Privacy

Controller

Principle

We process as little personal data as possible. This site sets no analytics or advertising cookies. There is no third-party tracking and no consent banner.

Server logs

When you open a page, our server records what it technically needs: the address requested, the time, the amount of data transferred, the browser identification and a shortened IP address. The legal basis is Art. 6(1)(f) GDPR, our legitimate interest in running the service safely. Logs are deleted after seven days.

What a check sends to the model providers

A check sends the name, the city and any further facts you enter about a business to the model providers, through the gateway OpenRouter, Inc., United States. Those providers operate in the United States and in other countries outside the European Union. The transfer rests on standard contractual clauses under Art. 46(2)(c) GDPR.

Enter business data only, never personal data about individuals: it leaves our servers and we cannot get it back.

The free check without an account

A free check keeps the facts you entered, the model answers and the findings, so the report stays reachable under its own address. To count the three free checks a day, we store a one-way hash of your IP address, not the address itself. The legal basis is Art. 6(1)(f) GDPR, our legitimate interest in keeping the free offer from being used up by automated requests.

Account

For an account we process your email address and the businesses you put on file together with their check results. The legal basis is Art. 6(1)(b) GDPR, performance of a contract. You sign in through a one-time link by email, and we store no passwords.

Payments

Payments are handled by an external payment provider acting as merchant of record. Payment details such as card numbers never reach our servers. We only learn whether a subscription exists and what it covers.

Hosting

The application runs on servers of Hetzner Online GmbH in Germany (Nuremberg), under a data processing agreement in line with Art. 28 GDPR.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection. Write to the address above. You may also lodge a complaint with a data protection supervisory authority.