Privacy policy
Last updated: 23 September 2026
Controller
The controller for this site is the operator named on the Impressum & contact page. Contact details are listed there.
No tracking cookies
This site sets no advertising or analytics cookies and uses no third-party tracking pixels. The only browser storage used is what is technically necessary to run the site and the checkout.
What we store
When you generate a report we store the country, company size band, optional company name, your role titles, the four criteria scores, any pay figures you enter, the chosen currency, the plan and a random access token. When you pay, we store the PayPal order id, the amount, the currency and the payment status. We do not ask for or store employee names.
Legal basis and purpose
We process this data to perform the contract with you (Art. 6(1)(b) GDPR): generating, storing and re-serving your report. Payment data is also processed to meet our accounting obligations (Art. 6(1)(c) GDPR).
Processors
Our hosting and database provider stores the report data inside the EU. PayPal processes the payment and acts as an independent controller for the payment itself; see PayPal's own privacy statement.
Retention
Reports are kept so you can reopen your unique link. Ask us to delete a report and we will remove it, normally within 30 days. Payment records are kept as long as accounting law requires.
Your rights
You have the right to access, rectification, erasure, restriction, portability and objection, and the right to lodge a complaint with your national data protection authority. Email the address on the contact page and include your report link.
Security
Reports are only retrievable with the random access token in your link and are not listed publicly. Keep your link private; anyone holding it can open the report.