Privacy Policy.

Scope and responsible operator

This notice covers the PEH website operated by Sergio Humberto Nevarez Garibaldi in Germany. The controller's postal address and contact email appear in the Legal Notice. Retailers and linked services have their own privacy notices.

Browsing and saved finds

Website requests involve connection data such as an IP address, requested URL and browser information. Hosting and security providers may keep access and error logs to deliver, secure and troubleshoot the site. Having no analytics identifier does not mean no technical data is processed.

Saved finds use local storage on your device and are not synchronised to an account. Search and filter choices may appear in URLs, browser history and hosting logs.

Contact messages

The contact form processes your email address, message, topic and selected product reference to respond to your enquiry. The email provider delivers messages to the PEH mailbox; the planned provider transition is described below. Sending a message does not subscribe you to marketing. The form reports a sending failure if email delivery is unavailable.

A request identifier, payload hash, timestamp and delivery state help prevent duplicate submissions and limit sending attempts for a 24-hour window. When private server storage is configured, these references survive restarts in a separate local database; otherwise they remain in process memory. Expired references are removed at server startup, during hourly cleanup while the server is running, or on the next valid submission. If the server is offline, cleanup resumes when it starts. Message bodies are not written to the application’s click-event files. Delivered messages and replies remain in the mailbox under the retention schedule below.

Affiliate click measurement

When configured, PEH records the clicked product identifier, button location, edition and time. This event record contains no name, email, IP address, visitor ID or advertising cookie. Hosting logs are separate. Counts describe clicks, not individual people or confirmed purchases.

Supported Do Not Track and Global Privacy Control signals suppress this collection. Retailers can separately attribute qualifying purchases and provide affiliate reports. PEH does not add a cross-site advertising profile to these event records.

Providers and external content

Hostinger hosts this website. Titan provides the existing PEH mailbox; the planned transition to Hostinger Email is described below. These providers process the information necessary for their services. Provider-operated infrastructure and support may involve processing outside the European Economic Area; the provider details below distinguish verified information from checks still pending.

This website serves its fonts and included product images from PEH. It has no PEH user accounts, newsletter subscriptions or public comments. Images without a documented usage basis are replaced with placeholders. No video player is currently embedded. A video link, when available, opens YouTube separately. Retailers receive connection and purchase-related information under their own policies after you follow their links.

AI assists editorial production. The contact handler does not forward visitor messages to an AI service. Editor-preview error-reporting hooks are separate from the visitor contact flow; the final hosted build is checked for unintended third-party scripts before publication.

Purposes, legal bases and retention

The purpose-by-purpose legal bases, provider arrangements and retention schedule are described in Operational privacy details below. Our use of legitimate interests is limited to the stated purposes, subject to your rights and the safeguards described here. Browsing alone is not consent to optional tracking.

Saved finds have no automatic expiry: remove individual items or clear the site data in your browser. Contact retry references have a 24-hour validity window. Expired references are deleted at server startup and hourly while running, as well as on valid submissions; an hourly sweep may retain a reference for up to one additional hour. Cleanup catches up after downtime. Provider backup copies have their own retention arrangements. The new event-retention control expires raw click data and its application recovery copies after 90 days from the end of the recorded UTC day. Hosting records and contact messages follow the separate schedules below.

Your rights and choices

Where applicable, you may request access, correction, deletion, restriction or portability of personal data, object to processing based on legitimate interests, or withdraw consent for future processing that relies on it. Rights depend on the processing and jurisdiction; withdrawal does not undo earlier lawful processing.

Contact the operator in the Legal Notice. Proportionate verification may be needed, but do not send identity documents or sensitive records unless necessary and specifically requested through an appropriate channel. You may complain to the relevant data-protection authority. In EU/EEA matters this can include the authority where you live, work or believe an infringement occurred.

PEH does not make automated decisions with legal or similarly significant effects about visitors. It is a general-audience service, not intended to collect children’s personal information through its contact form. Contact the operator if a child’s information has been provided.

