Privacy policy
This is a translation for your convenience. Only the German version is legally binding.
1. Controller
Marly & Jacob GmbH
Niehler Str. 363, 50735 Köln, Germany
Email: info@sizely.de
Represented by the managing director (see imprint).
2. Hosting and server log files
Sizely is operated by DigitalOcean, LLC, 101 Avenue of the Americas, New York, NY 10013, USA. The server is located in a data centre in Frankfurt am Main. We have a data processing agreement with DigitalOcean, including the EU standard contractual clauses.
When you visit the website, the web server automatically processes data that your browser transmits: IP address, date and time, page requested, amount of data transferred, referrer URL, browser type and operating system. This processing is necessary to deliver the website and keep it secure (Art. 6 (1) (f) GDPR). The log files are deleted after 14 days.
To prevent abuse, we limit how often emails can be requested, measurements rated or logins attempted from one IP address. For this we keep the IP address and, for logins, the user name entered, for one day at most (Art. 6 (1) (f) GDPR).
3. Consent management (Cookie-Script)
To obtain and manage your consent, we use the Cookie-Script service of Objectis Ltd., Lithuania. Your consent decision, a time stamp and technical data are stored in a cookie. The legal basis is Art. 6 (1) (c) GDPR in conjunction with Art. 7 (1) GDPR and § 25 (2) TDDDG. You can change or withdraw your consent at any time with the "Cookie settings" link in the footer of the website.
4. Google Analytics
With your consent (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG), we use Google Analytics 4 by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to analyse the use of Sizely statistically. Cookies are set and usage data (e.g. pages viewed, time spent, device information, shortened IP address) is transmitted to Google; a transfer to the USA is possible. Google is certified under the EU-US Data Privacy Framework. The data is deleted automatically after the retention period set in Google Analytics, at the latest after 14 months. You can withdraw your consent at any time via "Cookie settings". More information: Google's privacy policy.
5. Search and measurement ratings
We count searches, clicks on "Go to shop" and clicks on the ad slot without the IP address and without the measurements entered.
When you confirm or correct measurements, we store a random cookie so that each rating only counts once. It contains no personal data and expires after two years. So that nobody rates measurements several times, we also store an irreversible hash of your IP address, not the address itself. The legal basis is Art. 6 (1) (f) GDPR and, for the cookie, § 25 (2) no. 2 TDDDG.
6. Forwarding to the shops and product images
Sizely doesn't sell anything itself. With "Go to shop" we forward you via an intermediate page to the shop in question, usually via an affiliate link. The shop and the affiliate network then set their own cookies so they can credit us with a commission. The shop and the network are themselves responsible for this processing; their privacy policies apply.
On the website and in emails, we load product images directly from the shops' servers. The shop in question learns your IP address and the time of the request. If you don't want this in emails, turn off loading images in your email program.
7. Search alerts
When you save a search, we store your email address, the search details (measurements, price, colour, category) and the language of the page to send you new matching furniture by email. First you receive an email to confirm (double opt-in). The link in it is valid for 48 hours; without confirmation we delete the address and search after three days at the latest. The legal basis is your consent (Art. 6 (1) (a) GDPR). Every email contains a link to end the search alert; we then delete it immediately. The emails link to Sizely, not directly to the shops.
8. Accounts for shops and advertisers
We store the email address, first and last name and company from the registration to run the account, and send emails to confirm the address and about the account (Art. 6 (1) (b) GDPR). We also store the language in which you want to receive our emails. At first this is the language you signed up in; you can change it in your account at any time. For logging in we set a session cookie, which is technically necessary (§ 25 (2) no. 2 TDDDG). We store uploaded ad images until the bid or the account is deleted. You can delete the account yourself at any time.
9. Spam protection (Google reCAPTCHA)
When you sign up and when you create a search alert, we use Google reCAPTCHA v3 by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to prevent automated entries by bots. The script is only loaded when you use one of these forms. reCAPTCHA then analyses information such as the IP address, browser and device information, mouse movements and time spent, and may set cookies; a transfer to the USA is possible. Google is certified under the EU-US Data Privacy Framework. The legal basis is our legitimate interest in protecting our forms against abuse (Art. 6 (1) (f) GDPR); access to your device is strictly necessary for this (§ 25 (2) no. 2 TDDDG). More information: Google's privacy policy and terms of service.
10. Sending emails
We send emails from Sizely (confirmation links, search alerts, account notices) via the SMTPfast service (smtpfa.st). SMTPfast processes the recipient address and the content of the email on our behalf.
11. Contacting us
If you contact us by email, we process your details to handle your enquiry (Art. 6 (1) (b) or (f) GDPR). The data is deleted as soon as it is no longer needed and no statutory retention obligations apply.
12. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6 (1) (f) GDPR (Art. 21). You can withdraw any consent you have given at any time with effect for the future.
You also have the right to lodge a complaint with a data protection supervisory authority, e.g. the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.
As of 1 November 2026