Privacy Policy
Last updated: April 17, 2026
1. Controller
Division by Heroes e.U.
DI Andreas Braumann
Liniengasse 48/22, 1060 Wien, Austria
E-Mail: info@dealzingy.com
2. What This Policy Covers
This policy explains how DealZingy processes personal data when you visit the website, use search, submit a deal, click tracked deal links, send feedback, sign in to the admin area, or contact us.
3. Categories of Data
We may process access and technical data such as IP address, browser information, device information, referrer, timestamps, and request logs.
We may process interaction data such as page views, merchant views, search terms, consent choices, deal clicks, coupon copy events, and feedback signals.
We may process information you actively submit, such as your name, email address, merchant details, deal descriptions, notes, and other form contents.
If you use the admin area, we process authentication and authorization data required to operate secure admin access.
4. Purposes and Legal Bases
We process data to operate the website, ensure security, prevent abuse, and maintain logs on the basis of our legitimate interests under Art. 6(1)(f) GDPR.
We process data that you submit through forms in order to review submissions, respond to inquiries, and communicate with you about your submission. The legal basis is Art. 6(1)(b) GDPR where processing is necessary to handle your request and Art. 6(1)(f) GDPR for operational handling and moderation.
We process analytics and marketing data only where you have given consent through the consent banner. The legal basis is Art. 6(1)(a) GDPR.
We may process data where required to comply with legal obligations, including tax, accounting, and legal retention duties, on the basis of Art. 6(1)(c) GDPR.
5. Cookies and Similar Technologies
DealZingy uses necessary technologies for core site functions, security, consent storage, and admin session handling.
Analytics technologies are loaded only after analytics consent. In the current implementation this includes PostHog.
Marketing technologies are loaded only after marketing consent. In the current implementation this includes Facebook Pixel.
You can change your choices at any time through the cookie preferences control on the site.
6. Recipients and Processors
We use service providers that process data on our behalf or receive data as independent controllers where necessary for their own services.
These may include:
- Supabase for database, authentication, and storage
- Brevo for transactional emails
- PostHog for consent-based analytics and experiments
- Meta Platforms for Facebook Pixel, only with marketing consent
- hosting, CDN, and infrastructure providers required to run the site
7. International Transfers
Some providers may process data outside the European Economic Area. Where this occurs, transfers are intended to rely on an adequacy decision, Standard Contractual Clauses, or another lawful transfer mechanism under Chapter V GDPR, depending on the provider and processing setup in use at the relevant time.
8. Retention
We retain server logs and technical security data only as long as needed for security, troubleshooting, and fraud prevention.
Submission data, moderation records, and audit logs may be stored for as long as necessary to operate the platform, document moderation decisions, and defend legal claims.
Where statutory retention periods apply, we retain the relevant data for the required duration and then delete or restrict it.
9. Your Rights
Subject to the legal requirements, you have the right to access, rectification, erasure, restriction of processing, data portability, and objection.
Where processing is based on consent, you may withdraw that consent at any time with future effect.
If you believe your data is being processed unlawfully, you may lodge a complaint with the Austrian Data Protection Authority:
Österreichische Datenschutzbehörde
Barichgasse 40-42, 1030 Wien, Austria
E-Mail: dsb@dsb.gv.at
Website: dsb.gv.at
10. Deal Tracking and Affiliate Links
When you click a deal, DealZingy may route the click through an internal redirect endpoint in order to register the click event and forward you to the merchant or affiliate destination. This helps us operate the platform, measure conversions, and understand which offers remain active.
11. Changes
We may update this privacy policy where the site, legal requirements, or service providers change. The current version is the one published on this page.