Last Updated on 04. September 2026 by Martin Kraus

Privacy Policy

Data Controller

The data controller responsible for processing personal data on this website is:

Martin Kraus
Ilse-Weber-Str. 18
80686 Munich
Germany

E-mail: datenschutz@delavo.de

General information on data processing

Protecting your personal data is important to us. Personal data processed on this website is handled in accordance with applicable data protection law, in particular the EU General Data Protection Regulation (GDPR).

This privacy policy explains what types of personal data may be processed when you visit this website or use its functions, for what purposes and on what legal basis the data is processed, and what rights you have in this regard.

Data collected when visiting the website

Server log files

When you access this website, the hosting provider may automatically collect and store information in so-called server log files. This information may include, in particular:

  • IP address of the requesting device
  • Date and time of access
  • Requested page or file
  • HTTP status code
  • Browser type and browser version
  • Operating system used
  • Referrer URL

These data are processed primarily for the technical provision, security, stability and optimization of the website, as well as for the investigation of technical errors and security incidents. The data is not intentionally combined with other data sources for profiling purposes.

Legal basis

The legal basis for processing is Article 6(1)(f) GDPR (our legitimate interest in the secure, stable and technically reliable operation of the website).

Hosting

This website is hosted by the following provider:

netcup GmbH
Daimlerstraße 25
76185 Karlsruhe
Germany

According to the information available to us, the servers used for this website are located in Germany (Nuremberg).

There is a data processing agreement (DPA) between the website operator and netcup GmbH in accordance with Article 28 GDPR, insofar as required for the respective processing.

The hosting provider processes personal data to the extent necessary to provide its hosting and technical infrastructure services and in accordance with the applicable contractual and legal requirements.

Legal basis:
Article 6(1)(f) GDPR; Article 28 GDPR where applicable.

Cookies

At present, this website does not use cookies for analytics or marketing purposes that require consent.

Technically necessary cookies may be used where they are required for the operation, security or correct display of the website, for example in connection with the WordPress content management system.

Legal basis:
Article 6(1)(f) GDPR. Strictly necessary technologies do not generally require consent under applicable law.

Analytics and tracking

Currently, we do not use independent analytics or tracking services such as Google Analytics, Matomo or pixel-based analytics services on this website.

Affiliate links and external partner offers may nevertheless involve technical attribution mechanisms. These are described in more detail in the section “Affiliate programs and tracking”.

If additional analytics or tracking services are introduced in the future, this privacy policy will be updated accordingly and, where required by law, consent will be obtained before such technologies are activated.

Contact

This website provides a contact form that allows you to reach us directly. The personal data you enter, such as your name, email address, topic, message and, where provided, website information, is processed for the purpose of handling and responding to your inquiry.

To prevent spam, we use a privacy-friendly honeypot mechanism. No external spam protection service such as Google reCAPTCHA is used for this purpose.

Legal basis:

  • Article 6(1)(b) GDPR, where your inquiry relates to the initiation or performance of a contract,
  • Article 6(1)(f) GDPR, where processing is based on our legitimate interest in responding to inquiries and maintaining effective communication.

We retain inquiry data only for as long as necessary to process the inquiry and to the extent required by statutory retention obligations.

Reminder function for AI tools and software

This website provides a function that allows you to request a reminder about an AI tool or software product listed on Delavo.

When you use this function, we may process the following information:

  • your email address,
  • the AI tool or software product you selected,
  • the corresponding tool or product link,
  • the requested reminder date or time,
  • technical information required to create, manage and send the reminder.

The purpose of this processing is to provide the reminder you requested and to send the corresponding email.

Legal basis:
The processing is generally based on Article 6(1)(b) GDPR insofar as it is necessary to provide the reminder function requested by you. If the reminder function is implemented on the basis of consent in a particular case, Article 6(1)(a) GDPR applies instead.

Email delivery via Brevo

We use the email service provider Brevo (Brevo SAS, France) to send reminder emails. For this purpose, your email address and the information required to generate and deliver the reminder email may be transmitted to Brevo.

