The controller for data processing on this website is Delantoro LLC.
Phone: +49 151 21281631
Email: info@hero-pages.com
When accessing this website, technically necessary data (e.g., IP address, date and time, page accessed, browser information) is processed in server log files so that the website can be delivered stably and securely.
Processing is based on Art. 6 para. 1 lit. f GDPR (legitimate interest in secure and error-free operation).
If you contact us by email, phone or through a form on this website, we process your information to handle your request. Depending on the request, processing is based on Art. 6 para. 1 lit. b GDPR (pre-contractual/contractual communication) or Art. 6 para. 1 lit. f GDPR (legitimate interest in efficient communication).
Without your consent we set no cookies and access no information on your device unless this is strictly necessary to run the website. The only thing strictly necessary is storing your choice in the cookie banner: it is kept in your browser's local storage (the entry “rf_consent_v1” with your choice and its date), is not sent to us, and you are asked again after 12 months (§ 25 para. 2 no. 2 TDDDG).
Google Analytics and – on profiles of companies that have not claimed their profile – Google AdSense load only when you choose “Accept all” in the cookie banner (Art. 6 para. 1 lit. a GDPR, § 25 para. 1 TDDDG). With “Essential only”, none of these services is loaded.
You can withdraw your consent at any time with effect for the future: under “Cookie settings” at the bottom of every page. We then delete the Google cookies set on this website.
With your consent, this website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics helps us understand how our website is used so that we can improve its content and usability.
For this, Google Analytics sets cookies (“_ga” and “_ga_<ID>”, lifetime up to 2 years) and processes usage data such as the pages viewed, time spent, the page you came from, device, browser and an approximate region. Google Analytics 4 does not store IP addresses. We have switched off Google signals and the use of the data for personalised advertising. The collected data is deleted after 2 months.
Google may also process the data in the USA. Google LLC is certified under the EU-US Data Privacy Framework, so the transfer is covered by the European Commission's adequacy decision (Art. 45 GDPR).
The legal basis is your consent (Art. 6 para. 1 lit. a GDPR, § 25 para. 1 TDDDG). You can withdraw it at any time under “Cookie settings” at the bottom of every page.
Further information can be found at: https://support.google.com/analytics/answer/6004245?hl=en
On profiles of companies that have not claimed their profile, we show advertising through Google AdSense, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, with your consent. We show no advertising on other pages.
AdSense loads only if you have chosen “Accept all” in the cookie banner. Google then sets cookies (e.g. “__gads”, “__gpi”) or similar identifiers and processes data such as your IP address, device and browser information, the page viewed and your interaction with the ads. Google uses this data to deliver ads, measure their reach, prevent fraud and tailor ads to your interests (personalised advertising); for this, Google may combine it with data from other services.
Google may also process the data in the USA. Google LLC is certified under the EU-US Data Privacy Framework (Art. 45 GDPR).
The legal basis is your consent (Art. 6 para. 1 lit. a GDPR, § 25 para. 1 TDDDG). You can withdraw it at any time under “Cookie settings” at the bottom of every page; the page then reloads without advertising.
How Google uses data in advertising: https://policies.google.com/technologies/ads?hl=en
When you review a company through the “Write a review” form, we process your name, your review (stars and text), the proof you upload (photos, videos or voice messages) and – if you provide it – your email address. To prevent abuse, we also store your IP address and your browser's identifier (user agent).
After our check, we publish the review with your name and the proof on the company's profile. We do not publish your email address, IP address or browser identifier; we use the email address only to send you a link to confirm your review.
The legal basis is Art. 6 para. 1 lit. b GDPR (your use of our review service) and, for preventing abuse, Art. 6 para. 1 lit. f GDPR (our legitimate interest in genuine reviews). We keep the data for as long as the review is held by us. You can ask for your review to be deleted at any time at the email address above.
We protect the review form against automated submissions with Cloudflare Turnstile. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Turnstile loads only on the review form page and processes your IP address and technical characteristics of your browser there.
The legal basis is Art. 6 para. 1 lit. f GDPR, our legitimate interest in protecting the form against abuse and spam; access to your device is strictly necessary for this (§ 25 para. 2 no. 2 TDDDG). Cloudflare may process data in the USA and is certified under the EU-US Data Privacy Framework (Art. 45 GDPR).
Further information can be found at: https://www.cloudflare.com/privacypolicy/
On the “List your company” page you can book a call through TidyCal, a service of the AppSumo group based in the USA. The calendar loads only when you click “Load the calendar here”; only then does your browser send your IP address and technical data to TidyCal. When you book an appointment, TidyCal processes your details (e.g. name, email address and the chosen time) and passes them on to us.
The legal basis for loading the calendar is your consent by the click (Art. 6 para. 1 lit. a GDPR, § 25 para. 1 TDDDG), and for the booking Art. 6 para. 1 lit. b GDPR. TidyCal processes the data in the USA, where a level of data protection equivalent to EU law may not exist; by clicking, you also consent to this transfer (Art. 49 para. 1 lit. a GDPR). Alternatively, you can reach us at any time by email or phone.
To process paid bookings on reviewfinder.org we use the payment provider Stripe, Inc., 354 Oyster Point Boulevard, South San Francisco, CA 94080, USA.
When you make a paid booking, the data required for it — in particular your name, email address, billing address, your VAT identification number where applicable, and your payment details — is transmitted directly to Stripe and processed there. We neither collect nor store full card details.
The legal basis is Art. 6(1)(b) GDPR: the transfer is necessary to perform the contract concluded with you. We retain invoice and payment data beyond that where commercial and tax law obliges us to (Art. 6(1)(c) GDPR).
Processing also takes place in the United States. The transfer is based on the European Commission's Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR.
You can find more information in Stripe's privacy policy: https://stripe.com/privacy
You have the right at any time to information about your stored personal data, to correction, deletion, restriction of processing, and to data portability within the framework of legal requirements.
Furthermore, you have the right to revoke given consents at any time with effect for the future and to lodge a complaint with a competent data protection supervisory authority.
Last updated: 28 October 2026