Free delivery

30 nights trial sleep

Best price guarantee

1-2 days delivery time

Free delivery

1-2 days delivery time

Data protection

Data controller
Sleezzz GmbH
represented by the managing director Alexandra Goertz
Grebbener Str. 7
52525 Heinsberg
Germany
Telephone: +49 2452 9285830
Email: customer-service@matratzen.discount

We are delighted that you are interested in our online shops. This privacy policy applies to matratzen.discount, including all country-specific sites, and to colchones-descuento.es, as well as to the emails we send you. Below, we explain what data we process, for what purposes, to whom we disclose it, how long we store it and what rights you have.

1. Access data, hosting and delivery

Every time you visit our website, our web server automatically stores a server log file containing access data: the name of the file requested, your IP address, the date and time of the request, the amount of data transferred and the requesting provider. We analyse this data to ensure smooth and secure operation and to improve our services (Article 6(1)(f) of the GDPR). We delete the access data in the server log file no later than seven days after the end of your visit. Details of what we store regarding your session and your shopping basket can be found in Section 4.

Our servers are operated on our behalf by PlusServer GmbH (Cologne) in data centres in Germany. Our pages are delivered via the network of Akamai Technologies GmbH (Garching), a subsidiary of Akamai Technologies, Inc. (USA). Akamai speeds up delivery, protects our pages from attacks and malicious automated access, and measures their loading times. In doing so, Akamai processes your IP address, access data and technical details about your browser; data may be transferred to the USA in the process. The legal basis is Article 6(1)(f) of the GDPR; our legitimate interest lies in ensuring a fast and secure website.

2. Ordering and contract processing

We collect personal data when you provide it to us as part of your order or when you contact us (e.g. via the contact form or by email). Mandatory fields are marked as such, as in these cases we require the data to fulfil the contract or to process your enquiry, and you cannot submit your order or enquiry without providing this information. The data collected is specified in the relevant input forms. We use the data you provide in accordance with Article 6(1)(b) of the GDPR for the fulfilment of the contract and to process your enquiries. We do not offer a customer account. Once the contract has been fully processed, your data will be restricted for further processing and deleted once the retention periods under tax and commercial law have expired, unless you have expressly consented to the further use of your data or we reserve the right to use your data beyond this, provided such use is permitted by law and we inform you of this in this policy.

We process your orders and enquiries in our stock management and ticketing system operated by weclapp SE, which acts on our behalf (Article 28 of the GDPR). If you place an order as a business, we will verify your VAT registration number with the European Commission (VIES) and the Federal Central Tax Office (Article 6(1)(b) and (c) of the GDPR); to protect against misuse, we also store your IP address for 30 days and your browser identifier for enquiries made by companies (Article 6(1)(f) of the GDPR). We protect our online form for withdrawals from unauthorised use using Google reCAPTCHA; in doing so, Google Ireland Limited receives information about your browser and your IP address (Article 6(1)(f) of the GDPR).

If you place an order via a marketplace such as Kaufland, we receive your name, address, telephone number and the email address provided by the marketplace from the operator, and use this information for delivery, billing and customer service (Article 6(1)(b) of the GDPR).

3. Delivery and payment

For delivery purposes, we pass on your name, delivery address, order number, and the contents and weight of the parcel to General Logistics Systems Germany GmbH & Co. OHG (GLS); for international deliveries, we also pass this information to their partner in the destination country. GLS receives your email address in order to notify you of the delivery. For deliveries to Switzerland, Liechtenstein, Norway and the United Kingdom, we declare the consignment to customs via GLS; for this purpose, your name, address, email address, billing details and the items are passed on to GLS and the customs authorities. The legal basis is Article 6(1)(b) of the GDPR; for customs declaration, also (c); and for notification by email, (f).

