Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

Manuel Fresser
Reininghauspark 6
8020 Graz
Austria
Email: hello@only-eu.eu

2. General Principles of Data Processing

This website is built as a static site. No user accounts, databases or server-side sessions are operated. The sections below describe which third-party services are used and what data is processed in each case.

3. Hosting via Cloudflare Pages

This website is currently hosted via Cloudflare Pages, a service of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA – a US-based company. Cloudflare operates a worldwide CDN network with data centres within the European Union, so requests from Europe are generally processed via EU nodes.

When you access this website, Cloudflare processes technical data, in particular:

• IP address of the requesting device
• Date and time of access
• URL accessed and HTTP status code
• Data volume transferred
• Browser type and operating system (user agent)

This data is processed by Cloudflare to provide and secure the service. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the secure and efficient operation of the website). Cloudflare is certified under the EU–US Data Privacy Framework.

Cookie __cf_bm: Cloudflare sets the cookie __cf_bm for bot management purposes. This cookie is set before any user interaction and is used to detect and mitigate automated abuse (bots, scraping attacks). It does not contain personal identifiers and typically expires after 30 minutes. The legal basis is Art. 6(1)(f) GDPR (legitimate interest: protecting the website from automated attacks).

Note on the CLOUD Act: As a US company, Cloudflare is subject to the US Clarifying Lawful Overseas Use of Data Act (CLOUD Act). US authorities may, under certain conditions, request access to data stored by Cloudflare, even if that data is physically located on EU servers.

Planned migration: A migration of hosting to Bunny.net, a European provider based in Slovenia, is planned. Once the migration is complete, processing by Cloudflare will no longer apply.

Further information on Cloudflare's data processing can be found in the Cloudflare Privacy Policy .

4. Plausible Analytics

This website uses Plausible Analytics to analyse page views and visitor statistics. Plausible is a privacy-friendly analytics tool that operates without cookies and does not collect or store any personal data.

The instance is self-hosted on a server within the European Union. No data is shared with third parties. Only aggregated, non-personal metrics are recorded (e.g. pages visited, country of origin, device type). Individual user tracking does not take place.

As no personal data is processed and no cookies are set, no consent banner is required under current regulations. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in improving the service).

5. External Links & Affiliate Links

This website contains links to external websites, including affiliate links to products and services. When you click on such a link, you leave this website. The linked providers may set their own cookies and collect data – this is subject to their respective privacy policies, not this statement.

As an affiliate partner, we receive a commission on purchases made through these links, at no extra cost to you. Tracking by affiliate networks only occurs when you click the external link, not on this website.

6. Product Suggestion Form

Via the "Suggest a product" form, users can nominate a European product for inclusion in the database. The following information is collected:

• Product name
• Product website (URL)
• Short description
• Category

No mandatory personal data is required. The submitted data is forwarded via a Cloudflare Worker to a self-hosted n8n workflow and stored there for processing the suggestion. No data is passed on to third parties.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in developing the service). If you voluntarily provide personal data (e.g. an email address in the description field), it will be used solely to process your suggestion.

7. Contact via Email

If you contact us by email, the data you provide (email address, message content) will be stored and processed for the purpose of handling your enquiry. The legal basis is Art. 6(1)(f) GDPR. This data will not be passed on to third parties.

8. Your Rights

Under the GDPR you have the following rights with regard to us:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)

To exercise your rights, please contact: hello@only-eu.eu

You also have the right to lodge a complaint with a data protection supervisory authority. In Austria this is the Datenschutzbehörde (dsb.gv.at).

9. No Disclosure to Third Parties

We do not sell or transfer your personal data to third parties unless this is necessary for the fulfilment of a contract or you have given your explicit consent.

10. Updates to this Policy

We reserve the right to update this privacy policy as necessary to ensure compliance with current legal requirements. The version in force at the time of your visit applies.