1. Who We Are
Website: product-compass.com
Purpose: Product comparison and affiliate marketing website
Location: Operating internationally with focus on EU markets (Bulgaria, Romania, and other EU member states)
2. What Data We Collect
2.1 Data You Provide Directly
We currently do NOT collect any personal data directly from you. Our website does not have:
- Registration or login forms
- Newsletter subscriptions
- Contact forms
- User accounts
2.2 Data Collected Automatically
When you visit our website, we may automatically collect:
- Technical Data: IP address, browser type, device information, operating system
- Usage Data: Pages visited, time spent on pages, referral source, click behavior
- Cookies: Small text files stored on your device (see Cookie Policy section)
2.3 Third-Party Data Collection
Our affiliate partners and analytics providers may collect data when you interact with their services:
- Amazon Associates: When you click affiliate links
- Other Affiliate Networks: Impact.com, Commission Junction, etc.
3. How We Use Your Data
We use automatically collected data for:
- Website Operation: To provide and maintain our service
- Performance Analysis: To understand how visitors use our site
- Improvement: To improve content and user experience
- Fraud Prevention: To detect and prevent malicious activity
- Legal Compliance: To comply with legal obligations
4. Legal Basis for Processing (GDPR)
Under GDPR, we process your data based on:
- Legitimate Interest (Art. 6(1)(f)): Operating a product comparison website and analyzing usage patterns
- Consent (Art. 6(1)(a)): For non-essential cookies (where applicable)
- Legal Obligation (Art. 6(1)(c)): When required by law
5. Third-Party Services & Data Sharing
5.1 Affiliate Partners
We participate in affiliate marketing programs. When you click our affiliate links and make purchases:
- Amazon Associates: May track your activity via cookies
- Other Networks: May use tracking pixels and cookies
We do NOT have access to your payment information or purchase details.
5.2 Analytics Services
We may use analytics services to understand site usage. These services may collect:
- Page views and navigation patterns
- Device and browser information
- Geographic location (country/city level)
5.3 Hosting Provider
Our website is hosted on servers located in Germany (Hetzner). Server logs may temporarily store IP addresses for security purposes.
6. Cookies and Tracking Technologies
We use cookies to improve your experience. Types of cookies:
6.1 Essential Cookies
Required for website functionality. Cannot be disabled.
6.2 Affiliate Cookies
Track clicks on affiliate links to credit us with referrals.
6.3 Analytics Cookies
Help us understand site usage and improve content.
Managing Cookies: You can control cookies through your browser settings. Blocking cookies may affect website functionality.
7. Your Rights Under GDPR
If you are an EU/EEA resident, you have the following rights:
- Right to Access (Art. 15): Request a copy of your personal data
- Right to Rectification (Art. 16): Correct inaccurate data
- Right to Erasure (Art. 17): Request deletion of your data ("right to be forgotten")
- Right to Restrict Processing (Art. 18): Limit how we use your data
- Right to Data Portability (Art. 20): Receive your data in a portable format
- Right to Object (Art. 21): Object to processing based on legitimate interest
- Right to Withdraw Consent (Art. 7): Withdraw consent at any time
- Right to Lodge a Complaint: File a complaint with your local data protection authority
To exercise your rights, contact us:
Note: Since we do not directly collect personal identifiable information, most data rights requests will involve our third-party service providers.
8. Data Retention
- Server Logs: Retained for 30 days
- Analytics Data: Anonymized after 14 months
- Affiliate Cookies: Expire after 24 hours to 90 days (varies by network)
9. International Data Transfers
Your data may be transferred to and processed in countries outside the EU/EEA:
- United States: For affiliate network services
- Protection: Transfers comply with GDPR through Standard Contractual Clauses or adequacy decisions
10. Children's Privacy
Our website is not directed at children under 16. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us immediately.
11. Data Security
We implement appropriate technical and organizational measures to protect data:
- HTTPS encryption for all connections
- Regular security updates
- Access controls and monitoring
- Secure server infrastructure
12. Changes to This Policy
We may update this privacy policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Continued use of the website after changes constitutes acceptance of the new policy.
13. Supervisory Authorities
You have the right to lodge a complaint with a data protection authority:
- Bulgaria: Commission for Personal Data Protection (CPDP) - www.cpdp.bg
- Romania: National Supervisory Authority for Personal Data Processing (ANSPDCP) - www.dataprotection.ro
- EU List: European Data Protection Board
14. Contact Us
For privacy-related inquiries, data rights requests, or concerns:
Website: product-compass.com
Response Time: We aim to respond within 30 days (as required by GDPR)