1. Controller and Contact

The controller responsible for data processing on this website (outdoortestreport.com) within the meaning of the General Data Protection Regulation (GDPR) is:

For any questions regarding the processing of your personal data, your rights, or this Privacy Policy, please contact us at the e-mail address above.

2. Scope and Purpose

Outdoor Test Report is an independent editorial magazine publishing reviews and comparisons of outdoor and winter gear. This Privacy Policy explains what personal data we collect when you visit our website, how we use it, the legal bases for processing, and what rights you have in relation to your data.

We are committed to handling your personal data responsibly and in compliance with the GDPR (Regulation (EU) 2016/679) and other applicable data protection laws.

3. Data We Collect

3.1 Automatically Collected Data (Server Logs)

When you access our website, your browser automatically transmits certain information to our web server. This includes:

• IP address (anonymised or full, depending on hosting configuration)
• Date and time of the request
• Page requested (URL)
• HTTP status code
• Browser type and version
• Operating system
• Referring URL

This data is processed to ensure the technical operation and security of the website. The legal basis is Art. 6(1)(f) GDPR (legitimate interests in operating a secure, functional website). Log files are generally retained for up to 30 days and then deleted or anonymised.

3.2 Contact Enquiries

If you contact us by e-mail, we will process the data you provide (e.g. your name, e-mail address, message content) solely for the purpose of handling your enquiry. The legal basis is Art. 6(1)(f) GDPR (legitimate interests in responding to communications) or, where applicable, Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures). Data will be deleted once your enquiry has been fully resolved, unless statutory retention periods require otherwise.

4. Hosting

This website is hosted on external servers provided by a third-party hosting provider. The hosting provider processes connection and log data on our behalf in order to make the website available. Any such provider is bound by a data processing agreement in accordance with Art. 28 GDPR and is permitted to process personal data only for purposes of providing the hosting service.

The legal basis for processing data in connection with hosting is Art. 6(1)(f) GDPR (our legitimate interest in providing a reliable, secure online presence).

5. SSL / TLS Encryption

This website uses SSL/TLS encryption for all data transmitted between your browser and our server. You can recognise an encrypted connection by the padlock icon in your browser's address bar and the https:// prefix in the URL. This ensures that data you transmit to us — including any personal information — cannot be intercepted by third parties in transit.

6. Cookies

6.1 What Are Cookies?

Cookies are small text files stored on your device by your browser when you visit a website. They allow the website to recognise your browser and store certain information between sessions.

6.2 Strictly Necessary Cookies

Strictly necessary cookies are required for the basic functioning of the website (e.g. session management, security). These are set without your prior consent on the basis of our legitimate interest (Art. 6(1)(f) GDPR) or, where applicable, because they are technically essential.

6.3 Analytics and Performance Cookies

We may use analytics tools to understand how visitors interact with our website (e.g. pages visited, session duration, traffic sources). Where such tools set cookies or collect data that can be attributed to you, we will only do so with your prior consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time via our cookie settings banner or by adjusting your browser settings.

6.4 Advertising and Third-Party Cookies

We may display advertising on our website, which may be served by third-party advertising networks. These networks may set their own cookies to deliver relevant advertisements and measure ad performance. Such cookies are only placed with your consent (Art. 6(1)(a) GDPR). Please refer to the respective third parties' privacy policies for further information.

6.5 Managing Cookies

You can configure your browser to refuse or delete cookies at any time. Please note that disabling certain cookies may affect the functionality of the website. Most browsers offer the following options:

• View and delete stored cookies
• Block third-party cookies
• Block all cookies (may limit site functionality)
• Receive a notification before a cookie is set

Please consult your browser's help documentation for instructions specific to your browser.

7. Tracking and Analytics

To improve the content and performance of our website, we may use web analytics services. These services collect information about your use of the site — such as pages visited, time spent on pages, and general geographic location — on an anonymised or pseudonymised basis where possible.

Where tracking involves the processing of personal data or the use of cookies that are not strictly necessary, we rely on your consent (Art. 6(1)(a) GDPR). You may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

Where analytics tools are used, we enter into data processing agreements with the respective service providers in accordance with Art. 28 GDPR. If data is transferred to third countries (outside the EU/EEA), we ensure appropriate safeguards are in place (e.g. Standard Contractual Clauses pursuant to Art. 46 GDPR).

8. Affiliate Links

Some articles on this website may contain affiliate links. If you click on such a link and subsequently make a purchase, we may receive a commission. Clicking an affiliate link may allow third parties (such as affiliate networks or retailers) to set cookies or collect data about your visit. Any such tracking only occurs where you have provided your consent or where it falls within the legitimate interests pursued by those third parties. Please refer to the respective third parties' privacy policies for further information.

Affiliate links are disclosed editorially. The inclusion of affiliate links does not affect the independence or editorial integrity of our gear reviews and comparisons.

9. Third-Party Services and Data Sharing

We do not sell your personal data to third parties. We may share personal data with third parties only in the following circumstances:

• Service providers (processors): Hosting providers, analytics services, and similar technical service providers that process data on our behalf under a data processing agreement (Art. 28 GDPR).
• Advertising partners: Third-party advertising networks that serve ads on our website, subject to your consent where required.
• Legal obligations: Where we are required to disclose data by applicable law, court order, or governmental authority.
• Business transfers: In the event of a merger, acquisition, or sale of assets, personal data may be transferred as part of that transaction, subject to the same privacy protections.

All third-party processors are contractually required to process your data solely for the specified purposes and in accordance with applicable data protection law.

International Data Transfers

Where personal data is transferred to countries outside the European Economic Area (EEA) that do not provide an equivalent level of data protection, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission pursuant to Art. 46(2)(c) GDPR, or we rely on an adequacy decision where applicable.

10. Legal Bases for Processing

We process personal data only where a legal basis under the GDPR exists. The main legal bases we rely on are:

• Art. 6(1)(a) GDPR — Consent: Where you have given us your explicit consent (e.g. for non-essential cookies, analytics, or marketing).
• Art. 6(1)(b) GDPR — Contract: Where processing is necessary for the performance of a contract with you or to take pre-contractual steps at your request.
• Art. 6(1)(c) GDPR — Legal obligation: Where processing is necessary to comply with a legal obligation to which we are subject.
• Art. 6(1)(f) GDPR — Legitimate interests: Where processing is necessary for purposes of our legitimate interests (e.g. IT security, fraud prevention, website operation), provided those interests are not overridden by your interests or fundamental rights.

11. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Once the retention period has expired, data is securely deleted or anonymised. Specific retention periods are described in the relevant sections above.

12. Your Data Subject Rights

Under the GDPR, you have the following rights in