Privacy Policy

Last updated: April 11, 2024

We are very delighted that you have shown interest in our enterprise. Data protection is of a particularly high priority for the management of our company. The use of the Internet pages of our service is possible without any indication of personal data; however, if a data subject wants to use special enterprise services via our website, processing of personal data could become necessary.

1. Name and Address of the Controller

The controller for the purposes of the General Data Protection Regulation (GDPR), other data protection laws applicable in Member states of the European Union and other provisions related to data protection is:

Ratio-Informatik GmbH
Schlehenweg 8
D-73760 Ostfildern, Germany

2. Data Protection Officer

You can reach our Data Protection Officer at:

Email: [email protected]

3. Collection and Processing of Data

3.1. Server Log Files

When you access our website, our system automatically collects data and information from the computer system of the calling computer. The following data is collected: your IP address, browser type and version, operating system used, the website from which you are visiting us (referrer URL), and the date and time of access. This data is stored temporarily to ensure the functionality, stability, and security of our website. The legal basis for this data processing is Art. 6(1)(f) GDPR.

3.2. Registration and User Account

To use our core services, you must register an account. During registration, we collect the following data:

• Username
• Email Address
• Password (stored in a securely hashed format)

Upon registration and subsequent logins, we also collect your IP address, user agent string, and browser-provided timezone. This processing is necessary for the provision of our contractual services, for the administration of the user account, and for protecting our systems from misuse. The legal basis is the fulfillment of our contract with you (Art. 6(1)(b) GDPR) and our legitimate interest in security (Art. 6(1)(f) GDPR).

3.3. Use of the Search Function

When you use our search service, the search term you provide (e.g., an email address or username) is transmitted to our third-party data provider (Snusbase) via a secure API to retrieve breach information. We display the results to you but do not store your search queries or the results in connection with your user account on our servers. The processing is based on the fulfillment of our service contract with you (Art. 6(1)(b) GDPR).

4. Cookies

Our website uses technically necessary cookies. These are small text files that are stored on your device and are required to manage your login session and ensure the basic functionality of the platform. We do not use tracking or analysis cookies from third-party providers. The legal basis for using essential cookies is our legitimate interest in providing a functional website (Art. 6(1)(f) GDPR).

5. Paid Subscriptions and Payment Processing

For the purchase of subscriptions, we use the external payment service provider SellApp. When you initiate a purchase, you are redirected to the SellApp platform. We do not collect or store your sensitive payment information, such as credit card numbers. We only receive confirmation of the successful payment from SellApp to activate your subscription. For more information, please refer to the privacy policy of SellApp.

6. Disclosure of Data to Third Parties

Your personal data will not be disclosed to third parties.

7. Data Retention

We store your personal data only for as long as it is necessary for the purposes for which it was collected. Your account data is stored as long as your account is active. If you delete your account, your personal data will be erased.

8. Your Rights as a Data Subject

Under the GDPR, you have the following rights regarding your personal data:

• The right to obtain information about your data stored by us (Art. 15 GDPR).
• The right to request the rectification of incorrect data (Art. 16 GDPR).
• The right to request the erasure of your data ("right to be forgotten") (Art. 17 GDPR).
• The right to request the restriction of processing of your data (Art. 18 GDPR).
• The right to object to the processing of your data in certain circumstances (Art. 21 GDPR).
• The right to data portability, allowing you to receive your data in a machine-readable format (Art. 20 GDPR).

To exercise your rights, please contact us using the contact details provided above. You also have the right to lodge a complaint with a competent data protection supervisory authority.

9. Changes to This Privacy Policy

We reserve the right to amend this privacy policy to adapt it to changing legal situations, or to changes in the service or data processing. We encourage you to review this privacy policy periodically.