For payment, we pass on the necessary data to the payment service provider for the selected payment method (Article 6(1)(b) of the GDPR): to Stripe Payments Europe, Limited (Ireland) for card payments, Apple Pay, Google Pay, Link and many payment methods specific to individual countries, including Klarna, Billie (invoice-based purchases for businesses), Scalapay, Revolut Pay, Pay by Bank, TWINT, iDEAL, Bancontact, eps, BLIK, Przelewy24, Bizum, MobilePay, MB WAY, Multibanco, Satispay and Cartes Bancaires; to PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg) for PayPal, direct debit via PayPal and purchase on account. For purchase on account (in Germany only), we also provide your date of birth and telephone number; PayPal and Ratepay GmbH verify your identity and ability to pay. Klarna, Billie and Scalapay also verify your ability to pay. On pages with a payment function, scripts from Stripe and PayPal are loaded; in doing so, they receive your IP address and details about your device and browser for the purposes of payment processing and fraud prevention. The privacy policies of the payment service providers also apply.

4. Cookies, consent, session and shopping basket

Our website stores small data files in your browser (cookies, Local Storage) or reads them from there. We use those that are strictly necessary for the operation of the shop without your consent (§ 25(2)(2) TDDDG): md_cookie_allow saves your selection in the cookie banner (365 days), PHPSESSID maintains your session and shopping basket (30 days), akaalb_… is used for load balancing (five minutes) and md_chat continues an ongoing chat conversation (24 hours, only if you use the chat). We only use the others if you give your consent under ‘Marketing’ in the cookie banner (§ 25(1) TDDDG, Article 6(1)(a) of the General Data Protection Regulation (GDPR)). You can change your selection and withdraw your consent at any time via the shield icon at the bottom left of every page.

When you first visit the site, we create a shopping basket record for your session. In this record, we store your IP address, the cookies that your browser sends to our pages, your browser’s language settings and the last page you visited; later on, we also store the items you have selected and the details you enter at checkout. If you reach our site via a link containing campaign details (such as utm parameters) or via a click ID from an advertising platform (gclid, gbraid and wbraid from Google; fbclid from Meta; ttclid from TikTok; soluteclid from billiger.de; adcref from Adcell), we store this information relating to your shopping basket and order. We use the data to keep your shopping basket available (Art. 6(1)(b) GDPR), to detect misuse, and to analyse the channels through which orders are placed (Art. 6(1)(f) GDPR).

5. Analysis and advertising

With your consent, we use Google Analytics and Google Ads provided by Google Ireland Limited (Ireland). Google Analytics measures how our pages are used: pages and items viewed, search terms, shopping basket and purchases, device, browser and approximate location. Google Ads measures which adverts lead to visits and orders, and shows you adverts on other websites for items you have viewed on our site; to enable Google to match an order with the correct advert, we transmit your email address as a checksum (SHA-256 hash). The services are loaded via Google Tag Manager, via an address on our own domain. Without your consent, Google’s services do not set any cookies and only send signals to Google without cookies (Google Consent Mode).

On matratzen.discount, with your consent, we also use the Meta Pixel from Meta Platforms Ireland Limited (Ireland), the TikTok Pixel from TikTok Technology Limited (Ireland) and services from Criteo SA (France). We collect data on page views, items viewed, your shopping basket, the start of the checkout process and purchases, including item numbers and values; TikTok and Criteo also collect your email address as a hash value upon purchase, whilst Criteo additionally collects your postcode. We use this data to measure the effectiveness of our adverts and to show you relevant advertising. We are jointly responsible with Meta for the collection and transmission of data via the Meta Pixel (Art. 26 GDPR).

With your consent, we use the partner network Adcell operated by Firstlead GmbH (Berlin). If you reach us via a partner site, Adcell receives the order number and net value when an order is placed, so that the partner receives their commission, as well as the categories and items viewed and the contents of your shopping basket for the purpose of displaying relevant adverts. Criteo and Adcell share an identifier with other advertising companies so that they can show you relevant adverts; Criteo and Adcell select which companies these are on a visit-by-visit basis. A snapshot of this information can be found on our cookies page.

If you reach us via the price comparison site billiger.de operated by solute GmbH (Karlsruhe), we will, with your consent, report to solute the address of the page you landed on; your browser will store this information for up to 30 days (Local Storage). If you place an order during this period, we will report the order number and net value to solute so that billiger.de can settle the commission (Art. 6(1)(a) GDPR, § 25(1) TDDDG).

