Privacy policy

Controller

The controller for data processing on this website is:
[ company name / legal form ]
[ address ]
[ email address ]

Data protection officer

A data protection officer must be appointed once at least 20 people are permanently engaged in the automated processing of personal data. [ enter contact details, or note that no appointment is required ]

What data we process

The following data arises when you visit and use this website:

• Server log data: truncated IP address, date and time, address requested, volume transferred, referring address, browser and operating system identifier. The legal basis is Art. 6(1)(f) GDPR — legitimate interest in the operation and security of the website.
• The website address you enter when you start a test. It is processed in order to run the test and display the result. The legal basis is Art. 6(1)(b) GDPR.
• Your email address when you request the full report, together with the time of confirmation and the IP address used for it as evidence of double opt-in. The legal basis is Art. 6(1)(b) GDPR.
• Your consent to marketing, if you ticked the corresponding box. The legal basis is Art. 6(1)(a) GDPR.

Report and marketing are separate

You receive the test report regardless of whether you consent to marketing. Consent is optional and is not a condition for the report (prohibition of bundling, Art. 7(4) GDPR).

Your email address is confirmed by double opt-in: you first receive a confirmation email; only after you click the link in it do we send the report and — if you consented — any further messages.

You can withdraw consent at any time with effect for the future, informally by email or via the unsubscribe link in every message. The lawfulness of processing carried out until then is unaffected.

No third-party tools

This website loads no fonts, scripts or stylesheets from external servers and embeds no analytics services, ad networks or social networks. No cookies are set for analytics or advertising purposes. [ add here if payment or delivery service providers are integrated later ]

Processors

[ hosting provider with address ] — on the basis of a data processing agreement under Art. 28 GDPR. [ email delivery provider, if used ]

Retention periods

Server log data: [ number ] days. Test results: for as long as they are needed for the report and for traceability. Email addresses from marketing consent: until withdrawal. Records of consent are kept for the duration of the applicable limitation periods.

Your rights

Under the General Data Protection Regulation you have the following rights:

• Access to the data stored about you (Art. 15)
• Rectification of inaccurate data (Art. 16)
• Erasure (Art. 17)
• Restriction of processing (Art. 18)
• Data portability (Art. 20)
• Objection to processing based on legitimate interests (Art. 21)
• Withdrawal of consent given (Art. 7(3))

You may also lodge a complaint with a supervisory authority. Competent is the authority of your habitual residence or that of the controller: [ competent supervisory authority ]

Testing third-party websites

When you enter an address to be tested, our test system requests the relevant pages like an ordinary browser and analyses the delivered source technically. Personal data on the tested website is not collected deliberately.

Our test system identifies itself as Scanready in the browser identifier and respects access barriers rather than circumventing them. Cookie banners are not dismissed automatically, because that would be a declaration of intent in someone else’s name.