Privacy policy

The controller responsible for processing data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Email

kontakt@dershopbauer.de

Phone

+49 162 7911261

The website runs on a rented server that a hosting provider operates for us. That provider is bound as a processor under Art. 28 GDPR and handles the data only on our instructions.

Each time a page is requested, the server automatically processes information that your browser sends:

• IP address
• Date and time of the request
• Requested address (URL)
• Browser and operating system (user agent)

We process this information to deliver the pages, keep the site running reliably and detect and fend off attacks. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is a secure and working website.

The log files are deleted as soon as they are no longer needed for these purposes. They are not combined with other data sources. The provider and the exact retention period are listed below; as long as a detail is still missing, it is marked as open.

Hosting provider (name and address)

IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Deutschland

How long log files are kept

We keep no access logs of our own; our server only records error messages, without IP addresses. Logs kept by the hosting provider at infrastructure level are outside our control.

This website does not set any cookies.

If you switch between the light and dark theme, your browser saves that choice in its local storage (localStorage) under the key “theme”. The setting stays on your device and is not sent to us. Under § 25(2) no. 2 TDDDG this does not require consent, because it is strictly necessary to show the site the way you explicitly chose. You can delete the entry at any time in your browser settings.

If you close the newsletter tab at the side of the page or the newsletter window, or sign up for the newsletter, your browser saves a timestamp or a marker in its local storage under the keys “newsletter-dock-geschlossen”, “newsletter-popup-gezeigt” and “newsletter-angemeldet”, so that we don’t show you the same invitation again. No email address is stored and nothing is sent to us. Under § 25(2) no. 2 TDDDG this does not require consent, because it only respects a choice you made yourself. You can delete the entries at any time in your browser settings.

We count page views with Plausible Analytics. We run it ourselves on our own server; no data is passed to an analytics company, and none of it leaves our systems.

Plausible works without cookies and stores nothing on your device. It does not recognise you across websites and builds no profiles. Your IP address is not stored: together with the day and the domain it is turned into a one-way hash that we cannot reverse and that changes every day. That is just enough to tell a repeat view from a new visitor within one day.

Recorded are the page requested (with its type, language and, where it applies, the category, deal or comparison it shows), the referring website, browser, operating system, device type and the country derived from your IP address.

We also count a few actions, always without personal data: clicks on a “Get deal” button (which deal, where on the page the button was and on which page), how often a paid ad was visible on screen, search terms typed into our search (lower case, shortened, without anything that looks like an email address or phone number), the topic of a contact form request (not its content), started comparisons, copied coupon or badge codes, newsletter sign-ups (only that one happened, not the address), the filters, sorting and view chosen in the deal catalog, the address of pages that do not exist (404) and how far a page was scrolled. Clicks on deal buttons go through a short redirect on our own domain (/go/) that counts the click on our server and then forwards you to the offer. The link to the offer then carries a note that the visit came from lifetimewp and from which spot on our page (utm parameters), nothing about you. We use these numbers to improve the site and to show advertisers in aggregate how often their ad was seen and clicked.

Sometimes we test two versions of a page element, for example a button text. Which version you see is decided at random on every page load and sent to Plausible with the page view. Nothing is stored on your device for this, so you may see the other version on your next visit.

The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is knowing in aggregate how our pages are used. Because nothing is stored on or read from your device, § 25(1) TDDDG does not apply and no consent is required. The counting script is delivered from our own domain so that it also works with an ad blocker; the data still stays on our own server.

Fonts and logos are served from our own server. No third-party content is embedded: no font services, videos, maps or social media plugins. Simply visiting the site therefore does not make your browser connect to anyone else’s servers.

Links to offers lead to the vendor’s website, in some cases via an affiliate program or network. As long as you don’t click, no data is sent to these providers.

Only when you click do you leave lifetimewp.com. Your browser then connects to the vendor or affiliate network, which receives your IP address, among other things, and may set cookies to attribute a purchase to our referral. The respective provider is responsible for that processing, and its privacy policy applies. Our links are set up so that your browser does not tell them which of our pages you came from.

How we earn money with these links is explained in our affiliate disclosure.

You can subscribe to our newsletter with new WordPress lifetime deals. Besides our own picks it contains ads from our partners, which are always labelled “Sponsored”. All we need is your email address. If you like, you can add your first name so we can greet you by name; that is optional. We also store the language of the page you signed up on, so that the newsletter reaches you in that language, and the time of your sign-up.

We use the double opt-in method: after signing up you receive an email with a confirmation link. Only when you click it are you added to the list. If you do not confirm, the unconfirmed entry is deleted after 30 days. To be able to prove your consent, we store the time of your sign-up and of your confirmation and the IP address used to confirm.

The legal basis is your consent under Art. 6(1)(a) GDPR. You can withdraw it at any time with effect for the future: every newsletter contains an unsubscribe link, and an email to the address above is enough too. This does not affect the lawfulness of processing carried out until then.

The subscriber list is managed with the open source software Listmonk, which we run ourselves on our own server; it is not shared with anyone. To deliver the emails we use an email delivery service based in the EU, bound as a processor under Art. 28 GDPR, which receives your email address and the content of the email for this purpose only. We do not track whether you open an email or which links in it you click. Links to offers run through our redirect /go/, which only counts clicks in total per spot, without any connection to your address (see “Visitor count” above).

After you unsubscribe we delete your address, unless you have agreed to further use. We keep a record of the unsubscription for as long as we need it to prove that consent was given (Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR).

Vendors of plugins and themes can write to us through the contact form about partnerships, deals and advertising slots. We process what you enter there:

• Name
• Company or product
• Email address
• Website (optional)
• A few words about you or your product (optional)
• What the message is about
• Your message

The legal basis is Art. 6 Abs. 1 lit. b GDPR where the message concerns a contract or its preparation (booking an advertising slot, for example) and Art. 6 Abs. 1 lit. a GDPR for the consent you give with a checkbox before sending.

The message is stored on our own server and passed to a ticket system (Chatwoot) that we run ourselves on that same server. It does not leave this server and is not shared with anyone else.

We delete the request once it is settled, and at the latest twelve months after our last contact, unless statutory retention obligations apply.

You can withdraw your consent at any time with effect for the future; an email to the address above is enough. This does not affect the lawfulness of processing carried out until then.

If you email us, we process your address and the content of your message to answer your request. The legal basis is Art. 6(1)(f) GDPR, or Art. 6(1)(b) GDPR for requests about a contract. We delete the message once your request is settled, unless statutory retention obligations apply.

You have the right to:

• access the data stored about you (Art. 15 GDPR)
• have inaccurate data corrected (Art. 16 GDPR)
• have your data erased (Art. 17 GDPR)
• restrict processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• object to processing (Art. 21 GDPR)

Where we process data based on a legitimate interest, you can object at any time on grounds relating to your particular situation. An email to the address above is enough for any of these requests.

If you believe that the processing of your data infringes the GDPR, you can lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the member state of your habitual residence, your place of work or the place of the alleged infringement.

You are not obliged to provide us with any data. Without the connection data that arises technically, however, the site cannot be delivered. There is no automated decision-making, including profiling.