Privacy | Good Shortlist

Who operates the site

Good Shortlist is operated by Valentin Goxhaj, the data controller. Use the contact form for questions about the site or your personal data.

Browsing and security

Hetzner hosts the site; Cloudflare delivers and protects its pages. Providing the service involves processing IP addresses, technical browser information, requested paths and request times. Our server logs are kept for up to 7 days and application logs for 14 days. We use them to investigate faults and abuse, on the basis of our legitimate interest in running a secure, working website.

Cloudflare may process data through its international network. Its privacy policy describes processing and safeguards for international transfers. See also Hetzner’s privacy notice.

Messages to the publication

The contact form collects your email and message to handle questions, corrections and data requests. Both fields are required to use the form; sending a message is optional and is not required to read our guides. Our legal basis is the legitimate interest in responding to requests. Only authorised editors can access the inbox. Email addresses and messages are encrypted in the database and deleted after 30 days, with up to 7 additional days in backups.

Cookies and external links

We use technical cookies to maintain a session and protect forms. Sessions expire after two hours of inactivity; expired session files are removed during daily housekeeping. Cloudflare may use security cookies when it checks for abuse. No advertising networks, commercial tracking pixels or behavioural analytics tools are enabled.

Opening an Amazon or manufacturer link takes you to another website, which has its own terms and privacy notice. Affiliate links, when active, are disclosed. They do not give us access to your identity or order payment details. We do not sell visitors’ personal data or make automated decisions about them.

Your rights

You can request access, correction, deletion or restriction of processing, and object to processing based on legitimate interests. Data portability applies where the GDPR provides for it. You may complain to the Italian data protection authority or the relevant authority in your country. Describe your request in the contact form without including identity documents.