Privacy policy
Last updated: 28 October 2026
This English version is provided for convenience; the German version is binding.
1. Controller
The controller for data processing on this website is Delantoro LLC, 3833 Powerline Rd, Suite 201, Fort Lauderdale, FL 33309, United States.
Phone: +49 1512 1281631
Email: lars@hero-pages.com
2. Access data and hosting
This website is delivered through the network of Cloudflare, Inc., which acts on our behalf. When you visit the website, technically necessary data (e.g. IP address, date and time, page accessed, browser information) is processed so that the website can be delivered reliably and securely.
Processing is based on Art. 6(1)(f) GDPR (legitimate interest in secure and error-free operation). The data is stored only as long as this purpose requires.
3. Browser storage and cookies
Without your consent we set no cookies and embed no scripts from other providers; the font of this website is loaded from our own server. In your browser’s storage (localStorage) we keep only what a feature you use strictly requires (§ 25(2) no. 2 TDDDG):
Your choice in the privacy banner, so that we do not ask again on every page. We ask again after twelve months or when the services we use change.
A random device identifier, once you vote or nominate a provider for the first time, and your own votes, so that the buttons can show them (see section 5).
4. Google Analytics (only with your consent)
If you choose “Accept all” in the privacy banner, we use Google Analytics 4, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”), to understand how our website is used, for example which pages are viewed, how visitors find us and how long they stay. Only then does your browser load Google’s script; before that, no connection to Google is made.
Google sets cookies for this (_ga and _ga_ with an identifier) that recognise your browser across visits, and processes information about the page view, your device and browser, and your approximate location. Your IP address is processed for the transmission but not stored by Google Analytics 4. Google signals and personalised advertising are switched off; the data is deleted after two months.
Google may also transfer data to Google LLC in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework, for which an adequacy decision of the European Commission exists.
The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). You can withdraw it at any time with effect for the future: via “Cookie settings” at the bottom of every page, then “Essential only”. We then delete the Google Analytics cookies. The lawfulness of the processing carried out until then remains unaffected.
5. Votes and nominations
When you vote for or against an entry or nominate a provider for a ranking, we store the entry, your vote, your optional reason and the time. Instead of the device identifier from section 3 we store only a hash of it, and instead of your IP address a hash formed with a secret key. This way each device counts only once per entry, and we can detect bursts of votes.
We do not publish reasons; they are for the editorial team. The editors can remove suspicious votes; these stay stored, marked as removed, so that moderation remains traceable. Please do not include personal details in a reason.
The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is a fair ranking protected against manipulation. We store votes and nominations for as long as the ranking, including its archive, is online.
6. Company logos from reviewfinder.org
On topic and detail pages we show the logos of the listed businesses. Your browser loads these images from www.reviewfinder.org, a service of the same operator that is also delivered through Cloudflare. Technically necessary data such as your IP address is transmitted in the process. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is a complete and up-to-date presentation of the entries.
7. Maps and links to other websites
Google Maps maps are only loaded when you click “Load map”. Only then does your browser connect to Google (Google Ireland Limited, Google LLC) and transmit, among other things, your IP address; Google may also process the data in the USA. The legal basis is the consent you give with the click (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Google’s privacy policy applies to further processing.
Our pages contain links to other websites, such as the websites of the listed providers, reviewfinder.org or social networks. They only open when you click the link; their provider’s privacy policy applies to them.
8. Topic suggestions
When you submit a topic through “Suggest a topic”, we store the topic, your optional note, the language of the page and the time, and the editorial team receives the suggestion by email. To prevent abuse we store a hash of your IP address instead of the address itself and use it to limit how many suggestions can arrive in a short time. Nothing is transmitted until you submit the form.
The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in choosing new topics and protecting the form against abuse. Please do not enter personal details in the form. We keep suggestions only as long as we need them for review and topic planning.
9. Contacting us
If you contact us by email or phone, we process your information to handle your request. Depending on the request, processing is based on Art. 6(1)(b) GDPR (pre-contractual or contractual communication) or Art. 6(1)(f) GDPR (legitimate interest in efficient communication). We delete your information once your request has been fully dealt with, unless statutory retention obligations apply.
10. Recipients and transfers to third countries
We only pass on personal data where this is necessary for the purposes named in this policy. Recipients are service providers acting on our behalf, for example for hosting and databases and for sending email.
Delantoro LLC is based in the USA, and service providers also process data partly in the USA or other third countries. Where we transfer personal data to third countries, we rely on an adequacy decision of the European Commission, for example for companies certified under the EU-U.S. Data Privacy Framework, or on standard contractual clauses of the European Commission (Art. 46(2)(c) GDPR).
11. Your rights
You have the right at any time to access your stored personal data, to rectification, erasure, restriction of processing and data portability within the statutory limits. Where we process data on the basis of Art. 6(1)(f) GDPR, you can object to the processing on grounds relating to your particular situation (Art. 21 GDPR).
You also have the right to withdraw any consent given at any time with effect for the future and to lodge a complaint with a competent data protection supervisory authority. To exercise your rights, use the contact details in section 1.