PrivacyWhat this site does with data.

Updated 23 September 2026

Controller

The controller is the operator named in the imprint, reachable at the email address given there.

Cookies and analytics

Traffic to this site is measured with Cloudflare's analytics, which reports page views and performance to the operator in aggregate; see Cloudflare's privacy notice linked below. When you accept the cookie banner, a single value, ac-cookie-consent, is stored in your browser so the banner does not reappear. Filters on the catalogue page are kept in the page address only. No fonts, scripts or media are loaded from other third parties.

Visiting the site

When you open a page, the hosting provider receives the technical data any web request carries: your IP address, the page requested, the time, the browser type and the referring page. It is used to deliver the page and to defend the site against abuse (Art. 6 (1) f GDPR). The provider keeps request logs for a short period as described in its own notice, linked below.

Submitting an agent or sending a message

The two forms send what you type to a small function at this site's address, which checks it and stores it in a database. For a submission that is the agent's details plus your name, email and your relationship to the agent. For a message it is your name, email, subject and text. The data is used to check the listing or to reply to you (Art. 6 (1) b and f GDPR). It is kept for 12 months after it was last handled, then deleted. Nothing is passed to the vendor of an agent unless you ask for that in the message.

If you tick the box on the submit form asking to be kept informed, we may email you when your listing goes live or changes and about updates for vendors (Art. 6 (1) a GDPR). You can withdraw that at any time by replying to any such email or writing to the address in the imprint; without the box ticked you only hear from us with questions about the submission.

Each form has a hidden field that only automated senders fill in; such entries are discarded. Requests to the form endpoints are rate-limited by the hosting provider to keep out floods.

Processors

• Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA: Hosting and delivery of the site, and the two form endpoints. Data processing agreement, privacy notice.
• Supabase, Inc., 970 Toa Payoh North #07-04, Singapore 318992: Database that stores submissions and messages. Data processing agreement, privacy notice.

Data may be processed in the USA and Singapore under the EU standard contractual clauses included in those agreements.

Your rights

You can ask for access to your data, for correction or deletion, for restriction of processing, and for a copy in a portable form, and you can object to processing based on legitimate interest (Art. 15 to 21 GDPR). Write to the address in the imprint. You can also complain to a supervisory authority, for example the Berliner Beauftragte für Datenschutz und Informationsfreiheit.

Listings and vendors

Listings contain business information about companies and products from their public pages. If a listing names you as a person and you would like it changed, use the contact form.