Skip to main content

Privacy Policy

Last updated: 2026-09-01

This Privacy Policy explains what personal data SmartAds AS ("we", "us") processes when you visit reviewservice.org, why we process it, on what legal basis, and which rights you have under the EU General Data Protection Regulation (GDPR).

We keep this short and specific: we name every service that actually receives data from your browser on this website, rather than listing services we do not use.

1. Who is responsible

The controller within the meaning of Article 4(7) GDPR is:

SmartAds AS

Skøyen terrasse 33, 0276 Oslo, Norway

Johnny Myklebust · Org.nr. 912796620

Email: contact@smartads.as

2. Scope of this policy

This policy applies to reviewservice.org and all of its language versions (/en/, /de/, /fr/, /es/, /it/, /pl/).

It does not apply to the websites of the online shops and other third parties we link to. Once you follow a link away from our site, the privacy policy of the destination site applies. We have no control over what those operators collect or how they use it.

3. What we process, why, and on what legal basis

3.1 Server log data

Every time a page or file is requested, your browser automatically transmits technical data that is written to a server log:

  • your IP address (shortened or full, depending on the log)
  • the date and time of the request
  • the URL requested and the amount of data transferred
  • the referring URL, if your browser sends one
  • browser type and version, operating system and language settings

Purpose: delivering the website, detecting and defending against attacks, abuse and technical faults, and diagnosing errors.

Legal basis: Article 6(1)(f) GDPR. Our legitimate interest is the secure, stable and correct operation of the website.

Retention: log data is deleted or anonymised within 30 days at the latest, unless a specific incident requires us to keep individual entries longer as evidence.

Recipient: our hosting and content delivery provider, Google Cloud (Google Cloud EMEA Limited, Ireland, and Google LLC, USA), acting as our processor under Article 28 GDPR.

3.2 Google Analytics

We use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

Google Analytics sets cookies and similar identifiers in your browser and collects, among other things: a randomly generated user and session identifier, the pages you view and how long you stay, clicks and scroll events, approximate location derived from your IP address (country, region, city), your device type, screen resolution, browser, operating system and language, and the referrer that brought you to our site. Google Analytics 4 shortens IP addresses before they are stored and does not log the full IP address.

Purpose: understanding which pages and reviews are used, how visitors navigate the site, and where content or performance needs improvement. We use these statistics in aggregate; we do not try to identify individual visitors.

Legal basis: your consent under Article 6(1)(a) GDPR and the national provisions implementing the ePrivacy Directive for storing and reading information on your device. You can withdraw your consent at any time with effect for the future — see section 6.

Retention: event and user data in Google Analytics is retained for a maximum of 14 months and then deleted automatically. Aggregated reports may be kept longer.

Recipient and international transfer: Google Ireland Limited as our processor; data may be transferred to Google LLC in the United States. Google LLC is certified under the EU–U.S. Data Privacy Framework, and we additionally rely on the European Commission's Standard Contractual Clauses. Despite these safeguards, we cannot rule out that U.S. authorities may access such data.

You can prevent Google Analytics entirely by installing Google's browser opt-out add-on: https://tools.google.com/dlpage/gaoptout — or by blocking the relevant cookies in your browser. Google's own privacy policy is at https://policies.google.com/privacy.

3.3 Google Fonts

The typeface used on this website is loaded from Google's servers (fonts.googleapis.com and fonts.gstatic.com, operated by Google Ireland Limited). When a page loads, your IP address and browser information are transmitted to Google so the font file can be delivered.

Purpose: consistent, legible typography across devices.

Legal basis: Article 6(1)(f) GDPR — our legitimate interest in a uniform and correctly rendering presentation of our content.

International transfer: as described in section 3.2.

3.4 Affiliate links and commission tracking

reviewservice.org is financed through affiliate commissions. Many links to online shops on this website are affiliate links, supplied by affiliate networks including Awin, CJ Affiliate, Tradedoubler, TradeTracker, Admitad / Mitgo, Impact, Kelkoo, Convertiser, Commission Factory and comparable providers.

When you click such a link, you are forwarded to the shop via the network's redirect server. In the course of that redirect the network typically processes: the fact and time of the click, the partner ID identifying us, the target shop, your IP address, your browser and device information and the referring page, and it usually stores a cookie or a comparable identifier in your browser. If you subsequently place an order at that shop, the network matches the order to the click so that we are credited with a commission. We receive only aggregated, non-identifying statistics from the networks — number of clicks, number of sales, commission amounts. We do not receive your name, your address, your email address or the contents of your order.

Purpose: measuring the success of our referrals and billing the commissions that finance this website.

Legal basis: your consent under Article 6(1)(a) GDPR for the storing and reading of information on your device by the network, and Article 6(1)(f) GDPR for the commercial operation of an affiliate-financed site.

Controller: for the processing that happens after you leave our site, the respective network and the shop are responsible under their own privacy policies, which we cannot influence.

