Last updated: 5 November 2026. This notice explains which personal data is processed when you visit verobricks.com or use the VERObricks app. It is deliberately limited to what actually happens.
reBricker GmbH
Marktplatz 8
94436 Simbach, Germany
Email: [email protected]
Represented by the managing director Maximilian Leonhart.
We have not appointed a data protection officer because the legal requirements for doing so are not met. Please send privacy questions to the email address above.
VERObricks is a price comparison. You can use the whole site without signing in or entering any data. Personal data is only processed when you use a feature that needs it, such as a price alert or the newsletter. Providing it is voluntary; without it we simply cannot offer that feature.
We do not load fonts, scripts, images or analytics tools from third-party servers. Everything your browser requests comes from our own systems. That is also why there is no cookie banner: we only use strictly necessary cookies and storage (§ 25 (2) German TDDDG).
The website runs on servers of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. In front of these servers sits the network of Cloudflare, Inc. (Cloudflare Germany GmbH, Rosental 7, 80331 Munich) as a protection and acceleration service. Cloudflare forwards every request to our servers and sees your IP address, the requested address and your browser identification. A data processing agreement is in place with Cloudflare; transfers to the USA are covered by the EU-US Data Privacy Framework and standard contractual clauses (Cloudflare privacy policy).
For every request our servers briefly store: IP address, date and time, requested address, status, amount of data transferred, browser and operating system, and the previously visited page (referrer). These logs serve secure operation and troubleshooting and are not linked to other data. The legal basis is our legitimate interest in stable and secure operation (Art. 6 (1) (f) GDPR).
We only set cookies and storage values that are needed for the site to work. None of them is used for advertising or tracking.
You can delete all of these values at any time via your browser settings.
To understand which pages and search terms are used, we use Matomo. Matomo runs on our own servers; no data is sent to the vendor or to third parties. We use Matomo without cookies: no cookie is set and no identifier is stored in your browser. The IP address is truncated before storage so it can no longer be attributed to a person.
We record pages viewed, search terms, clicks on shop links, the truncated IP address, browser, operating system, screen size, language and the referring page. Product pages and searches are counted on the server when the page is delivered; the same data is processed there. The legal basis is our legitimate interest in improving the site (Art. 6 (1) (f) GDPR). Because no cookies are set and nothing is stored in your browser, no consent is required.
You can object to this measurement at any time using the switch below this text. The objection is stored in a cookie named mtm_consent_removed on your device; if you delete your cookies you will need to set it again.
The Matomo code was not loaded (for example because of an ad blocker). No data is being collected.
Your search terms and filters are sent to our search servers and answered there. They are counted anonymously in the audience measurement (section 5) but are not linked to your device or to a person.
For the image search, the selected photo is downscaled in your browser and sent to our own AI infrastructure, which identifies similar sets. The image does not leave our systems, is not passed to external AI providers and is not retained after the request has been answered. The legal basis is providing the feature you requested (Art. 6 (1) (b) GDPR).
The barcode scan uses your device camera locally only. The camera image is not transmitted; only the recognised article number is sent to our servers as a search query. You can revoke camera access at any time in your browser or device settings.
When you set up a price alert we store your email address, the chosen set, your target price, the price region and the language. We use this data solely to notify you when the price drops below your target and for the management emails about your alerts. You will not receive advertising through it.
Every notification contains a link that lets you delete the individual alert or all alerts for your address. Deleted alerts are removed together with their data. The legal basis is the performance of the service you requested (Art. 6 (1) (b) GDPR).
Instead of email you can be notified by push message. Your browser or device asks you explicitly for permission; nothing is set up without your consent.
In the browser, your browser creates a push address with its vendor (for example Mozilla, Google or Apple) and two encryption keys. We store these together with the set, target price, region and language. The message itself is encrypted and can only be read by your browser; the browser vendor only learns that a message is being delivered.
In the VERObricks app, the operating system issues a device token. Delivery runs through the operating system's push service: Apple (Apple Push Notification Service) on iOS and Google (Firebase Cloud Messaging) on Android. These services receive the token and the message content. We store the token together with the alert data.
The legal basis is your consent (Art. 6 (1) (a) GDPR). You can withdraw it at any time by disabling notifications in your browser or device settings or by deleting the alert. We then delete the push data.
For the newsletter we store your email address and language. Sign-up uses double opt-in: you receive an email with a confirmation link and are only subscribed after clicking it. We log the time of sign-up and confirmation to be able to prove consent. Sending is handled by the Listmonk software on our own servers; no external newsletter provider is involved. We do not evaluate opens or clicks in newsletters on a personal basis.
The legal basis is your consent (Art. 6 (1) (a) GDPR). You can withdraw it at any time via the unsubscribe link in every newsletter; your address is then removed from the list.
A user account is not needed for the price comparison. Sign-in currently serves our team only, to maintain content. It runs through our own identity service (Keycloak) at auth.rebricker.com. When signing in, user name, email address, time of sign-in and a session identifier are processed in cookies. The legal basis is the performance of the user relationship (Art. 6 (1) (b) GDPR).
The offers on VERObricks link to the shops of the retailers. Some of these links are affiliate links: if you buy something after clicking, we receive a commission from the retailer or an affiliate network. The price for you does not change. Among others we work with ADCELL (Firstlead GmbH, Berlin) and the eBay Partner Network.
No script, pixel or cookie of these networks is embedded on our site. When you click a shop link you are taken to the retailer or network via a redirect on our site. The retailer or network then receives your IP address, your browser identification and the information that you came from VERObricks, and may set a cookie on its own domain to attribute the purchase to us. From the click onwards the privacy policy of the respective provider applies. We count the click ourselves anonymously in the audience measurement. The legal basis is our legitimate interest in funding the free price comparison (Art. 6 (1) (f) GDPR).
If you email us, we process your details to answer your enquiry. The data is deleted once the enquiry is settled and no statutory retention obligations apply. The legal basis is Art. 6 (1) (b) GDPR where the enquiry concerns a contractual relationship, otherwise Art. 6 (1) (f) GDPR.
The connection to VERObricks is encrypted end to end with TLS. Our servers are located in Germany. Only people who need stored data for the purposes described above have access to it.
You have the following rights regarding your personal data:
Right to object: Where we process data on the basis of a legitimate interest (Art. 6 (1) (f) GDPR), you may object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR). For audience measurement the switch in section 5 is sufficient.
To exercise your rights, an email to [email protected] is enough. You also have the right to lodge a complaint with a supervisory authority. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht), Promenade 18, 91522 Ansbach, Germany (www.lda.bayern.de).
We update this notice when the site or the legal situation changes. The version published here applies.