Privacy Policy

Noctemque GmbH — bullsprice.com

We take the protection of your personal data seriously. This policy explains what personal data we process when you use bullsprice.com, why we process it, on what legal basis, and what rights you have.

Processing takes place in accordance with the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG).

1. Controller

The controller within the meaning of Art. 4 (7) GDPR is:

noctemque GmbH

Hasengarten 29
61440 Oberursel
Germany

Phone: +49 (0)170 216 1111

Email: partners@noctemque.com

Website: www.bullsprice.com

Represented by Michael Reifenrath, Managing Director. Further details can be found in our Imprint.

[CONFIRM]

noctemque GmbH has not appointed a data protection officer. If a DPO has been or will be appointed, add their contact details here. Under § 38 BDSG this is mandatory once at least 20 people are permanently engaged in automated processing of personal data.

2. Scope

This policy applies to the website bullsprice.com and all of its subpages. Where our pages link to third-party websites — in particular to online retailers — those operators are responsible for their own processing. Please consult their privacy notices.

3. What bullsprice.com is

bullsprice.com is a product comparison and recommendation website. We aggregate product data, prices and product information from third-party sources, present them in editorial rankings and category pages, and link to the retailers where the products can be bought. We are financed through affiliate commissions and do not sell products ourselves. See section 7 for what this means for your data.

4. Server log files

When you access our website, our hosting provider automatically collects and stores information that your browser transmits. This includes:

  • Browser type and version
  • Operating system used
  • Referrer URL
  • IP address of the requesting device
  • Date and time of the request
  • The pages requested and the volume of data transferred

This data is not merged with other data sources. It is processed on the basis of Art. 6 (1) (f) GDPR; our legitimate interest lies in the technically error-free presentation and security of our website. Log data is deleted after [CONFIRM: e.g. 7 / 14 / 30] days unless a specific security incident requires longer retention for evidentiary purposes.

[CONFIRM]

Name your hosting provider and the country in which the servers are located, and state whether a data processing agreement under Art. 28 GDPR is in place. Example wording: "Our website is hosted by [provider, address]. A data processing agreement pursuant to Art. 28 GDPR has been concluded with the provider."

5. Cookies and similar technologies

Our website uses cookies and comparable technologies (e.g. local storage). Cookies are small text files stored on your device by your browser.

Strictly necessary cookies are required for the website to function — for example to store your language selection or a session identifier, or to secure forms against cross-site request forgery. These are stored on the basis of § 25 (2) no. 2 TDDDG; the associated processing of personal data is based on Art. 6 (1) (f) GDPR.

All other cookies and technologies — in particular those used for analytics, measurement or advertising — are only set once you have given your consent via our consent banner, in accordance with § 25 (1) TDDDG and Art. 6 (1) (a) GDPR. You can withdraw your consent at any time with effect for the future via [CONFIRM: link or button to reopen the consent settings].

You can also configure your browser to inform you about the setting of cookies, to allow cookies only in individual cases, to exclude the acceptance of cookies generally, and to delete cookies automatically when the browser is closed. Disabling cookies may limit the functionality of this website.

[CONFIRM]

A cookie table listing each cookie, its purpose, provider and storage period is strongly recommended and is expected by German supervisory authorities. If no consent management platform is currently in place on bullsprice.com, one must be added before any non-essential cookies are set.

6. Contacting us

If you contact us by email or via a contact form, the data you provide (e.g. name, email address, your message) will be processed for the purpose of handling your enquiry and any follow-up questions. The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to a contract or pre-contractual measures, and otherwise Art. 6 (1) (f) GDPR based on our legitimate interest in responding to enquiries directed at us.

This data is erased once your enquiry has been dealt with conclusively and no statutory retention periods apply.

7. Amazon Associates Programme and Amazon Product Advertising API

bullsprice.com participates in the Amazon Associates Programme. As an Amazon Associate, BullsPrice earns from qualifying purchases.

Affiliate links. Product links on our site contain an affiliate identifier (tracking ID). When you click such a link, you are redirected to Amazon and Amazon sets a cookie on your device that allows a subsequent purchase to be attributed to us. We receive commission reports from Amazon in aggregated form — we can see that a purchase was made via one of our tracking IDs, but we do not receive your name, address or payment details.

Product data. Product titles, images, prices and availability shown on bullsprice.com are retrieved via the Amazon Product Advertising API. This retrieval takes place on our servers; no personal data about you is transmitted to Amazon in the process.

Data transfer on redirection. Once you follow a link to Amazon, processing is governed by Amazon's own privacy notice. Amazon receives your IP address, the referring page and browser information, and — if you are logged in — can associate the visit with your Amazon account. We have no influence over this and no knowledge of the content of the data transmitted.

The legal basis for setting affiliate cookies and for the associated processing is your consent pursuant to § 25 (1) TDDDG and Art. 6 (1) (a) GDPR. Where affiliate links are used without cookies being set on our own domain, the legal basis for their display is Art. 6 (1) (f) GDPR; our legitimate interest lies in the commercial financing of our editorial offering.

