Privacy policy

2.1 Hosting and server log files

parvando is hosted on the Lovable platform and delivered through its global content delivery and edge network. When you access the website, our hosting provider automatically processes technical access data.

• IP address
• date and time of access
• browser type and version
• operating system
• pages and files requested
• referrer URL
• further technical information required for secure operation

This processing serves the secure and stable operation of the website, error analysis and the prevention of misuse and attacks. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the secure, stable and technically sound operation of parvando.

2.2 Contact form

When you contact us via the contact form, we process the data you enter, in particular your name, email address and the content of your message. The message is stored in our database operated through Lovable Cloud and is accessible to us as the operator only. Depending on the content of your request, the legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in handling user enquiries). The data is deleted once your request has been fully handled and no statutory retention obligations apply.

2.3 User account and sign-in

For certain features, such as saving favourites, you can create a user account. We process your email address and the technical information required to provide the account. Sign-in is handled by the authentication service of Lovable Cloud; optionally you can sign in via an external sign-in provider, which then receives the data required for authentication. Passwords are never stored in plain text, only as a secure cryptographic hash. The legal basis is Art. 6(1)(b) GDPR.

2.4 Favourites

With a user account you can save providers and content as favourites. Favourites are linked to your account and, through access rules at database level, are accessible to you alone. They are not displayed publicly and are not used for advertising purposes. The legal basis is Art. 6(1)(b) GDPR.

2.5 Map and location search

For maps and location search we use map material from OpenStreetMap and the Nominatim search service of the OpenStreetMap Foundation. When the map loads, map tiles are requested directly from OpenStreetMap servers, which transmits your IP address to that service. When you use the location search, your search term is sent to Nominatim. If you explicitly enable your device's location feature, your location is processed solely to show nearby providers and is not stored permanently. The legal basis is Art. 6(1)(a) GDPR for the location feature and otherwise Art. 6(1)(f) GDPR.

3.1 Technically necessary storage

For sign-in and protected areas, a session identifier is stored in your browser's local storage for technical reasons. This storage serves solely to provide the function you explicitly requested and to keep you signed in. Where the conditions of Sec. 25(2) TDDDG are met, no consent is required. Any related processing of personal data is based on Art. 6(1)(b) or (f) GDPR. Beyond this we currently do not use analytics or advertising cookies.

3.2 Affiliate and tracking technologies

Affiliate tracking technologies may be used on parvando. They serve to attribute clicks from parvando to external providers and any resulting commissionable transactions to an affiliate partner. Where information is stored on your device or existing information is accessed for this purpose, this generally only happens with your prior consent pursuant to Sec. 25(1) TDDDG, unless a statutory exception applies. Consent is voluntary and can be withdrawn at any time with effect for the future via the settings of our consent management system.

4.1 Purpose of affiliate tracking

• attributing a visit or click from parvando to an affiliate partner
• attributing any subsequent transaction
• determining parvando's remuneration
• enabling settlement between the provider, Awin and parvando

Awin requires publishers to obtain consent for Awin tracking and to transmit the consent status to Awin. Awin supports its own consent signals as well as the IAB Transparency and Consent Framework. If we transmit "no consent", Awin states that it sets no cookie and passes no click identifier to the target page.

4.2 Data processed

• time of the click
• origin of the click
• publisher and advertiser identifiers
• click or transaction references
• browser and device information
• technical identifiers
• IP address or technical information derived from it
• information used to attribute a later transaction

Which data is actually processed depends on the respective affiliate programme and the tracking technology used.

4.3 Legal basis

Where affiliate tracking requires storing information on your device or accessing information already stored there, this is generally based on your prior consent pursuant to Sec. 25(1) TDDDG, unless an exception under Sec. 25(2) TDDDG applies. Where personal data is processed in connection with affiliate tracking, processing is based on the applicable legal basis under Art. 6 GDPR. Consent under Sec. 25 TDDDG and the legal basis under Art. 6 GDPR must be considered separately.

4.4 Withdrawal

You can withdraw consent at any time with effect for the future. To do so, open the settings of our consent management system and change your selection. The lawfulness of processing carried out until withdrawal remains unaffected.

4.5 Further information about Awin

Further information on data processing by Awin and the tracking technologies it uses can be found in Awin's current privacy and ePrivacy information.

6.1 What we use AI for

• supporting the creation and revision of shop descriptions and shop stories
• translating content into other languages
• categorising and tagging shops and categories
• selecting or creating preview images
• improving search, including the interpretation of free-text queries
• supporting editorial workflows

6.2 Human oversight

AI is used in a supporting role only. Content generated or suggested by AI is reviewed and, where necessary, edited before publication. Editorial responsibility for published content remains with parvando. AI systems make no fully automated decisions that produce legal effects concerning users or similarly significantly affect them.

6.3 Processing of personal data by AI

AI is not used to build personal user profiles or to automatically evaluate users based on their behaviour. Favourites and user accounts are not used to train our own or third-party AI models. Free-text search queries are transmitted to the AI service for interpretation; please do not enter personal data there. Where personal data is processed or transmitted when using external AI services, this only happens where a legal basis exists and applicable data protection requirements are met. The specific AI services used may change; where necessary we will add them to this privacy policy.

6.4 AI-generated and AI-assisted content

Individual texts and other content on parvando may have been created or revised with the support of artificial intelligence. Content is reviewed editorially before publication. Individual labelling of every AI-assisted text does not take place where no statutory labelling obligation exists. This applies in particular to editorially supported texts where a human takes content control and responsibility.

6.5 AI-generated images

Preview images and other images used on parvando may have been generated in whole or in part using artificial intelligence. Editorial responsibility for their use remains with parvando. AI-generated depictions serve as visual illustration and do not necessarily show an actually existing person, product, place or situation. Where a specific or machine-readable label is required under applicable law — in particular Art. 50 of the EU AI Act — we observe those requirements.