Sign in

Here is the fully translated and legally aligned English version of your privacy policy for Refurbily. The terminology is matched exactly to the official English GDPR (General Data Protection Regulation) definitions.

Privacy Policy

1. Privacy at a Glance

General Information

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified.

Data Collection on This Website

Data processing on this website is carried out by the website operator. We operate our technical infrastructure on servers located in Germany. In doing so, we utilize hosting and infrastructure service providers (IONOS SE, Hetzner Online GmbH and netcup GmbH). We have concluded data processing agreements (DPA) pursuant to Art. 28 GDPR with these providers.

2. Controller (Responsible Party)

The controller responsible for data processing on this website is:

Tobias Klemp – Refurbily c/o Online-Impressum #8839

Europaring 90

53757 St. Augustin

Germany

Email: info@refurbily.de

3. Your Rights

You have the right at any time to:

  • Access (Art. 15 GDPR)

  • Rectification (Art. 16 GDPR)

  • Erasure / Right to be forgotten (Art. 17 GDPR)

  • Restriction of processing (Art. 18 GDPR)

  • Data portability (Art. 20 GDPR)

  • Withdrawal of consent (Art. 7 Abs. 3 GDPR)

  • Object to processing (Art. 21 GDPR)

To exercise your rights, a simple informal notification to the email address listed above is sufficient. You also have the right to lodge a complaint with a competent data protection supervisory authority.

4. Hosting and Server Log Files

Hosting

We host the content of this website with the external service providers IONOS SE (Elgendorfer Str. 57, 56410 Montabaur, Germany), Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen) and netcup GmbH (Emmy-Noether-Straße 10 Germany). Processing takes place exclusively on servers in Germany on the basis of data processing agreements (Art. 28 GDPR).

Server Log Files

When you visit the website, information is automatically collected and stored in server log files. This data is transmitted by your browser and includes in particular:

  • IP address (shortened promptly for anonymization)

  • Date and time of the request

  • Requested page / file

  • Referrer URL (the previously visited page)

  • Browser type and version

  • Operating system used

The processing is carried out to ensure technical operation, error analysis, and to defend against cyberattacks on the legal basis of Art. 6 (1) (f) GDPR (legitimate interest in operational security). The log files are automatically deleted after 30 days at the latest, unless further retention is required for security-related investigations (e.g., to clarify an attack).

5. Registration and User Account

Registration

When you register using an email address and password, we process your email address and a cryptographically encrypted password. This data is stored on our servers in Germany. The processing is carried out to provide the user account in accordance with Art. 6 (1) (b) GDPR (performance of a contract).

Account Data and Content

As part of using your user account, we also process the content and settings actively saved by you, specifically:

  • Set up price alerts

  • Recently viewed products

  • Notification settings

This processing is carried out to provide the functions requested by you in accordance with Art. 6 (1) (b) GDPR. The data is stored as long as the user account exists. You can delete your user account at any time in your account settings. Upon deletion, the associated data will be deleted immediately, unless statutory retention periods prevent erasure.

6. Login with Google (Single Sign-On)

You can optionally log in using your existing Google account. The provider of this service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

When using this feature, you will be redirected to Google. We only receive the basic data required for registration from Google (specifically your email address and name). This processing is carried out to provide the selected login function on the basis of Art. 6 (1) (b) GDPR (performance of a contract or pre-contractual measures).

The authentication itself is carried out by Google under its own data protection responsibility. It cannot be ruled out that data will be transmitted to the parent company, Google LLC, in the USA. Google is certified under the EU-US Data Privacy Framework (DPF), which guarantees an adequate level of data protection. In addition, EU Commission Standard Contractual Clauses (SCCs) are used as an additional safeguard. Further information can be found in Google's privacy policy.

7. Email Dispatch via Resend

For the technical dispatch of transactional emails within the scope of your user account (e.g., account confirmation, password reset, and triggered price alerts), we use the service Resend. The provider is Resend, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA.

In this context, your email address and the transactional content of the respective message are transmitted to Resend and temporarily processed there. The processing is carried out to fulfill our contractual obligations to you pursuant to Art. 6 (1) (b) GDPR as well as on the basis of our legitimate interest in a reliable and fast email delivery system pursuant to Art. 6 (1) (f) GDPR.

We have concluded a Data Processing Addendum (DPA) pursuant to Art. 28 GDPR with Resend. Since a transfer of data to the USA takes place, we point out that Resend is certified under the EU-US Data Privacy Framework (DPF) and that the data transfer is additionally based on the Standard Contractual Clauses of the EU Commission.

8. Web Analytics (Rybbit)

We use the privacy-friendly web analytics tool Rybbit for statistical evaluation and optimization of our website.

Rybbit is fully self-hosted on our own infrastructure in Germany. At no time is analytical data transmitted to third parties. The analysis is carried out completely without the use of cookies. It is impossible to assign the data to individual persons or user accounts; even after a login, no account data is linked to the analytical data. IP addresses are immediately anonymized before storage.

The processing is carried out on the basis of our legitimate interest in reach measurement and the error-free optimization of our services pursuant to Art. 6 (1) (f) GDPR.

9. Affiliate Links (Redirection to Partner Shops)

Our website contains affiliate links (recommendation links) to partner shops that offer refurbished products.

If you click on such a link, you will be redirected via a forwarding URL directly to the website of the respective provider. Only from the moment of the click and redirection does the user leave our platform, and data processing is then carried out by the respective target provider under its own data protection responsibility. Depending on the target provider, technical information may be processed there (e.g., via cookies or URL parameters) in order to track the origin of the visit and allocate a potential commission.

The provision of these links on our platform is based on our legitimate interest in the commercial financing of our free comparison portal pursuant to Art. 6 (1) (f) GDPR.

10. Website Security

For security reasons and to protect the transmission of confidential content (such as login data or price alert settings), this website uses state-of-the-art SSL/TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser bar.

11. No Automated Decision-Making

Automated decision-making or profiling within the meaning of Art. 22 GDPR does not take place on our website.

12. Changes to This Privacy Policy

We reserve the right to amend this privacy policy to adapt it to changed legal frameworks or technical innovations (e.g., the integration of new features or partner networks). The current privacy policy at the time of your visit will apply to any subsequent visits.