Brevo processes this data on our behalf for the purpose of email delivery and related technical services. Where required, processing is governed by a data processing agreement in accordance with Article 28 GDPR.

According to Brevo’s current information, its database infrastructure is hosted within the European Union. Depending on the services and subprocessors involved, additional processing or transfers may take place. Where personal data is transferred to a third country, the applicable requirements of Chapter V GDPR and appropriate safeguards are observed where required.

For further information, please refer to Brevo’s privacy and data protection information.

Email delivery and technical information

In connection with sending reminder emails, technical information may be processed to ensure reliable delivery, security, error handling and administration of the email service. Depending on the technical configuration, this may include delivery status, bounce information and other technical delivery information.

Reminder emails are sent because you have requested a specific reminder. They are not intended to constitute a newsletter or general marketing communication.

Whether email open or click information is processed depends on the technical configuration of the email service. Such information is not used for advertising or profiling purposes unless this is separately disclosed and permitted under applicable law.

Reminder data is deleted or anonymized when it is no longer required for the requested reminder and no statutory retention obligation requires further storage.

Disclosure of data

Personal data may be disclosed to third parties or processors where this is necessary for the purposes described in this privacy policy and where a legal basis exists. This may include, in particular, service providers used for website hosting, technical infrastructure and email delivery.

Where service providers process personal data on our behalf, they are engaged as processors in accordance with Article 28 GDPR where applicable and are contractually obligated to process data only in accordance with the applicable instructions and legal requirements.

Data may also be disclosed where disclosure is required by law or necessary to establish, exercise or defend legal claims.

Storage period

Personal data is retained only for as long as necessary to achieve the purposes for which it was collected or as required by statutory retention obligations.

The specific retention period depends on the type of processing. Contact inquiries are retained for as long as necessary to process the inquiry and comply with applicable legal obligations. Reminder data is generally retained only for the purpose of providing and technically managing the requested reminder and is deleted when it is no longer required.

Rights of data subjects

You have the following rights in relation to your personal data, subject to the applicable legal requirements:

  • Right of access to the personal data we process about you (Article 15 GDPR),
  • Right to rectification of inaccurate data (Article 16 GDPR),
  • Right to erasure (right to be forgotten) (Article 17 GDPR),
  • Right to restriction of processing (Article 18 GDPR),
  • Right to data portability (Article 20 GDPR),
  • Right to object to processing in accordance with Article 21 GDPR.

You also have the right to lodge a complaint with a competent data protection supervisory authority.

Affiliate programs and tracking — overview

Purpose
We integrate affiliate links, advertising materials and, where applicable, technical attribution mechanisms from various partners on delavo.de. These technologies allow clicks, referrals and conversions to be attributed to Delavo for the purpose of commission accounting and the economic operation of the website.

Scope
This section explains the general principles applicable to our affiliate programs, including the purposes of processing, possible tracking mechanisms, legal bases, third-country transfers and your rights.

Partner programs used and brief description

PartnerStack
We use PartnerStack to manage and settle affiliate partnerships. Depending on the respective program configuration, tracking technologies may be used to attribute clicks, referrals and conversions.

dub.co
Summary: dub.co may be used for link management and technical attribution of referrals. Depending on the implementation, technical information such as click data, timestamps and other information required for attribution may be processed.

Rytr
Summary: Rytr is a software provider whose services we may recommend. Affiliate links to Rytr may contain tracking parameters that allow clicks and referred conversions to be attributed.

Simplified
Summary: Simplified is a software provider whose services we may recommend. Depending on the affiliate implementation, referral links may use tracking technologies or server-side attribution mechanisms.

Other partner programs
For other direct partner agreements with software providers, comparable principles may apply. Where appropriate, our dedicated partner page provides information about active partners and links to the respective partner privacy policies.

Purpose and legal basis of processing

Purposes of processing

  • Attribution of clicks, referrals and sales for commission accounting,
  • Technical attribution and performance measurement of recommendations, where applicable,
  • Fraud prevention and technical error analysis.

