Privacy policy

1. Controller

The controller for this website under the GDPR is:

Hegauwerk
Owner: Meiko Singh
Am Sportplatz 15
78259 Mühlhausen-Ehingen
Germany
Email: info@hegauwerk.de

2. Hosting

This site is hosted by STRATO AG, Pascalstraße 10, 10587 Berlin, Germany (www.strato.de). The host processes technically necessary data (e.g. server logs) on our behalf. Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest in secure operation).

3. Server log files

When you visit the site, our system may collect technical data sent by your browser, including: IP address (we do not store it in plain text; see “Pseudonymisation”), browser type/version, time of access, requested resource/HTTP status. Purpose: security and stability. Legal basis: Art. 6 (1) lit. f GDPR.

4. Affiliate click tracking

We participate in affiliate programmes of various providers (including the Amazon Associates Programme; we may add others such as eBay Partner Network where indicated on the site).

When you click outbound partner links (e.g. to Amazon), you are taken via an internal redirect (tracking link). We may record which product was clicked, time of click, language, and a technical fingerprint for abuse prevention (without storing your full IP in plain text).

As an Amazon Associate we earn from qualifying purchases.

Affiliate click tracking is used only with your consent (cookie banner). Legal basis: Art. 6 (1) lit. a GDPR.

5. Internal statistics

We may process anonymised statistics about page views to improve our service. No profiling. Legal basis where used: Art. 6 (1) lit. a GDPR (consent).

6. Cookies & local storage

We use essential cookies (e.g. language, session/CSRF). With consent we set additional consent cookies and, if approved, data for statistics and affiliate attribution. Your choice is also stored in localStorage under “bestpicks_cookie_consent”.

7. Retention & pseudonymisation

We do not store full IP addresses in access/click logs. A pseudonymous checksum is used (including truncation for IPv4 to network level /24 before hashing).

8. Third parties

When you visit partner sites, their privacy policies apply (e.g. Amazon, eBay).

9. Your rights

You have the right of access, rectification, erasure, restriction, objection and, where applicable, data portability. You may withdraw consent at any time with future effect (cookie settings). You may lodge a complaint with a supervisory authority.

10. Changes

We update this policy when our processing or the law changes. The version published here applies.