Privacy Policy
Last updated: July 21, 2026
This Privacy Policy explains how personal data is collected, used and protected when you visit TubeDecoded at https://tubedecoded.com.
TubeDecoded is an independent editorial website focused on vacuum tube amplifiers, hybrid tube amplifiers, tube preamplifiers, headphone amplifiers, phono stages and related audio equipment.
1. Data Controller
The controller responsible for processing personal data on this website is:
Ivan M. Leitner
Remlingstrasse 28
67346 Speyer
Umsatzsteuer-Identifikationsnummer: DE369034014
Email: contacto@todo-sdr.com
Further information about the website operator is available in the Legal Notice or Impressum.
2. General Information
We process personal data only where necessary to:
- Operate and secure the website
- Respond to messages and inquiries
- Display website content
- Measure website performance, where applicable
- Manage consent preferences
- Operate affiliate links
- Comply with legal obligations
Personal data means any information relating to an identified or identifiable natural person.
Depending on how you use the website, this may include your IP address, browser information, device information, contact details and information included in messages submitted through the contact form.
3. Website Hosting and Server Log Files
When you visit TubeDecoded, the hosting provider may automatically collect technical information in server log files.
This information may include:
- IP address
- Date and time of access
- Requested page or file
- Referring website
- Browser type and version
- Operating system
- Device information
- HTTP status code
- Amount of data transferred
This information is processed to provide the website, maintain technical stability, detect misuse, prevent attacks and investigate security incidents.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of the website.
Hosting provider:
SERED HOSTING S.L., Spain
Server log files are retained only for as long as necessary for security, operational and legal purposes, unless a longer retention period is required in connection with a specific incident.
4. Contact Form and Email Inquiries
When you contact TubeDecoded through the contact form or by email, we process the information you provide.
This may include:
- Name
- Email address
- Subject
- Message content
- Date and time of submission
- Technical information required to prevent spam or misuse
The data is processed to respond to your inquiry and manage any subsequent communication.
Where your inquiry concerns a possible contractual or business relationship, processing is based on Article 6(1)(b) GDPR.
For general inquiries, corrections, product suggestions or editorial feedback, processing is based on Article 6(1)(f) GDPR. Our legitimate interest is responding to communications and operating the website.
Where consent is specifically requested, processing is based on Article 6(1)(a) GDPR.
Messages are retained for as long as necessary to respond to the inquiry and manage any related communication. They may be retained longer where required for legal, accounting, security or evidence purposes.
Please do not submit sensitive personal information through the contact form.
5. WPForms
TubeDecoded uses WPForms to provide its contact form.
Information submitted through the form may be stored in the WordPress database and forwarded to the website operator by email.
Depending on the website configuration, WPForms may also process technical information for spam prevention and form security.
Form submissions are not used for advertising unless you have separately and expressly consented to such use.
6. Cookies and Similar Technologies
TubeDecoded may use cookies, local storage or similar technologies.
Cookies are small files or pieces of information stored on your device.
Strictly Necessary Technologies
Some technologies are required for:
- Website security
- Page functionality
- Form operation
- Saving privacy preferences
- Preventing abuse
- Maintaining essential WordPress functions
These technologies may be used without consent where they are strictly necessary to provide a service expressly requested by the user.
Optional Technologies
Optional technologies, including analytics, advertising or affiliate tracking technologies, are used only where the legally required consent has been obtained.
The legal basis for processing personal data through optional technologies is Article 6(1)(a) GDPR.
You may withdraw your consent at any time through the cookie or privacy settings available on the website. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
7. Consent Management
Where TubeDecoded uses a cookie consent tool, your privacy choices may be stored so that the website can remember whether you accepted or rejected optional technologies.
The consent record may include:
- Consent status
- Date and time of consent
- Consent categories
- Browser or device information
- A consent identifier
- An abbreviated or complete IP address, depending on the provider
The legal basis is Article 6(1)(c) GDPR where processing is necessary to demonstrate legal compliance, and Article 6(1)(f) GDPR for managing and documenting privacy preferences.
Consent management provider: Google
8. Affiliate Links
TubeDecoded participates in affiliate marketing programs, including the AliExpress affiliate program.
Some links on the website are affiliate links. When you click an affiliate link, the destination website or affiliate network may process information to determine whether a purchase or other qualifying action resulted from the referral.
This may involve:
- Cookies
- Tracking identifiers
- Click information
- Referring page
- Device or browser information
- IP address
- Purchase or transaction information
- Commission attribution data
Where affiliate tracking requires access to or storage of information on your device, such tracking will be used only after the required consent has been obtained.
The legal basis for consent-based affiliate tracking is Article 6(1)(a) GDPR.
When you follow an affiliate link, you leave TubeDecoded and enter a website controlled by a third party. The third party is responsible for its own processing of personal data.
TubeDecoded does not process payments, delivery addresses, payment card information or complete customer order details for purchases made through AliExpress or other merchants.
Depending on the affiliate program, TubeDecoded may receive commission reports or transaction information that does not directly identify the buyer.