6. Reviews

Following the delivery of an order placed via matratzen.discount, we will email you asking you to review us at Trustpilot, and one week later we will ask you to review the items you have purchased. The invitation is sent by Trustpilot A/S (Denmark) on our behalf; for this purpose, we provide your name, email address, order number, language and the items purchased. We collect your reviews and link them to your order so that we can respond to them and improve our service (Article 6(1)(f) of the GDPR). You may object at any time, for example via the unsubscribe link. We display our reviews in a widget from Trustpilot; when the page loads, Trustpilot receives your IP address (Article 6(1)(f) of the GDPR).

On the order confirmation, Google asks whether you would like to take part in a survey about your purchase after delivery (Google Customer Reviews). To this end, Google Ireland Limited receives your email address, the order number, the country of delivery, the expected delivery date and the product codes (GTIN). You will only receive an email from Google if you give your consent (Article 6(1)(a) of the GDPR).

7. Emails, marketing to customers and unsubscribing

You will receive emails regarding your order, including an order confirmation, invoice, and dispatch and parcel information (Article 6(1)(b) of the GDPR). For orders placed via matratzen.discount, we will also send you tips about your new product on the day of delivery.

If you have made a purchase at matratzen.discount, we will also use your email address for marketing purposes (Article 6(1)(f) of the GDPR): two days after delivery, featuring up to four relevant items; and for up to two years after your last purchase, approximately every 14 days, with a newsletter on new products and offers, as well as promotional newsletters. We select the content based on your previous orders. To measure the effectiveness, a randomly selected group of customers will not receive certain emails, and we check whether an order follows an email; we do not track whether you open an email. If you have subscribed to our newsletter, we send it on the basis of your consent (Article 6(1)(a) of the GDPR).

If you enter your email address at checkout but do not complete your order, we will remind you of your shopping basket up to three times within five days, no more than once a day (Article 6(1)(f) of the GDPR).

We send our emails via our own mail servers and via Amazon Simple Email Service, operated by Amazon Web Services EMEA SARL (Luxembourg) in the Stockholm region, acting as a data processor. Amazon notifies us of undeliverable emails and spam complaints; we block such addresses. We also maintain the addresses of former newsletter subscribers with Mailchimp (The Rocket Science Group LLC, USA).

You can unsubscribe from email marketing at any time and object to the use of your email address without incurring any costs other than the transmission charges at standard rates: via the unsubscribe link in every email or by sending us a message. Unsubscribing applies to all promotional emails, requests for reviews and shopping basket reminders. To ensure we do not contact you again, we retain only a hash of your email address on a block list.

8. Customer service and AI support

If you contact us, we will process your enquiry via our ticketing system (Article 6(1)(b) of the GDPR if it relates to a contract, otherwise (f)). To enable us to respond more quickly, our customer service team uses the ‘ Claude ’ language model provided by Anthropic Ireland, Limited (Ireland): Claude This service categorises emails sent to our general inbox – including notifications from our shop regarding failed payments – and drafts our replies. To this end, Claude receives your name, your email address, the subject line and text of your messages, and, in relation to your order, details of the items, delivery address (without your name), dispatch status and invoices. To improve the quality of the drafts, Claude also regularly analyses previous enquiries and the responses from our customer service team, in abridged form. From this, Claude derives general rules for the drafts; we exclude email addresses, as well as order, invoice, customer and parcel numbers, from these rules. A member of staff checks the rules before we put them into use. Each reply is checked and sent by a member of staff. Anthropic acts as a data processor and is not permitted to use the content to train its models; the data is also processed by Anthropic, PBC in the USA on the basis of the EU Standard Contractual Clauses. The legal basis is Article 6(1)(f) of the GDPR; our legitimate interest lies in ensuring prompt and accurate processing. We delete drafts and classifications after 90 days.

9. AI assistant in the shop (chat)

Where our shop offers this service, you can ask questions of an AI assistant. To do this, we process your messages, the page on which you are writing, the details of the item on that page and the items in your basket. If you have a basket, the assistant also receives the status of your purchase: totals, whether a voucher applies, the selected payment method, whether the delivery and billing addresses are complete, the country of delivery, whether you are ordering as a business, your most recent failed payment attempts (including payment method and error code), and technical details regarding the page’s display. It does not receive your name, address or any codes you have entered. If you enquire about an order, we will check its status using the order number and postcode without passing your name and address on to the AI. The responses are generated by the language model Claude operated by Anthropic Ireland, Limited (Ireland) on our behalf; the data is also processed by Anthropic, PBC in the USA on the basis of the EU Standard Contractual Clauses. We do not pass on your IP address; to prevent misuse, we only store a daily-changing checksum generated using a secret key. We truncate card numbers and IBANs before storing or passing on any message.

