Privacy Policy

1. Who we are

This website is operated by Buy8c Media GmbH, Osterhofener Str. 14, 93055 Regensburg, Germany. When this policy says "we", "us", or "our", it means Buy8c Media GmbH.

We publish editorial content about consumer purchase decisions. We do not sell products, run advertising networks, or use affiliate tracking links.

For questions about data processing, contact us at the address above or via the form on our Connect page.

2. What this policy covers

This policy describes what personal data we collect when you visit buy8conline.com, why we collect it, how long we keep it, and what rights you have under the General Data Protection Regulation (GDPR) and applicable German law.

3. Data we collect and why

3.1 Server logs

When you request any page on this site, our hosting provider automatically records: your IP address, the page requested, the date and time, your browser type and operating system, and the referring URL. These technical logs exist so we can diagnose errors and protect against malicious traffic. The legal basis is our legitimate interest (Article 6(1)(f) GDPR). Logs are retained for 7 days and then deleted automatically.

3.2 Contact form

If you submit our contact form, we collect your name, email address, and the content of your message. We use this data only to respond to your enquiry. The legal basis is the performance of a pre-contractual or contractual measure at your request (Article 6(1)(b) GDPR), or our legitimate interest in responding to communications. We do not add contact form submissions to any mailing list without your explicit consent. We retain correspondence for up to two years, or until you ask us to delete it.

3.3 Analytics

We use self-hosted, privacy-preserving analytics to understand which articles are read and how visitors navigate the site. No cookies are set for analytics purposes. No data is shared with third parties. Aggregated page-view counts do not contain personally identifiable information. The legal basis is our legitimate interest in understanding how our publication is used (Article 6(1)(f) GDPR).

3.4 Essential cookies

We set one first-party cookie to remember your cookie consent choice (key: buy8c_cookie). This cookie contains only your consent status — no tracking identifiers. It expires after 12 months. The legal basis is our legitimate interest in not repeating the consent notice on every page visit.

3.5 Optional analytics cookies

If you click "Accept all" on our cookie banner, we may set additional cookies for statistical analysis. These cookies are not used for advertising and are not shared with advertising networks. You can withdraw this consent at any time via the cookie preference link in the footer or by clearing your browser cookies.

4. Data we do not collect

We do not place advertising tracking pixels. We do not use Facebook Pixel, Google Ads remarketing tags, or any third-party advertising SDKs. We do not build profiles of individual users. We do not sell, rent, or trade personal data.

5. Third-party services

This website loads fonts from Google Fonts. When your browser requests a font file, Google's servers log your IP address. We have configured the site to load font files locally wherever technically feasible to reduce this exposure. For more information, see Google's privacy policy at policies.google.com/privacy.

Images on some pages are served from third-party stock photograph services (Pexels, Unsplash, Pixabay). Requests for those images are governed by those services' own privacy policies.

6. International transfers

Our hosting infrastructure is located within the European Union. Where third-party services process data outside the EU — for example, Google Fonts servers in the United States — we rely on those providers' Standard Contractual Clauses (SCCs) as the transfer mechanism.

7. Your rights

Under GDPR you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — ask us to delete your data ("right to be forgotten")
• Restriction — ask us to limit how we use your data while a complaint is resolved
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interest
• Withdraw consent — where processing is based on consent, withdraw it at any time without affecting prior processing

To exercise any of these rights, contact us via the Connect page. We will respond within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), the supervisory authority for Bavaria, Germany.

8. Data security

We implement appropriate technical measures to protect personal data against unauthorised access, including TLS encryption for all connections and access controls on server infrastructure. No method of transmission over the internet is completely secure; we cannot guarantee absolute security but we take reasonable precautions.

9. Children

This website is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has submitted personal data to us, please contact us and we will delete it.

10. Changes to this policy

We may update this policy to reflect changes in our practices or applicable law. The date at the top of this page indicates when it was last revised. Continued use of the site after an update constitutes acceptance of the revised policy.