The controller for data processing on this website is:
Nowaity UG (haftungsbeschränkt), Feldmochinger Strasse 26, 80992 Munich, Germany
Email: contact@usekonforma.com
We process personal data only within the limits of the law (GDPR, German BDSG). Below we inform you about the nature, scope and purpose of processing and about your rights.
When you access our website, our hosting provider automatically processes technical data (including IP address, date and time, page requested, browser type). The legal basis is our legitimate interest in the secure and stable operation of the website (Art. 6(1)(f) GDPR).
The website is hosted by Vercel Inc. (USA) under a data processing agreement; any transfer to the USA is based on the EU Standard Contractual Clauses.
Vercel Web Analytics: we collect anonymised usage statistics without cookies and without personal profiles. Legal basis: our legitimate interest in improving the service (Art. 6(1)(f) GDPR).
Google Analytics 4 (consent only): if you consent via our cookie banner, we use Google Analytics (Google Ireland Ltd.). Without your consent, no analytics cookies are set and no data is sent to Google (Google Consent Mode). Legal basis: your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG), which you may withdraw at any time with effect for the future. This may involve a transfer to the USA.
When you create an account, we process the data you provide (e.g. email, organisation) and the content generated during use (e.g. uploaded software inventories, product details) to provide the service. Legal basis: performance of the contract (Art. 6(1)(b) GDPR). We use Supabase for authentication and data storage.
For paid subscriptions we use Stripe (Stripe Payments Europe Ltd.). Your payment data is processed directly by Stripe; we do not store full card details. Legal basis: performance of the contract (Art. 6(1)(b) GDPR).
If you contact us by email or via a form, we process your details to handle the request (Art. 6(1)(b) or (f) GDPR). When you use our free scan or readiness check, we process a voluntarily provided email address solely to send you the requested result.
We retain personal data only as long as necessary for the stated purposes or as required by statutory retention periods (in particular under commercial and tax law).
You have the right to access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR). You may withdraw any consent at any time. You also have the right to lodge a complaint with a supervisory authority.
We update this policy when the legal situation or our processing changes. Last updated: [month/year].
Operator note: complete all [ ] fields. This template covers the services currently in use (Vercel, Supabase, Stripe, Vercel Analytics, optional Google Analytics). Add any further services. Not legal advice. The German version prevails.