Provider: [CONFIRM: Amazon EU S.à r.l., 38 avenue John F. Kennedy, L-1855 Luxembourg (for the European Amazon marketplaces) and/or Amazon.com Services LLC, 410 Terry Avenue North, Seattle, WA 98109, USA (for amazon.com)]. Amazon's privacy notice: https://www.amazon.com/gp/help/customer/display.html?nodeId=468496

[CONFIRM]

Which Amazon locale(s) does bullsprice.com actually run against — amazon.com, amazon.de, or several? Name only the ones in use, and name the correct Amazon controller for each. If US marketplaces are used, keep the third-country transfer note in section 10.

8. Other affiliate networks and partners

[CONFIRM]

The previous version of this policy named billiger.de, shopping24 and econda. Those appear to be leftovers from a different website and have been removed. If bullsprice.com uses any other affiliate networks, price comparison feeds or data providers, list each one here with its company name, address, purpose and legal basis. If Amazon is the only partner, delete this section entirely.

No other affiliate networks are currently used on this website.

9. Web analytics and advertising

[CONFIRM]

The previous version named Google Analytics, Google Remarketing, Google AdWords, Google+, Facebook and Instagram. Google+ has not existed since 2019 and the rest could not be verified as actually in use on bullsprice.com. Nothing has been carried over. List here only the services genuinely deployed — each with provider, address, purpose, legal basis (consent under Art. 6 (1) (a) GDPR for analytics and advertising), storage period and opt-out route. If no analytics or advertising tools run on the site, replace this section with: "We do not use analytics, tracking or advertising services on this website."

We do not use analytics, tracking or advertising services on this website.

10. Recipients and transfers to third countries

Your data is passed on to third parties only where this is necessary for the operation of the website, where you have consented, or where we are legally obliged to do so. Recipients may include our hosting provider and other IT service providers acting as processors under Art. 28 GDPR.

Where data is transferred to countries outside the European Economic Area — in particular to the USA — this takes place on the basis of an adequacy decision by the European Commission, on the basis of standard contractual clauses pursuant to Art. 46 (2) (c) GDPR, or on the basis of your explicit consent pursuant to Art. 49 (1) (a) GDPR. Please note that a level of data protection equivalent to that in the EU cannot be guaranteed in all third countries, and that authorities there may be able to access data.

11. Retention

We store personal data only for as long as is necessary for the purpose for which it was collected, or for as long as statutory retention obligations require. Commercial and tax retention periods under German law are generally six or ten years. Once the purpose ceases to apply and no retention obligation stands in the way, the data is erased or anonymised.

12. Your rights

You have the following rights in relation to your personal data:

  • Right of access (Art. 15 GDPR) — to obtain confirmation as to whether we process data about you and, if so, a copy of that data
  • Right to rectification (Art. 16 GDPR) — to have inaccurate data corrected without undue delay
  • Right to erasure (Art. 17 GDPR) — to have your data deleted where one of the grounds in Art. 17 applies
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR) — to receive data you provided in a structured, commonly used, machine-readable format
  • Right to object (Art. 21 GDPR) — see section 13
  • Right to withdraw consent (Art. 7 (3) GDPR) — at any time with effect for the future; the lawfulness of processing carried out before withdrawal is unaffected

To exercise these rights, contact us at partners@noctemque.com.

Right to lodge a complaint (Art. 77 GDPR). You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement. The authority responsible for us is:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit

Postfach 3163, 65021 Wiesbaden (visitors: Wilhelmstraße 7, 65185 Wiesbaden)

Phone: +49 611 1408-0

Email: poststelle@datenschutz.hessen.de

Web: https://datenschutz.hessen.de

13. Right to object

Where we process your data on the basis of Art. 6 (1) (e) or (f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to that processing. We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Where your data is processed for direct marketing purposes, you have the right to object at any time without giving reasons. Following such an objection, your data will no longer be used for direct marketing.

14. Automated decision-making

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

15. Provision of your data

Providing personal data is neither required by law nor by contract in order to browse bullsprice.com. Certain functions — such as contacting us — cannot be used without the data required for them.

16. Data security

We use technical and organisational measures appropriate to the risk pursuant to Art. 32 GDPR to protect your data against loss, manipulation and unauthorised access. This includes TLS encryption of the connection between your browser and our servers. Please note that data transmission over the internet can never be entirely secure; complete protection against access by third parties is not possible.

17. Unsolicited advertising

We object to the use of contact data published under our imprint obligation for the purpose of sending unsolicited advertising and information material. We expressly reserve the right to take legal action in the event of unsolicited advertising being sent.

18. Changes to this policy

We update this privacy policy when changes to our website or to legal requirements make it necessary. The version published here always applies.

Last updated: 7 August 2026