not required because no usage profiles are created.

7. Email delivery

To send order confirmations, invoices and notifications, we use the email delivery service Brevo (Sendinblue SAS, 37 rue de l'Ourcq, 75019 Paris, France). Emails are sent via Brevo's API; your email address, the subject and the content of the message are transmitted to Brevo. Your personal data is processed to provide the service you have commissioned (Art. 6 (1) (b) GDPR) and based on our legitimate interest in reliable delivery (Art. 6 (1) (f) GDPR).

8. Retention

Invoice data is retained in accordance with commercial and tax law requirements (generally ten years pursuant to § 147 of the German Fiscal Code (AO) and § 14b of the German VAT Act (UStG)).

9. Your rights

You have the right to information (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to object (Art. 21). You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).

10. Note on Google

BewertungsHeld is an independent software tool and is not affiliated with Google LLC. Google is a trademark of Google LLC. Google alone decides whether a review is removed.