To ensure the quality of the assistant, our system has each conversation subsequently assessed by Claude: what it was about, how it ended, and what your mood was like at the start and at the end. We use this assessment for internal purposes only. In your shopping basket, we note that the assistant responded, how often it did so, and which items you added to your basket from the chat, but not what you wrote; if you place an order, this note will be included with your order. The legal basis is Article 6(1)(b) of the GDPR, insofar as your enquiry relates to a purchase or your order; otherwise, it is Article 6(1)(f). Our legitimate interest lies in providing good advice and in determining whether the assistant is helping with the shopping process.

We use Google Analytics to track whether you see or click on the chat notification, open the chat, send a message, click on a suggested item or hand the conversation over to our customer service team – without recording the content; Section 5 applies in this regard. We delete conversations, assessments and details relating to your purchase 90 days after the last message. For our statistics, we subsequently retain only non-textual data: subject, outcome and sentiment as a category, the number of messages, the suggested items, whether you transferred the conversation to our customer service team, and whether an order was placed. If you transfer a conversation to our customer service team, we will create an enquiry containing your name, your email address and the conversation history (see Section 8). Your browser remembers an ongoing conversation for 24 hours (md_chat, see Section 4) and, for the current session, whether the chat is available and whether you have already seen the chat notification (Session Storage). Please do not enter any health or payment details in the chat. The replies are generated by an AI and may contain errors; the information on the product page and our Terms and Conditions are binding.

10. Recipients outside the EU

If we transfer data to a country outside the EU and the EEA, this will only take place if the European Commission has determined that an adequate level of protection exists there (for example, for Switzerland, the United Kingdom or for companies in the USA that are certified under the EU-US Data Privacy Framework) or if we have agreed on EU Standard Contractual Clauses with the recipient.

11. Retention period

We retain your data only for as long as is necessary for the respective purpose or as required by law. In accordance with commercial and tax law, we retain accounting documents such as invoices for eight years, commercial records and annual accounts for ten years, and commercial and business correspondence for six years. We store data that we process with your consent until you withdraw it.

12. How to contact us and your rights

As a data subject, you have the following rights:

under Article 15 of the GDPR, the right to request information, to the extent specified therein, about your personal data processed by us;
pursuant to Article 16 of the GDPR, the right to request, without undue delay, the rectification of inaccurate personal data or the completion of your personal data stored by us;
pursuant to Article 17 of the GDPR, the right to request the erasure of your personal data stored by us, unless further processing is necessary for the exercise of the right to freedom of expression and information, to comply with a legal obligation, for reasons of public interest, or to establish, exercise or defence of legal claims;
in accordance with Article 18 of the GDPR, the right to request the restriction of the processing of your personal data;
in accordance with Article 20 of the GDPR, the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, or to request that it be transmitted to another controller;
pursuant to Article 7(3) of the GDPR, the right to withdraw any consent given at any time with effect for the future;
pursuant to Article 77 of the GDPR, the right to lodge a complaint with a supervisory authority. The supervisory authority responsible for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf; you may also contact the supervisory authority in your usual place of residence or place of work.

If you have any questions regarding the collection, processing or use of your personal data, or if you wish to request information, rectification, restriction or erasure of data, or to withdraw consent previously given or object to a specific use of your data, please contact us directly using the contact details provided above.

Right to object
Where we process personal data as explained above to safeguard our legitimate interests, which prevail following a balancing of interests, you may object to such processing with effect for the future. If the processing is carried out for direct marketing purposes, you may exercise this right at any time, for example via the unsubscribe link in every email. Where the processing is carried out for other purposes, you are entitled to a right to object only if there are grounds arising from your particular situation.

Once you have exercised your right to object, we will no longer process your personal data for these purposes, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or where the processing serves to establish, exercise or defend legal claims.

This does not apply where the processing is carried out for direct marketing purposes. In that case, we will no longer process your personal data for this purpose.

Last updated: October 2026