Buy European Logo

Search for a product, a company or a category.

Try

Privacy Policy

This privacy policy explains which personal data is processed when you visit Buy-European.net and when you submit suggestions or error reports, on what legal basis, and which rights data subjects have. The German version is authoritative.

1. Controller

Hanseatic Bits UG (haftungsbeschränkt) & Co. KG
Zeissstraße 1, 49733 Haren (Ems), Germany
Register court: AG Osnabrück, HRA 207769
Represented by its general partner Hanseatic Bits Verwaltungs UG (haftungsbeschränkt), AG Osnabrück, HRB 216773, represented by its managing director Philip Thomas
Phone: +49 5932 500 9803 · Email: info@buy-european.net

Data protection requests can be sent to this email address.

2. In short

  • Buy-European.net has no user accounts, no registration and no forum.
  • The website sets no cookies and builds no user profiles.
  • Fonts, icons and scripts come from our own servers. Visiting the site loads no resources from Google, Meta, advertising networks or other third parties.
  • Website and database run on Hetzner servers in Germany. The website is delivered through the content delivery network BunnyCDN (Slovenia).
  • Reach is measured with Plausible Analytics, without cookies and without storing IP addresses.
  • Suggestions and error reports are stored without name, email address or IP address.

3. Hosting and technical operation

We run the website on our own servers at Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany (processor under Art. 28 GDPR). The database (PocketBase) with the directory entries and the submitted suggestions and error reports is hosted there as well.

When the website is accessed, technically necessary connection data is processed: IP address, date and time, requested address, referrer URL, browser and operating system. It is needed to deliver the page and keep operation secure. Our application keeps no logs of page views. The database (PocketBase) logs the requests it receives for troubleshooting and deletes these logs automatically after five days. These requests come from our application and from the CDN, so the logs contain no visitor IP addresses, but for logo requests they do contain the browser identifier and the referring page. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a secure and functioning website).

4. Delivery through BunnyCDN

The pages of the website and the logos of directory entries are delivered through the content delivery network BunnyCDN of BunnyWay d.o.o., Dunajska cesta 165, 1000 Ljubljana, Slovenia (processor under Art. 28 GDPR). The request is routed to a Bunny server near the visitor. Bunny processes the technical connection data, mainly the IP address, to cache and deliver content and to protect against abuse. According to Bunny, IP addresses in access logs are anonymized by default. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in fast and secure delivery of the website). More information: https://bunny.net/privacy/

5. Reach measurement with Plausible Analytics

We use Plausible Analytics for reach measurement. We run the software ourselves on Hetzner servers in Germany. Measurements do not go from the browser straight to a third-party server: the script is served by Buy-European.net itself, and measurements pass through our own server, which forwards them to our Plausible installation. In doing so, our server passes the visitor's IP address on to Plausible so that visits can be told apart.

Plausible sets no cookies, stores nothing on the device and builds no user profiles. The IP address is not stored. It is only combined with the browser identifier (user agent) and a daily changing random value into an identifier that cannot be reversed and can no longer be matched after 24 hours. Aggregated data is recorded, such as page viewed, referrer, country, device type, browser and operating system, as well as clicks on external links, downloads (for example logos) and form submissions. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in improving the site).

6. Suggestions and error reports

Companies and products can be suggested through the "Submit Suggestion" form. The name is submitted, plus optionally category, country, website and a link to the logo. Product pages also have a "Report data error" button; it submits the address of the page and the text entered. Name and email address are not requested. We do not store the IP address or browser data with suggestions or error reports.

The data reaches our database through our server, is reviewed by us and may be incorporated into the directory. Information about companies then appears as a directory entry without any link to the person who submitted it. Please do not enter personal data in the free-text fields, neither your own nor anyone else's. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in maintaining an up-to-date and accurate directory).

Suggestions and reports stay stored as long as they are needed to maintain the directory and to document our decisions. If they contain personal data, it is deleted on request. Directory entries remain until they are changed or removed.

7. Search

Search terms from the search function are routed through BunnyCDN to our server, which queries the database and returns the results. We do not store or analyze the search terms. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a working search).

8. Contact by email or phone

When you contact us by email (for example info@buy-european.net or press@buy-european.net) or phone, your name, contact details and the content of the message are processed to answer your request. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in answering inquiries) or, for contract-related requests, Art. 6(1)(b) GDPR. Messages are deleted once the matter is closed, unless statutory retention periods apply (for example six years for business letters under § 257 HGB and § 147 AO). The mailboxes are hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany (processor under Art. 28 GDPR).

9. External links and social networks

The website contains links to the websites of listed companies and to social networks such as Mastodon, Lemmy and Bluesky. No plugins, buttons or embeds of these services are included, and no data is sent to them when the website is accessed. Only when a link is clicked does the operator of the target site process data under its own privacy policy. The privacy notices of the respective providers also apply to the profiles we maintain on these networks.

10. Cookies and local storage

This website sets no cookies. The browser only keeps technically necessary navigation data, such as the scroll position when going back, in session storage (sessionStorage). It is deleted when the tab is closed. If you switch the appearance to light or dark with the toggle, the browser stores this choice in local storage (localStorage, key "theme") until you select "System" again. Without a click nothing is stored and the site follows your device setting. Under § 25(2) no. 2 TDDDG neither needs consent, which is why there is no cookie banner.

11. Third countries and automated decisions

We ourselves do not transfer personal data to countries outside the European Economic Area. There is no automated decision-making including profiling under Art. 22 GDPR. Providing personal data is neither required by law nor by contract; suggestions and reports are voluntary.

12. Rights of data subjects

Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). An informal email to info@buy-european.net is enough to exercise them. If you ask for a suggestion or report to be deleted, please describe its content as precisely as possible, because they are not stored in connection with a person.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for the controller's seat is the Landesbeauftragte für den Datenschutz Niedersachsen (LfD, the State Commissioner for Data Protection of Lower Saxony), Prinzenstraße 5, 30159 Hannover, Germany, email: poststelle@lfd.niedersachsen.de, www.lfd.niedersachsen.de. You can also complain to the authority in your place of residence or the place of the alleged infringement.

13. Changes

This privacy policy is updated when the website or the legal situation changes. The version published here applies.

Last updated: 11 October 2026