Privacy policy
Last updated: 1 October 2026
Controller
The controller for this site is the operator named on the Impressum & contact page. Contact details are listed there.
No tracking cookies
This site sets no advertising or analytics cookies and uses no third-party tracking pixels. The only browser storage used is what is technically necessary to run the site and the checkout, plus your language choice.
Anonymous wizard steps
We record anonymous, cookie-free usage steps in the wizard to improve the tool. We store no IP address for this measurement and keep no measurement identifier in your browser.
What we store
When you generate a report we store the country, company size band, optional company name, your role titles, the four criteria scores, any pay figures you enter, the chosen currency, the report language, the plan and a random access token. When you pay, we store the Mollie payment id, the amount, the currency and the payment status. We do not ask for or store employee names.
Legal basis and purpose
We process this data to perform the contract with you (Art. 6(1)(b) GDPR): generating, storing and re-serving your report. Payment data is also processed to meet our accounting obligations (Art. 6(1)(c) GDPR).
Processors
Our hosting and database provider stores report data on our behalf under a data processing agreement. Mollie processes payments and acts as an independent controller for the payment itself, including the details you enter at Mollie checkout; see the privacy statement of Mollie.
Retention
Reports are kept so you can reopen your unique link. Ask us to delete a report and we will remove it, normally within 30 days. Payment records are kept as long as accounting law requires.
Your rights
You have the right to access, rectification, erasure, restriction, portability and objection, and the right to lodge a complaint with your national data protection authority. Email the address on the contact page and include your report link.
Optional report-link email
If you choose to receive your report link, we store the email address with the report, the time you consented and whether a reminder was sent. We use it only to send the report link and at most one purchase reminder. The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw consent or request deletion at any time by emailing info@valugrade.eu.
Security
Reports are only retrievable with the random access token in your link and are not listed publicly. Keep your link private; anyone holding it can open the report.
Law update emails
If you sign up for law update alerts, we store your email address, the country you chose, your language, the page where you signed up, and the exact consent text you accepted with the date and time. We use this only to email you when pay transparency rules change in your country and to send occasional ValuGrade updates. The legal basis is your consent (Art. 6(1)(a) GDPR). We keep this data until you unsubscribe, and we delete it earlier on request. Processors: Lovable Cloud (hosting and database); an email delivery provider will be added before the first mailing. You can withdraw your consent at any time through the unsubscribe link in every email or by writing to info@valugrade.eu.