In short
- You can use Comparano without an account. We keep the data we process to the minimum needed to run the service.
- We only set necessary cookies unless you switch others on. We do not sell personal data and do not run advertising.
- Price alerts use your email with your explicit consent (double opt-in). You can unsubscribe from any email with one click.
- You have the right to access, correct, delete and restrict your data, to object, and to complain to a supervisory authority.
1.Who is responsible
The controller for the processing described here is Comparano (“we”). You can reach us at support@comparano.com.
We have not appointed a data protection officer, as our processing does not require one; questions about this policy go to the same address.
2.What this policy covers
This policy explains what personal data we process when you use comparano.eu and its country versions, why we process it, how long we keep it and what rights you have. It applies to browsing the site, using price alerts and contacting us. It does not cover the websites of stores you are redirected to, which have their own privacy policies.
3.What data we process
Browsing: when you open a page our servers receive technical data — your IP address, browser and device type, the page requested, the referrer and the time. This is standard for any website.
Search and click-outs: when you search or click “Go to store” we record the query or the offer, the store, the product and the time. For click-outs we store only salted hashes of your IP address and browser signature (not the values themselves) so we can detect fraudulent clicks.
Price alerts: your email address, the product, your target price, the language of the page, the consent text version, the time of consent and the IP address at sign-up (truncated) and at confirmation.
Contact form: your name, email address, the topic and the message you send.
Cookie choice: the categories you allowed on the Cookie settings page.
4.Why we process it and on what legal basis
Running the service and keeping it secure — showing pages, preventing abuse, detecting fraudulent clicks, fixing errors: our legitimate interest in operating a reliable comparison service (Art. 6(1)(f) GDPR).
Price alerts: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via the unsubscribe link. We keep a record of the consent to be able to prove it (Art. 7(1) GDPR).
Answering your message: taking steps at your request and our legitimate interest in handling enquiries (Art. 6(1)(b) and (f) GDPR).
Optional cookies for preferences, analytics or marketing: only with your consent (Art. 6(1)(a) GDPR and the ePrivacy rules). None are set today.
Legal obligations, for example keeping records for tax or accounting purposes (Art. 6(1)(c) GDPR).
6.Who receives your data
Hosting and infrastructure providers in the EU that store and process data on our behalf as processors, bound by data processing agreements.
The email provider that delivers confirmation, alert and contact emails on our behalf.
Affiliate networks and stores: when you click “Go to store”, you are redirected through the network's tracking link and the store's website. They then process data under their own responsibility and privacy policies; we pass on a click identifier and technical data, never your name or email.
We do not sell personal data and we do not share it with advertisers.
7.International transfers
We store personal data on servers in the European Union / European Economic Area. Where a provider processes data outside the EEA, we rely on an adequacy decision of the European Commission or on the standard contractual clauses, together with additional safeguards where needed.
8.How long we keep it
Server logs and security data: up to 30 days.
Search and click-out records: identifiers are truncated or hashed; aggregated statistics are kept indefinitely, event-level data for up to 13 months.
Price alerts: an unconfirmed subscription is deleted after 48 hours; an active alert is deleted after 12 months without a notification; a sent or unsubscribed alert is deleted after 30 days. After “unsubscribe from all” we keep only a hash of your email address so we never email you again by mistake.
Contact messages: up to 12 months after the last reply, unless a legal obligation requires longer.
Cookie choice: 12 months, after which we ask again.
9.Your rights
Under the GDPR you have the right to access your personal data, to have it corrected or deleted, to restrict its processing, to receive it in a portable format, and to object to processing based on our legitimate interests. Where processing is based on consent you can withdraw it at any time, without affecting the lawfulness of processing before the withdrawal.
To exercise these rights, write to support@comparano.com. We answer within one month.
You also have the right to lodge a complaint with a supervisory authority, in particular the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warszawa, Poland, or the authority of the EU country where you live.
10.Children
Comparano is not directed at children under 16 and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.
11.Security
All traffic is encrypted (TLS). Access to personal data is limited to people who need it to run the service. We minimise what we collect — for example, click-out IP addresses are hashed and consent IP addresses truncated — and we delete data on the schedule above.
12.Changes to this policy
We may update this policy when the service or the law changes. The current version and its date are shown at the top of this page; material changes are announced on the service before they take effect.
13.Contact
Questions about privacy or this policy: support@comparano.com.