This Privacy Policy explains how Outdoor Checkpoint (accessible at outdoorcheckpoint.com) collects, uses, and protects personal data when you visit our website. We are committed to handling your personal information transparently and in accordance with the General Data Protection Regulation (GDPR) and all applicable data protection laws.

1. Data Controller and Contact

The controller responsible for the processing of personal data on this website is:

If you have any questions or requests regarding the processing of your personal data, please contact us using the details above.

2. Data We Collect and Why

2.1 Server Log Files

When you visit Outdoor Checkpoint, our hosting provider automatically collects and stores information in server log files. This may include:

• IP address (anonymised where technically possible)
• Browser type and version
• Operating system
• Referring URL
• Date and time of access
• Pages accessed and files downloaded

This data is processed on the basis of our legitimate interest (Art. 6(1)(f) GDPR) in ensuring the technical stability and security of our website. Log files are not combined with other data sources and are deleted after a maximum of 30 days.

2.2 Cookies and Tracking Technologies

We use cookies and similar tracking technologies on our website. Cookies are small text files stored on your device. We use the following categories of cookies:

When you first visit our site, you will be presented with a cookie consent banner that allows you to accept, decline, or customise non-essential cookies. You may withdraw or change your consent at any time by clicking the “Cookie Settings” link in the page footer or by clearing your browser cookies.

2.3 Analytics

We may use analytics tools to understand aggregate visitor behaviour, such as which pages are most popular, how visitors navigate the site, and where traffic originates. Where such tools set cookies, this only occurs with your consent (see Section 2.2). Data collected through analytics is aggregated and anonymised wherever possible and is not used to identify individual visitors.

2.4 Affiliate Links

Outdoor Checkpoint publishes independent gear reviews and comparisons and may include affiliate links to third-party retailers. When you click an affiliate link, you will be directed to the third-party website. The third-party retailer may set its own cookies and collect data about your visit in accordance with its own privacy policy. Outdoor Checkpoint does not receive or control any personal data collected by third-party retailers. Affiliate relationships do not influence our editorial assessments.

2.5 Contact via E-mail

If you contact us by e-mail, we will process the personal data you provide (such as your name and e-mail address) solely for the purpose of handling your enquiry. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in responding to communications) or, where you are seeking to enter into a contract, Art. 6(1)(b) GDPR. Data shared in e-mail correspondence is not passed on to third parties and is retained only for as long as necessary to resolve your enquiry.

3. Hosting and Infrastructure

This website is hosted on servers provided by a third-party hosting provider. As part of the hosting service, your IP address and access data are processed on our behalf. We have entered into a data processing agreement (DPA) with our hosting provider as required by Art. 28 GDPR. The hosting provider processes data solely on our instructions and is contractually prohibited from using it for its own purposes.

Server infrastructure may be located within or outside the European Economic Area (EEA). Where data is transferred outside the EEA, such transfers are subject to appropriate safeguards (e.g. Standard Contractual Clauses approved by the European Commission).

4. SSL / TLS Encryption

For security and to protect the transmission of confidential information, this website uses SSL/TLS encryption. You can verify an encrypted connection by the padlock icon in your browser’s address bar and the https:// prefix in the URL. Data transmitted to our website via an encrypted connection cannot be read by third parties in transit.

5. Legal Bases for Processing

We process personal data only where we have a valid legal basis under the GDPR. The legal bases we rely on are:

• Art. 6(1)(a) GDPR – Consent: Where you have freely given, specific, informed, and unambiguous consent (e.g. accepting non-essential cookies).
• Art. 6(1)(b) GDPR – Contract: Where processing is necessary for the performance of a contract or pre-contractual steps at your request.
• Art. 6(1)(c) GDPR – Legal obligation: Where we are required to process data to comply with a legal obligation.
• Art. 6(1)(f) GDPR – Legitimate interests: Where processing is necessary for purposes of our legitimate interests (e.g. IT security, server log analysis, responding to enquiries), except where such interests are overridden by your interests or fundamental rights.

6. Third-Party Sharing and Data Recipients

We do not sell, rent, or trade your personal data. We may share data with the following categories of recipients only where necessary and under appropriate safeguards:

• Hosting and infrastructure providers: For the operation and maintenance of this website (bound by DPA).
• Analytics service providers: To analyse aggregated website usage data (only where consent has been given).
• Advertising and affiliate networks: Cookies and tracking data may be shared with advertising partners to deliver and measure relevant advertisements (only where consent has been given).
• Legal and regulatory authorities: Where we are required to disclose data by applicable law, court order, or governmental authority.

All third-party processors we work with are contractually bound to process data only on our instructions, maintain adequate security measures, and comply with applicable data protection law.

International Data Transfers

Some of our service providers may be located outside the EEA, including in countries that may not provide the same level of data protection as the EU. In such cases, we ensure appropriate safeguards are in place, such as the European Commission’s Standard Contractual Clauses (SCCs), adequacy decisions, or other legally recognised transfer mechanisms, in accordance with Chapter V of the GDPR.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purpose for which it was collected or as required by applicable law:

• Server log files: Maximum 30 days, unless longer retention is required for security incident investigation.
• E-mail correspondence: For the duration necessary to resolve the relevant enquiry and any reasonable follow-up period, typically no longer than 2 years.
• Cookie data: As specified per cookie. Session cookies expire when you close your browser. Persistent cookies have expiry dates set individually; please refer to our cookie settings for details.

Once data is no longer needed and no legal retention obligation applies, it is securely deleted or anonymised.

8. Your Data