Privacy policy
1. Controller
[COMPANY NAME], [ADDRESS], [EMAIL]
2. What data we process
– Account: email address, company name, language (contract performance, Art. 6(1)(b) GDPR)
– Check answers and result (contract performance or legitimate interest)
– Uploaded evidence: visible only to your account, stored on our server in the EU
– Payment data: processed by Stripe Payments Europe Ltd.; we store no card data
– Emails: only after double opt-in (verifiable consent, Art. 6(1)(a) GDPR), revocable anytime
– Statistics: Google Analytics / Google Tag Manager ONLY after your consent via the cookie banner (Art. 6(1)(a) GDPR). Without consent, no tracking takes place.
3. Retention
Account data until you delete your account. You can delete your account including all data yourself at any time (Account → Delete account).
4. Your rights
Access, rectification, erasure, restriction, data portability, objection, complaint to a supervisory authority.
5. Hosting
[HOSTING PROVIDER, E.G. HETZNER ONLINE GMBH, GERMANY]
Last updated: [DATE]