Privacy policy

This website is deliberately data-frugal: no advertising networks, no cookies, no external fonts. Reach measurement runs on our own server, without cookies and without passing anything to third parties, and one click opts you out (section 5).

Legally binding version: the German privacy policy is the authoritative version; this English page is a convenience translation.

1. Controller

The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Jean-Marc Mihoc, trading as Mihoc Business
Chaussée de Mons 33, Boîte 33, 1400 Nivelles, Belgium
Email: redaktion@bestenki.de

No data protection officer has been appointed; the conditions of Art. 37 GDPR are not met.

2. Hosting and server log files

This website is hosted by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus, on servers located in Germany. When you access the pages, the provider automatically collects information transmitted by your browser (server log files): IP address, date and time of the request, page requested, volume of data transferred, referrer URL, and browser and operating system details.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the technically fault-free operation and the security of the website. The data is deleted after 30 days at the latest. A data processing agreement under Art. 28 GDPR is in place with the hosting provider.

3. Cookies

This website sets no cookies. There is no cross-site tracking, no advertising network and no third-party service embedded in these pages. How reach is measured is set out in section 5.

4. Local storage of your theme preference

When you switch between the light and dark theme, your browser stores that choice in local storage under the key bestenki-theme. This information stays on your device, is never transmitted to us and contains no personal data. You can delete it at any time through your browser settings. The storage is necessary to provide the function you explicitly requested (section 25(2)(2) TDDDG).

5. Reach measurement on our own server

So that we know which reviews are actually read, we count page views ourselves. The measurement runs entirely on this website's own server (/track.php); no third-party service is embedded and no data is passed to third parties.

We record: the page requested, date and time, time spent and scroll depth on the page, the referring address (a search engine, say), clicks on links to vendor websites, device type, operating system, browser, screen size and browser language. Your IP address is used only to limit bulk requests and is stored truncated (the last segment is replaced by 0, e.g. 81.240.12.0), which makes it useless for identifying you. Your location is not determined.

No cookies are set. Your browser stores two random numbers in local storage under the keys bk_vid and bk_sid, so that several page views of one visit are counted as one visit; the second is renewed after 30 minutes of inactivity. Neither contains personal data and neither can be read by any other website.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is in steering editorial work by what readers actually want. The local storage is strictly necessary for this measurement (section 25(2)(2) TDDDG). The data is deleted automatically after 400 days at the latest.

Objection (Art. 21 GDPR): one click and this browser is no longer counted. The setting applies to this device and this browser; it is kept in local storage under bk_optout and can be reversed here at any time.

Without JavaScript, nothing is measured in the first place.

6. No external content

No fonts, scripts, maps or videos are loaded from third-party servers. All styling and scripts are served from our own server. As a result, visiting the site creates no connection to third parties.

7. Contact by email

If you write to us by email, we process your details solely in order to handle your enquiry. The legal basis is Art. 6(1)(f) GDPR, or Art. 6(1)(b) GDPR for contract-related enquiries. We delete enquiries as soon as they have been dealt with and no statutory retention obligations prevent it.

8. External links

Our reviews link to the websites of the respective vendors. Clicking such a link takes you off our site; the operator of the destination is responsible for data processing there. Please refer to their privacy notices.

9. Your rights

Within the statutory conditions you have the right at any time to information (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) and to object to processing based on legitimate interests (Art. 21 GDPR). You may withdraw any consent given at any time with effect for the future.

You also have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence or of the alleged infringement. The competent authority for us is Since our establishment is in Belgium, the competent authority for us is the Belgian data protection authority: Autorité de protection des données / Gegevensbeschermingsautoriteit, Rue de la Presse 35, 1000 Brussels, Belgium.

10. Changes to this policy

We adapt this privacy policy whenever changes to the website or to the legal situation require it. The version published here is the applicable one. Last updated: August 2026.