Privacy Policy

Last updated: May 2026

1. Data Controller

European Cribs is the data controller responsible for your personal data, operated from Berlin, Germany. We are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR / DSGVO) and applicable German data protection laws.

Data Controller:
European Cribs
Karl-Marx-Allee 35, 10178 Berlin, Deutschland
E-Mail: hello@europeancribs.com

You have the right to lodge a complaint with the supervisory authority: Berliner Beauftragte für Datenschutz und Informationsfreiheit.

2. Data We Collect

We collect the following categories of personal data:

• Account data: name, email address, membership plan
• Contact data: information you submit via our contact form
• Newsletter data: email address, property preferences, country interests
• Usage data: pages visited, filters used, properties saved (anonymised)
• Technical data: IP address, browser type, device type

3. How We Use Your Data

We use your personal data to:

• Provide and improve our property search service
• Send our weekly property newsletter (with your consent)
• Respond to your enquiries and support requests
• Process membership payments and manage your account
• Comply with legal obligations

4. Legal Basis for Processing

We process your data on the following legal bases under GDPR Art. 6:

• Consent (Art. 6(1)(a)): newsletter subscriptions, marketing emails
• Contract (Art. 6(1)(b)): membership services
• Legitimate interests (Art. 6(1)(f)): service improvement, fraud prevention
• Legal obligation (Art. 6(1)(c)): tax and accounting requirements

5. Data Sharing & Third-Party Processors

We do not sell your personal data. We share data only with the following third-party processors where necessary to operate our service:

• Supabase Inc. (USA / EU region) — database, authentication and user account storage. Data is processed under the EU Standard Contractual Clauses (SCCs). Privacy Policy
• Stripe Inc. (USA) — payment processing for membership subscriptions. Stripe is certified under PCI DSS and processes data under SCCs. Privacy Policy
• Resend Inc. (USA) — transactional and newsletter email delivery. Data processed under SCCs. Privacy Policy
• Google LLC (USA) — Google Analytics 4 for anonymised website usage statistics. IP addresses are anonymised before processing. Privacy Policy | Opt-out
• Hetzner Online GmbH (Germany) — web hosting and server infrastructure. All data physically stored within the EU.

All third-party providers are bound by data processing agreements (DPA) and may only process your data for the purposes specified.

6. Your Rights

Under GDPR, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Withdraw consent at any time
• Data portability
• Lodge a complaint with your supervisory authority

7. Cookies

We use essential cookies to operate our service and optional analytics cookies to understand how visitors use our site. You can manage cookie preferences at any time. See our Cookie Policy for details.

8. Data Retention

We retain your data for as long as necessary to provide our service or as required by law. Newsletter subscribers' data is deleted within 30 days of unsubscribing.

9. Contact

Deutsche Fassung dieser Datenschutzerklärung