Data only for a clear purpose.

1. Controller

Robert Breuss
Einzelunternehmen
Business name: INSODEMA
Betreiber von ShopperMatch · ShopperMatch ist ein INSODEMA Tool
INSODEMA website
Kaiser-Friedrich-Str. 2a
40597 Düsseldorf
Deutschland
Email: legal@shopper-match.com

2. Hosting and server logs

When the website is accessed, the hosting environment processes technically necessary data, in particular IP address, time, requested resource, response status and browser/device information. The purposes are delivery, error analysis and protection against misuse. The legal basis is Article 6(1)(f) GDPR.

Recipient category – hosting: Hosting-Dienstleister innerhalb Deutschlands
Server location: Deutschland

Configured retention of server logs: up to 7 days, unless a security incident requires evidence to be retained for longer. Technical backups may temporarily contain data for longer in line with the applicable backup cycle and are not used for regular operational purposes.

3. Necessary cookies and sessions

ShopperMatch currently uses no analytics, advertising or cross-site tracking cookies. Secure forms and authenticated areas may use a server-side session with a technically necessary session cookie. It is used in particular for CSRF protection and, after a successful login, to maintain the authenticated state.

The shoppermatch_cookie_note cookie stores only that the cookie field note has already been displayed. It expires after twelve months, uses SameSite=Lax and, under HTTPS, the Secure attribute. Neither function is used for profiling or advertising.

Strictly necessary storage may be used without separate consent under Section 25(2) TDDDG. If ShopperMatch later uses optional analytics or marketing technology, it will remain blocked until valid consent has been obtained.

4. Preregistration

For preregistration, we process the email address and, where voluntarily provided, postcode, town/city, working radius and mystery-shopping experience. Source, campaign, referral code, entry domain and entry page may also be stored to make the origin of the registration traceable.

The purpose is to create and maintain the requested ShopperMatch preregistration, prepare a later shopper profile and provide regional classification for the intended matching functions. Where processing is necessary for the requested preregistration and preparation of later use, it is based on Article 6(1)(b) GDPR; security and abuse prevention may additionally be based on Article 6(1)(f) GDPR.

Optional information remains voluntary and may improve later regional or specialist matching. The form also records that this privacy information has been acknowledged; this acknowledgement is not blanket consent to data processing.

Preregistration alone does not create a Shopper user account. An account is opened only through a separate registration process actively initiated by the user.

5. Shopper account, email verification and login

If you explicitly create a Shopper account, we process your email address and the account data required to set up, protect and use that account. This includes in particular the account status, timestamps for email verification and password setup, a password stored only as a secure hash, login and activity timestamps and – to protect against misuse – the number of failed login attempts and, where applicable, a temporary account lock.

For email verification and the initial password setup, we use time-limited single-use links. The associated tokens are not stored in plain text, but only in hashed form. After use, revocation or expiry, they can no longer be used for the intended action.

The purpose of this processing is to provide the personal Shopper account requested by the user, including secure authentication. Where processing is necessary for this purpose, it is based on Article 6(1)(b) GDPR. Measures to protect against unauthorised access, automated attacks and other misuse may additionally be based on Article 6(1)(f) GDPR; our legitimate interest is the security of user accounts and the platform.

If a preregistration already exists under the same verified email address, the information already stored there may be assigned to the same internal Shopper identity and reused in the later account. This prevents two separate profiles from being created. The existing preregistration does not thereby become an account opening retrospectively; the decisive event is the separate registration process initiated by the user.

Acknowledgement of this privacy notice when the account is created is recorded as evidence together with the policy version, source and time. It is not consent to advertising or opportunity emails.

6. Referral links and recommendations

Registered users may receive a personal referral link and share it themselves using functions on their own device or communication service, for example by copying the link or using a local sharing function. ShopperMatch does not require the referred person's email address or telephone number, does not import their address book and does not send a tell-a-friend message on the user's behalf.

Before a referral link is voluntarily opened, ShopperMatch therefore does not process contact details of the referred person supplied by the referring user. Only when that person opens the link themselves and voluntarily interacts with ShopperMatch or registers are the resulting data processed for the purposes described. The referral code may then be associated with the registration to trace its origin and, where applicable, eligibility for non-monetary Shopper Reward Credits.

7. Contact form and direct enquiries

If you use the contact form, we process your email address, selected topic and message text. Name and organisation are voluntary. The information is used to process and answer your specific enquiry. If you yourself enquire about possible cooperation or use as an agency, processing may also serve to take pre-contractual steps at your request.

Depending on the content of the enquiry, the legal basis is Article 6(1)(b) GDPR for pre-contractual measures at your request or Article 6(1)(f) GDPR for handling other relevant communication. Our legitimate interest is the secure and traceable handling of incoming enquiries and communication with people who contact ShopperMatch themselves.

Contact-form messages are not additionally stored in a separate ShopperMatch contact database. They are transmitted through the configured email infrastructure to the responsible ShopperMatch mailbox. They are retained there only as long as necessary for handling, follow-up questions and any required legal evidence, and are then deleted unless statutory retention obligations apply.

The contact form contains no bundled consent to advertising or opportunity emails. Please do not send credentials or special categories of personal data unless they are strictly necessary for your enquiry.

8. Email about suitable mystery-shopping opportunities

Neither preregistration nor creation of a Shopper account is conditional on advertising consent. Additional consent for emails about suitable mystery-shopping opportunities is voluntary and is handled separately from the processing necessary for registration and account operation.

Before promotional or opportunity-related email communication, consent is verified through a confirmation message sent to the email address provided. Consent can be withdrawn at any time with effect for the future; in particular, an unsubscribe link is provided in relevant emails.

9. Consent and evidence data

ShopperMatch documents relevant consent and acknowledgement events with type, status, policy version, source and time. These records are used to make privacy notices, consents, withdrawals and communication status traceable.

10. Recipients

Personal data is made available only to technically or operationally necessary recipients or categories of recipients. These may include hosting infrastructure and the technical email infrastructure used to send and receive emails. Private shopper contact details are not disclosed to mystery-shopping agencies by default.

11. Retention

Preregistration, account and associated evidence data are retained only for as long as necessary for the respective purposes described and applicable evidence or legal requirements. For preregistrations, the currently configured rule is: Vorregistrierungs- und Profildaten werden gespeichert, solange die Vorregistrierung besteht oder sie für den Aufbau, die Aktivierung und Nutzung des ShopperMatch-Profils erforderlich sind. Bei längerer Inaktivität wird die Erforderlichkeit regelmäßig überprüft. Auf Wunsch bzw. bei berechtigtem Löschverlangen werden personenbezogene Daten gelöscht, soweit keine gesetzlichen oder überwiegenden berechtigten Aufbewahrungsgründe entgegenstehen.. For active accounts, the data required for account operation is generally processed for the lifetime of the account; statutory or objectively necessary evidence periods may extend beyond that in individual cases.

12. Rights

Subject to the statutory conditions, rights include in particular access, rectification, erasure, restriction, data portability and objection. Consent that has been given may be withdrawn at any time with effect for the future. There is also a right to lodge a complaint with a competent data-protection supervisory authority.

Competent supervisory authority: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)

13. Version

Version: 2026-08-17
Effective since: 2026-08-17