PrivacyWhat this site does with data.
Updated 4 November 2026
Controller
The controller is the operator named in the imprint, reachable at the email address given there.
Cookies and analytics
Traffic to this site is measured in aggregate with Cloudflare's analytics, which sets no cookies; see Cloudflare's privacy notice linked below.
If you click Accept in the cookie banner, we also use Google Analytics to see which pages are read, how visitors arrive and which links they follow. Nothing from Google loads before you accept, and if you reject or ignore the banner it never loads. Google Analytics then sets two cookies, _ga and _ga_<id>, which hold a random identifier and last up to 13 months. It records the pages you view, the time, your approximate location, your browser and device type, and the page you came from. Google Analytics 4 does not store IP addresses; Google uses the address to derive an approximate location and then discards it. Google signals and ad personalisation are switched off, and the data is not used for advertising. Google keeps the data for 2 months, then deletes it.
The legal basis is your consent (Art. 6 (1) a GDPR and § 25 (1) TDDDG). You can withdraw it at any time with the Cookie settings link at the bottom of every page; choosing Reject there deletes the analytics cookies. Google Analytics is provided by Google Ireland Limited as our processor, named below. Google may transfer the data to Google LLC in the USA, which is certified under the EU-US Data Privacy Framework; the standard contractual clauses in Google's processing terms apply as well.
Your choice is stored in your browser as one value, ac-cookie-consent, so the banner does not reappear. Filters on the catalogue page are kept in the page address only. No fonts, scripts or media are loaded from any other third party.
Visiting the site
When you open a page, the hosting provider receives the technical data any web request carries: your IP address, the page requested, the time, the browser type and the referring page. It is used to deliver the page and to defend the site against abuse (Art. 6 (1) f GDPR). The provider keeps request logs for a short period as described in its own notice, linked below.
Submitting an agent or sending a message
The two forms send what you type to a small function at this site's address, which checks it and stores it in a database. For a submission that is the agent's details plus your name, email and your relationship to the agent. For a message it is your name, email, the reason you chose and the details that reason asks for: the listing, a source link, your role or your company, and your text. The data is used to check the listing or to reply to you (Art. 6 (1) b and f GDPR). It is kept for 12 months after it was last handled, then deleted. Nothing is passed to the vendor of an agent unless you ask for that in the message.
So that nothing sits unread, the database sends one email with the contents of each new submission or message to the operator's mailbox. That email passes through the operator's automation server and mailbox provider, both named below, and stays in the mailbox as long as the correspondence about it is open, then within the same 12 months.
If you tick the box on the submit form asking to be kept informed, we may email you when your listing goes live or changes and about updates for vendors (Art. 6 (1) a GDPR). You can withdraw that at any time by replying to any such email or writing to the address in the imprint; without the box ticked you only hear from us about the submission, including the payment link for its listing.
If your submission qualifies, we email you a link to a payment page hosted by Stripe, named below. Stripe collects your payment details on that page, and this site never sees them. We receive the payment's status, your name, your email and your billing details, and use them to process the listing and issue the invoice (Art. 6 (1) b and c GDPR). Invoices and payment records are kept for as long as German tax and commercial law requires, which can be longer than the 12 months above.
Each form has a hidden field that only automated senders fill in; such entries are discarded. Requests to the form endpoints are rate-limited by the hosting provider to keep out floods.
Processors
- Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA: Hosting and delivery of the site, and the two form endpoints. Data processing agreement, privacy notice.
- Supabase, Inc., 970 Toa Payoh North #07-04, Singapore 318992: Database that stores submissions and messages. Data processing agreement, privacy notice.
- Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany: Hosts the operator's automation server (n8n), which passes each new submission or message on to the mailbox (ADR-018). Data processing agreement, privacy notice.
- Google Workspace (Google Ireland Limited), Gordon House, Barrow Street, Dublin 4, Ireland: The operator's mailbox, which receives one email per submission or message and carries the reply. Data processing agreement, privacy notice.
- Google Analytics (Google Ireland Limited), Gordon House, Barrow Street, Dublin 4, Ireland: Google Analytics, which measures how the site is used, only after you accept it in the cookie banner (ADR-023). Data processing agreement, privacy notice.
- Stripe Payments Europe, Limited, Dublin, Ireland: Takes payment of the listing fee on its own hosted page (ADR-022). Data processing agreement, privacy notice.
Data may be processed in Germany, Ireland, the USA and Singapore under the EU standard contractual clauses included in those agreements, and for transfers to US companies certified under it, the EU-US Data Privacy Framework.
Your rights
You can ask for access to your data, for correction or deletion, for restriction of processing, and for a copy in a portable form, and you can object to processing based on legitimate interest (Art. 15 to 21 GDPR). Write to the address in the imprint. You can also complain to a supervisory authority, for example the Berliner Beauftragte für Datenschutz und Informationsfreiheit.
Listings and vendors
Listings contain business information about companies and products from their public pages. If a listing names you as a person and you would like it changed, use the contact form.