Legal basis

  • Legitimate interest pursuant to Article 6(1)(f) GDPR, insofar as processing is necessary for the economic operation of the website, technical attribution and commission accounting and does not require consent under applicable law,
  • Consent pursuant to Article 6(1)(a) GDPR where non-essential cookies or comparable technologies requiring consent are used. In such cases, the relevant technologies are activated only after the required consent has been given via our consent management mechanism.

How tracking and attribution work

Client-side tracking
When you click an affiliate link, the partner or the technical link infrastructure may use cookies or comparable technologies to attribute the referral. The exact information processed depends on the respective partner and technical implementation.

Server-side attribution
Some partners or link-management systems may use server-side solutions or redirects for attribution. In these cases, technical information required to attribute the referral may be processed, such as click information, timestamps, referrer information or other technical parameters.

What is not processed
We seek to avoid processing personal data that is not necessary for the respective purpose. Merely clicking an affiliate link does not result in Delavo receiving your payment information. We also do not intentionally transmit complete customer profiles to affiliate partners unless this is technically required and separately disclosed.

Cookies and consent management

Cookie categories
Where affiliate tracking cookies or comparable non-essential technologies are used, they are assigned to the relevant partner-tracking or affiliate category in our consent management mechanism, where applicable. Technically necessary cookies remain unaffected.

Consent
Non-essential tracking cookies and comparable technologies are activated only after the required consent has been given. You may withdraw your consent at any time using the available consent management options. If consent is not given, the relevant non-essential technologies are not activated.

Deactivation
You can also disable or delete cookies through your browser settings. Please note that this may affect the technical attribution of referrals and the functionality of certain partner links.

Transfers to third countries

Cross-border transfers
Some affiliate partners or service providers may be located outside the European Union or the European Economic Area. Where personal data is transferred to a third country, such transfers take place only where the requirements of Chapter V GDPR are met, for example on the basis of an adequacy decision of the European Commission or appropriate safeguards such as standard contractual clauses.

For partner-specific information about international data transfers, please consult the privacy policy of the respective partner.

Retention and deletion

Retention periods
The retention period of affiliate cookies and technical attribution data depends on the respective partner, tracking technology and technical implementation. We therefore do not specify a uniform retention period for all affiliate programs.

Data required for commission accounting is retained only for as long as necessary for the relevant accounting, contractual and statutory purposes.

Deletion
You may delete cookies at any time using your browser settings. Where we process personal data ourselves, you may also exercise your applicable data protection rights as described in this privacy policy, subject to statutory retention obligations.

Your rights and objection options

Rights
You have the rights to access, rectify, erase, restrict processing, data portability and to object, as described in the section “Rights of data subjects” of this privacy policy.

Objecting to processing
Where processing is based on legitimate interests pursuant to Article 6(1)(f) GDPR, you may object to such processing in accordance with Article 21 GDPR. To exercise your rights, you can contact us at datenschutz@delavo.de.

Withdrawal of consent
Where processing is based on your consent pursuant to Article 6(1)(a) GDPR, you may withdraw that consent at any time with effect for the future. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Technical and organisational measures

We have implemented appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or unauthorized access. These measures include access restrictions, encryption during transmission and appropriate review of the service providers we use.

Transparency and partner information

On our page Partner Programs / Affiliate Partners, we provide information about active partner programs where appropriate, including a short description and links to the respective partner’s privacy information. Please consult that page and the respective partner privacy policy for partner-specific details.

Contact for partner program questions

If you have questions about data processing in connection with our partner programs or about exercising your data protection rights, please contact us at datenschutz@delavo.de.

SSL / TLS encryption

For security reasons, this website uses SSL/TLS encryption. You can recognize a secure connection by “https://” and the lock symbol in your browser’s address bar.

Updates to this privacy policy

This privacy policy may be updated where necessary to reflect changes in applicable law, the website, the services used or the processing of personal data. This may include, for example, the introduction of additional analytics, tracking or communication services.

Effective date: 04.09.2026