The price you pay is never affected by whether you use an affiliate link. Our editorial assessments are not influenced by commission rates — see our Terms of Service.

3.5 Contacting us by email

If you write to us, we process your email address, your name if you provide it, and everything else contained in your message.

Purpose: answering your enquiry and, where necessary, follow-up questions.

Legal basis: Article 6(1)(b) GDPR where your enquiry relates to a contract or pre-contractual steps; otherwise Article 6(1)(f) GDPR, our legitimate interest in responding to enquiries addressed to us.

Retention: we delete correspondence once your enquiry has been dealt with conclusively and no statutory retention periods apply. Business correspondence subject to commercial or tax law retention obligations is kept for the statutory period of 6 or 10 years.

3.6 What we do not do

  • We do not operate user accounts, logins or a newsletter on this website.
  • We do not run a contact form; there is no form on this site that submits data to us.
  • We do not sell personal data, and we do not pass it on for third-party advertising purposes.
  • We do not use automated decision-making or profiling that produces legal effects for you within the meaning of Article 22 GDPR.

4. Recipients of your data

Personal data is disclosed only to:

  • Google Cloud (hosting and content delivery) — processor under Article 28 GDPR
  • Google Ireland Limited (Google Analytics, Google Fonts)
  • Affiliate networks, when you click an affiliate link, as described in section 3.4
  • Public authorities and courts, where we are legally obliged to disclose data

Beyond that, we do not share your data with third parties.

5. Transfers outside the EU/EEA

Some of the providers named above are part of corporate groups with entities in the United States. Where personal data is transferred to a third country, we rely on an adequacy decision of the European Commission (EU–U.S. Data Privacy Framework), on Standard Contractual Clauses pursuant to Article 46(2)(c) GDPR, or on your explicit consent pursuant to Article 49(1)(a) GDPR. You should be aware that the level of data protection in the United States is not equivalent to that of the EU and that access by U.S. authorities cannot be excluded.

6. Cookies and your choices

A cookie is a small text file that a website stores in your browser. We distinguish:

  • Strictly necessary cookies — required for the site to function and to be delivered securely. These are set on the basis of Article 6(1)(f) GDPR and cannot be switched off.
  • Analytics cookies — set by Google Analytics (see section 3.2) and used only with your consent.
  • Affiliate cookies — set by the affiliate networks when you click a partner link (see section 3.4).

You can control cookies at any time in your browser settings: block all cookies, block third-party cookies only, or delete cookies already stored. Every current browser offers these settings under "Privacy" or "Cookies and site data". If you block all cookies, parts of the website may not work as intended.

To withdraw consent for analytics, delete the Google Analytics cookies in your browser and install the opt-out add-on linked in section 3.2. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

7. Your rights

Under the GDPR you have the following rights in relation to your personal data:

  • Access (Article 15) — to be told whether we process data about you and, if so, which data
  • Rectification (Article 16) — to have inaccurate data corrected and incomplete data completed
  • Erasure (Article 17) — to have your data deleted where one of the grounds in Article 17 applies
  • Restriction of processing (Article 18)
  • Data portability (Article 20) — to receive data you provided in a structured, machine-readable format
  • Objection (Article 21) — to object at any time, on grounds relating to your particular situation, to processing based on Article 6(1)(f) GDPR. Where data is processed for direct marketing, you may object at any time without giving reasons.
  • Withdrawal of consent (Article 7(3)) — at any time, with effect for the future

To exercise any of these rights, write to contact@smartads.as. We will respond within one month; if a request is complex we may extend this by up to two further months and will tell you why.

You also have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or of the alleged infringement — Article 77 GDPR. Our supervisory authority is the Norwegian Data Protection Authority (Datatilsynet), Postboks 458 Sentrum, 0105 Oslo, Norway — https://www.datatilsynet.no.

8. Data security

This website is delivered exclusively over encrypted HTTPS connections (TLS), which you can recognise by the lock symbol in your browser's address bar. We apply appropriate technical and organisational measures under Article 32 GDPR to protect data against loss, manipulation and unauthorised access, and we review those measures as technology develops. Please note that transmission over the internet can never be guaranteed to be entirely secure.

9. Is providing data mandatory?

You are under no statutory or contractual obligation to provide personal data. The technical data described in section 3.1 is, however, unavoidable when you request a web page — without it, the page cannot be delivered to you. Everything else is voluntary.

10. Children

This website is aimed at adults. We do not knowingly process personal data of children under 16. If you believe a child has provided us with personal data, please contact contact@smartads.as and we will delete it.

11. Changes to this policy

We update this policy when our website, the services we use or the legal requirements change. The current version, with its date, is always available at reviewservice.org/en/privacy-policy/. Where a change materially affects processing based on your consent, we will ask for your consent again.

12. Contact

Questions about this policy or about your data:

SmartAds AS

Skøyen terrasse 33, 0276 Oslo, Norway

Johnny Myklebust · Org.nr. 912796620

Email: contact@smartads.as