Privacy Policy
Version 2026-07
1. Controller
The controller for data processing on this site is [Operator legal entity], [Operator address]. The bracketed details are placeholders and will be completed by the operator before first commercial use. Contact: [email protected].
2. Data we process
- Account data: your full name and email address, and, optionally, an organisation name.
- Order data: the product, the property address, the property's country, and any scope notes you provide.
- Session data: a session cookie and sign-in timestamps.
- Security data: audit and security logs, including IP-based rate-limiting records.
- Communication data: the transactional emails we send you (sign-in links, order confirmations, receipts, delivery notices).
- Analytics data (only with your consent): a random first-party visitor identifier and the pages you view on this site. No IP address, no name, and no cross-site identifiers are stored. See section 5.
3. Purposes
- Authentication via single-use email links — we do not store passwords.
- Order processing, delivery of reports, and issuing of receipts.
- Security, abuse prevention, and rate limiting.
- Compliance with statutory commercial record-keeping obligations.
4. Processors and recipients
Transactional email is delivered by Resend Inc., which processes recipient addresses and message content for that purpose. Hosting runs on our own infrastructure. We do not sell personal data and we do not share it for advertising.
5. Cookies and consent
We use two categories of cookies. Strictly necessary
cookies are required to run the site and are set without consent:
rr_session (a random session identifier, set after you sign
in) and rr_consent (which simply remembers your cookie
choice). Analytics is a single first-party cookie,
rr_va, holding a random visitor identifier. It is set
only after you opt in and is used solely for our own,
self-hosted statistics — there are no third-party cookies, no
advertising, and no cross-site tracking.
When you first visit, a banner lets you accept only necessary cookies, reject the optional analytics cookie, or allow it; rejecting is as easy as accepting, and no analytics cookie is set until you consent. You can change your choice at any time on our Cookie Policy page.
The legal basis for necessary cookies and for operating your account is the performance of our contract with you and our legitimate interest in a secure service (GDPR Article 6(1)(b) and (f)); the legal basis for the analytics cookie is your consent (GDPR Article 6(1)(a) and §25(1) TTDSG), which you may withdraw at any time with future effect. For visitors in the United States: we do not sell or share personal information, and declining analytics on the banner serves as your opt-out.
6. Retention
- Account data is retained until you request deletion.
- Order and receipt records are retained for the statutory commercial retention periods.
- Security and rate-limiting logs are short-lived and deleted routinely.
7. Your rights
Where the GDPR or comparable law applies, you have the right to access, rectification, erasure, restriction of processing, data portability, and objection (GDPR Articles 15–21), and the right to lodge a complaint with a supervisory authority.
8. Contact
For any privacy request, write to [email protected].
Version 2026-07