Privacy Policy

Last updated: 17 September 2026

This policy explains what personal data is processed when you visit reviewatches.com (the "Site"), why, and what rights you have. It is written for readers everywhere, and in particular to meet the EU General Data Protection Regulation (GDPR) and the UK GDPR.

1. Who is responsible

RevieWatches (reviewatches.com) is an independent website run by one person. The site is operated by Avyerinos Kattopatis, Cyprus. Contact: [email protected].

The operator is the data controller for the processing described here. For anything related to your data, write to [email protected].

2. What we process and why

Visiting the Site (server and security logs)

When you load a page, our web server and our security and delivery provider, Cloudflare, process your IP address, browser user agent, the page requested, the referring page and the time. This is needed to deliver pages, keep the Site secure and stop abuse.

• Legal basis: legitimate interests (Art. 6(1)(f) GDPR) in running a secure website.
• Retention: server access logs are rotated automatically and normally deleted within about 10 days, and no later than 30 days.

Privacy-friendly statistics (Umami)

We count visits with Umami, which we host ourselves on our own server in the EU. It sets no cookies. It uses your IP address only at the moment of the visit to work out your country, region and city, and does not store the IP address. It stores the page viewed, referrer, browser, operating system, device type, screen size, language and approximate location, linked to a pseudonymous visit identifier.

• Legal basis: legitimate interests in understanding which content is read, using a method that does not track you across websites.
• Retention: up to 26 months.

Optional analytics (Google Analytics and Microsoft Clarity), only with your consent

If you click "Accept" on our cookie banner, we load Google Analytics (Google Ireland Limited) and Microsoft Clarity (Microsoft Ireland Operations Limited). They use cookies to measure how pages are used. Clarity also records anonymised interactions such as clicks, scrolling and mouse movement to produce heatmaps and session replays. It masks text you type. If you click "Decline", or do nothing, these tools are not loaded.

• Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time through "Cookie Settings" in the footer.
• Retention: as set by each provider, up to 14 months for Google Analytics data and up to 13 months for Clarity.

Advertising (Google AdSense)

The Site shows ads served by Google. Google and its partners may use cookies, device identifiers and your IP address to serve, measure and, where you allow it, personalise ads. Readers in the European Economic Area, the UK and Switzerland see Google's consent message and can accept, refuse or choose which purposes to allow. Where you refuse, Google serves non-personalised or limited ads. Google acts as an independent controller for its advertising. See how Google uses information from sites that use its services.

• Legal basis: your consent where the law requires it, collected by Google's consent message, and otherwise legitimate interests in funding the Site.
• Your controls: Google Ad Settings and youronlinechoices.eu.

Emailing us

If you email us, we process your name, email address and whatever you write, so we can reply. Our mailbox is provided by Microsoft 365.

• Legal basis: legitimate interests in answering enquiries, or steps you asked us to take before a possible agreement.
• Retention: up to 12 months after the conversation ends, unless we need it longer to deal with a legal claim.

Saved articles

The "Save" button stores the articles you bookmark in your own browser (local storage). That list never leaves your device, and we cannot see it. Your cookie choice is stored the same way.

3. Who receives data

• Hosting: our server is a virtual machine in France provided by Contabo GmbH.
• Cloudflare, Inc.: security, performance and delivery of the Site.
• Google: advertising, and analytics if you consent.
• Microsoft: Clarity if you consent, and our email.

We do not sell your personal data, and we do not share it for cross-context behavioural advertising beyond the Google advertising described above.

4. Transfers outside the EU and UK

Cloudflare, Google and Microsoft may process data in the United States and other countries. These transfers rely on the EU-US Data Privacy Framework (and its UK extension), for which these companies are certified, and on the European Commission's standard contractual clauses.

5. Your rights

Under the GDPR and UK GDPR you have the right to:

• access the personal data we hold about you and receive a copy;
• have inaccurate data corrected;
• have data erased;
• restrict processing;
• data portability;
• object to processing based on legitimate interests;
• withdraw consent at any time, without affecting processing that took place before;
• lodge a complaint with a data protection authority, for example the authority in the country where you live. Our lead authority is the Commissioner for Personal Data Protection in Cyprus. You can also contact, for example, the Hellenic Data Protection Authority in Greece or the Information Commissioner's Office in the UK.

To use these rights, email [email protected]. We reply within one month. Most analytics data is pseudonymous, so we may ask for details that let us find it.

California and other US states: you can ask to know, delete or correct personal information, and to opt out of targeted advertising, using the same email address. We do not sell personal information.

6. Automated decisions

We make no decisions about you based solely on automated processing, including profiling, that have legal or similarly significant effects.

7. Children

The Site is meant for adults and is not directed at children. We do not knowingly process children's personal data.

8. Security

The Site is served only over HTTPS. The server and software are kept up to date, and access to administrative areas is restricted. No system is perfectly secure, but we take reasonable steps to protect your data.

9. Changes

If this policy changes, we update the date at the top of this page. Significant changes will also be noted on this page.

See also our Cookie Policy and Terms of Use.