Privacy
Last updated: {date}
Controller
TODO: enter the full details of the controlling entity (legal form, address, authorised representatives, contact) before going live.
Hosting and storage location
The application and its database run in the {region} region. Answers are not transferred to third countries.
What we store
When an assessment is completed we store: your answers in structured form, the report derived from them, the language you chose, any campaign tag from the “src” parameter, what prompted the check, and the time. We store an email address only if you volunteer one. Consent to further contact is a separate checkbox that is off by default.
What we do not collect
No firmware, no software bills of materials, no file uploads, no accounts, no login. We do not scan your products for vulnerabilities.
Purpose and legal basis
Answers are processed to produce your assessment and to measure, in aggregate, how common missing component inventories are (Art. 6(1)(f) GDPR, legitimate interest in statistical analysis). Your email address and any marketing consent are processed on the basis of your consent (Art. 6(1)(a) GDPR).
Retention
Submissions are deleted 24 months after they are received. Email addresses are deleted as soon as you object, and in any case together with the submission.
Cookies and analytics
We set one technically necessary cookie to remember your language choice. To understand where people drop off we store step events without personal data and without IP addresses. No advertising or tracking cookies are set.
Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection, and the right to withdraw consent at any time. You may also lodge a complaint with a supervisory authority. TODO: enter the contact address for data subject requests.