Privacy Policy

Company data (name, industry, size), contact details (email), readiness answers and scores, implementation request details, and technical log data required to operate the service.

Providing the EUReady cockpit: readiness checks, reporting, task management, evidence collection, implementation coordination, service communications and account administration.

Contract performance (Art. 6(1)(b) GDPR), consent (Art. 6(1)(a) GDPR, e.g. for email delivery of reports), legitimate interests (Art. 6(1)(f) GDPR, e.g. platform security), and legal obligations (Art. 6(1)(c) GDPR).

Email address and authentication metadata are processed to create and secure your account.

Answers, derived scores, gap descriptions and generated recommendations are stored to render your results and allow you to return to them.

Contact details, package selection and problem descriptions are processed to prepare and deliver implementation support.

Once paid reports and implementation packages are activated, billing data will be processed to fulfil orders and meet legal retention obligations.

Emails you send us and transactional emails we send you (e.g. report links) are processed to answer requests and deliver ordered services.

The platform uses strictly necessary storage for session and language preferences. Any analytics that may be added later will be disclosed here and subject to consent where required.

Personal data is stored for as long as the account is active or legal retention obligations (e.g. commercial and tax law) apply.

After the account is closed, personal data that is no longer required is deleted, unless legal retention obligations prevent this. Data that must be kept for legal reasons is restricted from further processing.

You may request a full export of your personal data at any time by emailing privacy@konformpass.de. Data is provided in a common, machine-readable format.

KonformPass engages the following categories of processors under data processing agreements:

• Hosting and database: cloud infrastructure provider(s) with locations in the EU/EEA and, where applicable, the USA (EU Standard Contractual Clauses).
• Email delivery: transactional email service provider(s).
• Analytics: none currently. If analytics are added later, they will be disclosed here and subject to consent where required.
• Payments: none currently. If payment processing is added later, it will be disclosed here.

A current list with provider names is available at Sub-processor list or on request from privacy@konformpass.de.

If processors operate outside the EU/EEA, appropriate safeguards (e.g. EU Standard Contractual Clauses) will be used.

You have the right of access, rectification, erasure, restriction of processing, data portability, objection, and the right to lodge a complaint with a supervisory authority.

Requests: privacy@konformpass.de — or use the tracked request form.