Privacy policy

1. Controller

The controller responsible for the processing is:

• Marco Frömbgen
• E-Mail: contact@portioncheck.com

2. Data minimisation as a principle

This service uses no user accounts. There is no newsletter, no advertising network building personal profiles and no analytics. We process only what running the service and keeping it secure require.

3. Hosting and server log files

The site is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, on servers located in Germany. A data processing agreement under Article 28 GDPR is in place with Hetzner. When you open a page, technically necessary access data is processed in server log files:

• the truncated or full IP address of the requesting device
• the date and time of the request
• the address requested and the volume of data transferred
• the referrer address, if your browser sends one
• browser type, browser version and operating system

4. Legal basis and deletion of log files

The legal basis is Article 6(1)(f) GDPR. The legitimate interest lies in delivering the site without technical faults, in its stability and in defending against attacks. Log files are deleted after 7 days at the latest, unless they are needed longer to investigate a specific security incident.

5. Discount codes and shop links

The discount codes shown are publicly available codes of the shops. No partner codes, no tracking links and no advertising networks are used. A code is printed on the page and entered in the shop only — no data is transferred to third parties beforehand.

• A link to a shop is an ordinary link. When you click it, your browser sends your IP address, the time and the target page to the shop, exactly as with any other link. Which cookies the shop sets is its own responsibility and its privacy notice applies.

6. Personal supplement stack

When you record which supplements you take, those entries may be health data under Art. 9(1) GDPR. The application does not store them in a database:

• The selection is held in the page address. It is therefore sent to our server on every request and may appear in server log files. This lets it survive as a bookmark and be shared. If you do not want that, do not save or share the address.

7. Recipients and processors

We pass on personal data only where this is necessary to provide the service or where a legal obligation exists. The hosting provider is our processor under a contract conforming to Art. 28 GDPR. We do not sell data.

8. Retention periods

We store personal data only for as long as it is needed for the respective purpose:

• server log files: 7 days
• email enquiries: until they are dealt with, then until statutory retention periods expire

9. Your rights

You have the following rights against the controller:

• access to the data processed, under Article 15 GDPR
• rectification of inaccurate data, under Article 16 GDPR
• erasure, under Article 17 GDPR
• restriction of processing, under Article 18 GDPR
• data portability, under Article 20 GDPR
• objection to processing based on legitimate interests, under Article 21 GDPR

10. Right to lodge a complaint with a supervisory authority

Irrespective of the above, you may lodge a complaint with a data protection supervisory authority under Article 77 GDPR, in particular with the authority of your habitual residence, your place of work or the place of the alleged infringement. The authority responsible for us is Der Landesbeauftragte für den Datenschutz Niedersachsen, Prinzenstraße 5, 30159 Hannover, Germany.

11. No automated decision-making

There is no automated decision-making, including profiling, within the meaning of Article 22 GDPR. The order in which products appear follows the published comparison criteria and not any analysis of your behaviour.

12. No obligation to provide data

Providing data is neither required by law nor by contract. Without the technically necessary access data, however, the page cannot be delivered to you.

13. Changes to this policy

We update this policy when the law, the service or our data processing changes. The version published on this page is the one that applies.