This privacy policy describes which personal data is processed when you visit top-produkte.com. It refers to the website in its current technical state; services that are not used here are not listed.
1. Controller
The controller responsible for processing personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Yurii Pyliavskyi
c/o Hotel Pension Fischer
Nürnberger Str. 24A
10789 Berlin - Charlottenburg
Germany
E-mail: top.produkte.com@gmail.com
2. General information
Top-Produkte provides calculators, guides and information pages. Visitors currently cannot register on the website. The electricity cost calculator runs entirely in your browser: your inputs are neither sent to us nor to third parties and are not stored.
Unless stated otherwise, providing personal data is neither required by law nor by contract. No automated decision-making, including profiling, takes place.
In addition to the current content, the website contains older pages and posts that load additional external resources. These are described in section 10, separated into “on all pages”, “only on individual older pages” and “only after your action”.
3. Hosting and server log files
The website is operated by an external hosting provider. When a page is requested, the following connection data may be processed for technical reasons: IP address, date and time of the request, requested URL, status code, amount of data transferred, and information about browser and operating system.
The purpose is to deliver the website and to ensure its stability and security. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the secure and efficient operation of the website). The recipient is the hosting provider. The data is stored for as long as this is necessary for the operation and security of the website.
4. Technically necessary cookies and storage access
When the pages are loaded, the website, according to our review, sets only the following cookie without any interaction on your part:
- pll_language – stores the language (German or English) in which the website is displayed. Duration: 1 year. Set by the website’s language management (Polylang).
The website does not store any data in your browser’s local storage or session storage when you merely load a page. The legal bases for the cookie mentioned are Art. 6(1)(f) GDPR (legitimate interest in displaying the website in the correct language) and Section 25(2) no. 2 TDDDG (storage that is necessary so that the language display you requested can be provided).
For third-party content embedded on individual older pages (for example YouTube videos), the respective provider may additionally use cookies or similar technologies. Please refer to these providers’ privacy notices.
5. Contact by e-mail
The website has no contact form. If you contact us by e-mail, we process your e-mail address, the content of your message and the associated metadata in order to answer your request. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in answering enquiries).
The e-mail address provided is operated through the e-mail service Gmail (Google). Your message is therefore transmitted via and processed on this provider’s servers; processing outside the European Union cannot be ruled out.
We store your message until your request has been fully dealt with and no statutory retention obligations stand in the way.
6. Comments
The comment function is disabled on the website: no new comments can be submitted, and no forms for notifications about comments or new posts are offered.
Earlier comment entries stored before the function was disabled (name, e-mail address, where applicable website address, comment text, time and technical data, in particular the IP address) are still stored in the website’s database but are not publicly visible. The legal basis for continued storage is Art. 6(1)(f) GDPR (legitimate interest in the proper management of the data already stored). The entries remain stored until their deletion is requested or they are removed; you can object to the storage or request deletion (see section 12).
7. Newsletter and Mailchimp
On the page “Newsletter abonnieren” (/newsletter-abonnieren/) you can subscribe to a newsletter with your e-mail address. The form is an ordinary HTML form and asks only for the e-mail address. When you submit the form, your entry is sent directly to the service Mailchimp (server list-manage.com; provider based in the USA); Mailchimp’s response page opens in a new window. Without an e-mail address, a subscription is not possible.
When the newsletter page is opened, no scripts are loaded from Mailchimp or from its hosting providers. No data is transmitted to Mailchimp before you submit the form; a subscription only takes place when you submit it.
The purpose of the processing is sending the newsletter. The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time with effect for the future, for example informally by e-mail to top.produkte.com@gmail.com; the lawfulness of processing carried out before the withdrawal remains unaffected. We store your e-mail address until you unsubscribe or withdraw your consent.
Because Mailchimp may also process data in the USA, a transfer to a third country is possible.
8. Web Stories
The website publishes Web Stories (at /web-stories/). A Web Story is a standalone AMP document. When a story is opened, scripts and styles are loaded from cdn.ampproject.org (Google) and font files from fonts.googleapis.com (Google); your IP address is transmitted to Google. On the story pages themselves we found no cookies of our own and no entries in local storage during our review.
The overview page /web-stories/ and individual older posts in which Web Stories are embedded also load the story player from cdn.ampproject.org. This player is not loaded on any other page.
The legal basis is Art. 6(1)(f) GDPR (legitimate interest in displaying the stories).
9. WooCommerce and older shop area
The website still technically uses the shop system WooCommerce. The related pages (for example /shop/, /cart/ and /my-account/) are not part of the navigation and can only be reached by direct addresses. Placing an order is currently not possible: the cart shows only a notice that the shop is in preparation, the checkout redirects to the cart, and no payment methods are enabled. When merely opening these pages, we found no additional cookies and no entries in local storage during our review.
At /my-account/ there is a login form for existing user accounts; registration is not possible. When you log in, the credentials you enter are processed for authentication. Product pages in the older shop area link to online retailers via external links (see section 11).
10. External content and resources
10.1 On all pages
Image CDN of Jetpack (WordPress.com, Automattic). On all pages a pre-connection to i0.wp.com is established; on numerous pages images are delivered through this server. Your IP address is transmitted to the operator in the process; a transfer to a third country is possible. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in fast delivery of images). No statistics function of Jetpack is active on the website.
10.2 Only on individual older pages
- Google Fonts (fonts.googleapis.com, fonts.gstatic.com): font files are loaded from Google servers; your IP address is transmitted.
- YouTube (www.youtube.com): embedded videos are loaded when the page loads; your IP address is transmitted to YouTube (Google), and YouTube may use its own cookies or similar technologies.
- Google Maps (www.google.com/maps): a map is embedded on one events page; your IP address is transmitted to Google.
- Gravatar (secure.gravatar.com): profile pictures, for example of the author; your IP address is transmitted to Gravatar, and the image address contains a hash of the e-mail address of the person depicted.
- koala.sh (koala.sh, magnets.koala.sh): scripts of an external service are loaded; your IP address is transmitted to this service.
- Amazon (m.media-amazon.com): product images are loaded from Amazon servers; your IP address is transmitted.
- Other individual cases: individual pages load script or style files, images or audio files from further servers (for example cdn.tailwindcss.com, cdnjs.cloudflare.com, i.pravatar.cc, upload.wikimedia.org, www.soundjay.com).
The legal basis in each case is Art. 6(1)(f) GDPR (legitimate interest in displaying the respective content). The recipients are the providers named; some are based in the USA, so a transfer to a third country is possible.
10.3 Only after your action
- Amazon search forms: on individual older pages there is a search form that sends your search term to amazon.de or amazon.com in a new window only when you submit it.
- Share links: below posts there are links for sharing via Facebook, X, Pinterest, LinkedIn, WhatsApp and e-mail. These are plain links; data is only transmitted when you click a link.
- Newsletter: see section 7.
11. Links to online retailers and affiliate links in older content
Individual older content contains links to online retailers (for example Amazon) and may still contain affiliate links. Top-Produkte currently does not use any active affiliate programs. If you click such a link, you leave our website; the processing of your data is then governed by the privacy notices of the respective provider.
12. Your rights
Under the GDPR you have in particular the following rights: access to the data stored about you (Art. 15), rectification of inaccurate data (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20).
Where processing is based on Art. 6(1)(f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing (Art. 21). You can withdraw consent you have given at any time with effect for the future; withdrawing consent must be as easy as giving it (Art. 7(3)).
To exercise your rights, an e-mail to top.produkte.com@gmail.com is sufficient.
13. Right to lodge a complaint
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR (Art. 77 GDPR).