Privacy Policy

1. Introduction

We, Reputech, take the protection of your personal data very seriously. This Privacy Policy explains how we collect, use, and process personal data when you use our website or services. It is based in particular on the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

2. Data controller

The controller responsible for processing your personal data is:

BewertungsHeld LLC
Delaware, United States of America
Email: [email protected]

3. Data we collect

We may collect and process, in particular, the following data:

• Contact details: name, email address, and telephone number
• Account information: email address and password
• Cookies and tracking technologies (see Section 8)
• Order and advertising data: order value, order time, and advertising click identifiers, such as Google Click ID and Microsoft Click ID (see Section 8)

4. Purposes and legal bases for processing

We process your data for the following purposes:

• To provide and maintain our website and services (Article 6(1)(b) GDPR)
• To respond to inquiries (Article 6(1)(f) or (b) GDPR)
• To improve our services (Article 6(1)(f) GDPR)
• To comply with legal obligations (Article 6(1)(c) GDPR)
• For marketing, where consent has been given (Article 6(1)(a) GDPR)

5. Disclosure of data

We disclose personal data to third parties only where necessary, for example to:

• Service providers, such as hosting and analytics providers
• Authorities, where we are legally required to do so
• Third-party tools, only with your consent, such as newsletter providers
• Advertising platforms for conversion measurement, only with your consent (Google Ireland Limited and Microsoft Ireland Operations Limited; see Section 8)

All service providers are contractually required to handle your data securely and confidentially.

6. Transfers of data outside the EU

If we transfer personal data outside the European Economic Area (EEA), we do so only to countries with an adequate level of data protection or on the basis of appropriate safeguards, in particular standard contractual clauses approved by the European Commission.

7. Data retention

We store personal data only for as long as necessary for the purposes described in this Privacy Policy or as required by statutory retention obligations.

8. Cookies and tracking technologies

We use cookies to improve the user experience and analyze use of our website. You can choose whether to accept or reject cookies through our cookie banner.

You can also configure your browser to disable cookies. This may limit website functionality.

8.1 Conversion measurement for advertising (Google Ads and Microsoft Advertising)

We run ads through Google Ads (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) and Microsoft Advertising (Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland). To measure whether an ad led to an order and to optimize our advertising, we process the following data only if you have consented to marketing in the cookie banner:

• The click identifier provided when you clicked an ad (Google Click ID or Microsoft Click ID), along with usage data collected through the Google tag or Microsoft UET tag on our website
• Order value, currency, and order time
• For order attribution (“enhanced conversions”), your email address and, for Google only, your telephone number. Before transmission, our servers hash these details using SHA-256, converting them into an unreadable string. Google or Microsoft compares the string only with user accounts to attribute orders to ads that were previously clicked.

After your order, we also transmit this data to Google or Microsoft server-side (offline conversion import). We do not make this transmission without your consent. The legal basis is your consent under Article 6(1)(a) GDPR and Section 25(1) TDDDG. You can withdraw your consent at any time with future effect through our cookie banner.

Google and Microsoft may also transfer data to the United States. Both companies are certified under the EU-US Data Privacy Framework; EU standard contractual clauses also apply. For more information, see the privacy policies of Google and Microsoft.

9. Your rights

Under the GDPR, you have in particular the following rights:

• Right of access (Article 15 GDPR)
• Right to rectification (Article 16 GDPR)
• Right to erasure (Article 17 GDPR)
• Right to restriction of processing (Article 18 GDPR)
• Right to data portability (Article 20 GDPR)
• Right to object (Article 21 GDPR)
• Right to withdraw consent with future effect (Article 7(3) GDPR)
• Right to lodge a complaint with a supervisory authority (Article 77 GDPR)

The competent authority in Germany is:

Federal Commissioner for Data Protection and Freedom of Information (BfDI)
bfdi.bund.de

10. Changes to this Privacy Policy

We reserve the right to change this Privacy Policy at any time. The current version is available on our website.

11. Contact

If you have questions about this Privacy Policy or how we handle your data, contact us at:

BewertungsHeld LLC
Email: [email protected]