Security and changes

Access to operational records and mail should be limited to the people and providers needed to run the service. No internet service guarantees absolute security. Keep sensitive material out of general enquiries.

This notice changes when processing changes. The date above identifies this version. The operational details distinguish current arrangements, the planned provider transition and our retention schedule.

Operational privacy details

Purpose-by-purpose legal bases

Website delivery, security and prevention of form abuse rely on Article 6(1)(f) GDPR: our legitimate interests in operating a secure, usable editorial website. Answering general enquiries and correction requests also relies on Article 6(1)(f). Where a message asks us to take steps toward a contract with you, Article 6(1)(b) applies to those necessary steps instead. Handling statutory data-rights requests relies on Article 6(1)(c). Limited first-party affiliate-click measurement relies on Article 6(1)(f), to understand which editorial links are useful without creating visitor profiles; you may object, and supported Do Not Track and Global Privacy Control signals suppress it. Optional advertising or tracking requiring consent will not be enabled on the basis of merely browsing.

Hosting log retention

Hostinger processes connection and security records to operate and protect the website. The application does not create a separate visitor access-log database. Hostinger controls infrastructure logs and provider backups. Its published retention criteria are the continuing need to provide services, meet legal obligations and address relevant fraud or security concerns; these are provider criteria, not a PEH-controlled deletion timer. A fixed lifetime for PEH's infrastructure access, security and runtime logs has not been confirmed. Dashboard display windows do not establish when underlying records are erased. For covered customer data, Hostinger's DPA provides for deletion 30 days after service termination, subject to the particular service terms. This does not mean all operational logs expire after 30 days. Our own application records follow the separate schedules below. Contact us using the privacy-request details below for questions about retention or a specific record.

Contact mailbox retention

Our operating schedule is to review resolved general enquiries monthly and delete them from the PEH mailbox within 90 days of resolution, including copies in Sent and Trash. Moving a message to Trash alone is not deletion from the mailbox. Unresolved enquiries remain only while needed. We retain the minimum necessary record for a specific legal obligation or actual dispute and document that reason and period separately. This is an operator-managed schedule, not an automated purge. Provider security records, backups and legally required retention follow the provider terms separately. We plan to move the PEH address from Titan to Hostinger Email as part of this website launch. Delivery may be interrupted during setup; do not assume a message reached us when the form reports a failure.

Click record retention

Raw click files and the application-created backup/restore copies expire 90 days after the end of their UTC calendar day. The replacement server removes expired files at startup and checks hourly while running; an offline server clears expired files when restarted. Records contain a product reference, placement, edition, timestamp and preview/production flag, without IP addresses, email addresses, user-agent strings or visitor identifiers. Hosting logs and provider backups are separate. This retention control is part of the replacement website. Provider-managed backup retention follows the separate hosting lifecycle described above.

Providers and international transfers

Hostinger International Ltd. (Cyprus), identified on our hosting invoice, supplies website hosting. The existing PEH mailbox uses Titan Solution Ltd SEZC (Cayman Islands); the planned replacement is Hostinger Email. The replacement mailbox has not yet been verified. Titan lists Amazon Web Services in the United States for email hosting and may retain historical service records under its own policy. A provider change does not prove immediate erasure of every provider-held copy. Hostinger's Data Processing Addendum provides a mechanism for covered international transfers, including EU Standard Contractual Clauses under its stated conditions. The hosting plan information identifies website processing in Arizona, USA and backups in Boston, USA. No EEA-only processing claim is made. Hostinger's and Titan's provider documents are linked below. Contact the operator for information about safeguards relevant to your data. Website fonts and included images are served by PEH. No video player is embedded. Retailers and video services process information under their own notices when you follow external links.

Rights request contact and process

Send privacy and data-rights requests to contact_peh@productexplorerhub.com or use the contact form with the topic General enquiry. Describe the request and the email address used for any earlier enquiry. Do not send passwords or identity documents with your initial message. We may request proportionate verification when needed to protect your information.

For information about the safeguards relevant to your data, contact PEH using the details in the Legal Notice.