You should review the privacy policy of the relevant marketplace, seller or affiliate network before completing a purchase.
9. External Links
TubeDecoded contains links to manufacturers, sellers, marketplaces, information sources and other third-party websites.
When you click an external link, the operator of the destination website may process personal data according to its own privacy policy.
TubeDecoded does not control the privacy practices, cookies, security or data processing activities of external websites.
10. Embedded Content
Articles may include content embedded from third-party platforms, such as videos, product information, images or social media content.
Embedded content may allow the third-party provider to receive information about your visit, including your IP address and browser information.
Where required, third-party embedded content will be blocked until you provide consent.
The relevant third-party provider is responsible for its own processing of personal data.
11. Analytics
TubeDecoded may use an analytics service to understand how visitors use the website and to improve content, navigation and technical performance.
Depending on the selected service, analytics data may include:
- Pages visited
- Approximate location
- Referring website
- Visit duration
- Browser and device type
- Screen resolution
- Interactions with website elements
- Anonymized or truncated IP address
Optional analytics are activated only after consent where required.
The legal basis is Article 6(1)(a) GDPR.
Analytics provider: Google Analytics 4
Provider location: Ireland
You may withdraw analytics consent at any time through the website’s privacy settings.
12. Spam Protection
The contact form may use technical measures or a third-party service to detect spam, automated submissions and abusive activity.
Depending on the service, technical information such as IP address, browser characteristics and interaction data may be processed.
13. Recipients of Personal Data
Personal data may be disclosed to service providers where necessary to operate the website.
Recipients may include:
- Hosting providers
- Email providers
- Website maintenance providers
- Form service providers
- Security and spam protection providers
- Consent management providers
- Analytics providers, where activated
- Affiliate networks
- Legal, tax or regulatory authorities where required by law
Service providers acting on our behalf receive data only to the extent necessary to perform their services.
Where required, data processing agreements are concluded with processors in accordance with Article 28 GDPR.
14. International Data Transfers
Some third-party providers, marketplaces or affiliate networks may process data outside the European Economic Area.
Where personal data is transferred to a country outside the European Economic Area, the transfer will take place only where a lawful transfer mechanism is available.
This may include:
- An adequacy decision by the European Commission
- Standard contractual clauses
- Other safeguards permitted under the GDPR
- Explicit consent in exceptional cases
When you independently follow a link to an external marketplace, that marketplace is responsible for informing you about its international data transfers.
15. Data Retention
Personal data is retained only for as long as necessary for the purpose for which it was collected.
Retention periods depend on:
- The purpose of processing
- Whether communication remains active
- Legal retention obligations
- Security requirements
- The need to establish, exercise or defend legal claims
Data will be deleted or anonymized when it is no longer required, unless continued retention is legally permitted or required.
16. Your Data Protection Rights
Subject to the applicable legal requirements, you may have the following rights:
- Right of access
- Right to rectification
- Right to erasure
- Right to restriction of processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent
- Right to lodge a complaint with a supervisory authority
To exercise your rights, contact:
contacto@todo-sdr.com
We may request information necessary to confirm your identity before responding to a request.
17. Right to Withdraw Consent
Where processing is based on consent, you may withdraw that consent at any time.
Withdrawal applies to future processing and does not affect the lawfulness of processing carried out before consent was withdrawn.
Cookie and tracking consent may be withdrawn through the privacy or cookie settings available on the website.
18. Right to Object
Where personal data is processed on the basis of Article 6(1)(f) GDPR, you have the right to object to the processing on grounds relating to your particular situation.
We will stop processing the relevant data unless compelling legitimate grounds exist that override your interests, rights and freedoms, or the processing is necessary to establish, exercise or defend legal claims.
19. Right to Lodge a Complaint
You have the right to lodge a complaint with a competent data protection supervisory authority.
You may generally contact the supervisory authority responsible for your habitual residence, place of work or the location of the alleged infringement.
The supervisory authority responsible for the website operator depends on the operator’s registered place of establishment in Germany.
20. Data Security
TubeDecoded uses reasonable technical and organizational measures to protect personal data against unauthorized access, accidental loss, alteration, disclosure or destruction.
The website uses encrypted HTTPS connections where available.
However, no internet transmission or electronic storage system can guarantee absolute security.
21. Automated Decision-Making
TubeDecoded does not use personal data to make decisions based solely on automated processing that produce legal or similarly significant effects for visitors.
22. Children
TubeDecoded is not specifically directed at children.
We do not knowingly request personal data from children. If you believe that a child has submitted personal data through the website, please contact us so that the information can be reviewed and deleted where appropriate.
23. Changes to This Privacy Policy
This Privacy Policy may be updated to reflect:
- Changes to the website
- New plugins or service providers
- Changes to affiliate programs
- New analytics or embedded services
- Legal or regulatory developments
The current version will be published on this page together with its revision date.
24. Contact
Questions about this Privacy Policy or the processing of personal data may be submitted through: