Privacy Policy
Last updated: January 2025
1. Data Controller
The data controller for this platform is the company operating the DPP Platform. Contact us via the email provided in your company settings for data-related inquiries.
2. Data We Collect
We collect: account information (email, password hash) for authentication; company data you provide (name, VAT, contact email); product data entered for Digital Product Passports; anonymous passport view analytics (viewer type, timestamp, hashed IP). We do not collect personal data from passport viewers.
3. Legal Basis for Processing
Account & company data: Contract performance (Art. 6(1)(b) GDPR). Product passport data: Legitimate interest in product transparency standards compliance (Art. 6(1)(f) GDPR). Anonymous analytics: Legitimate interest in service improvement (Art. 6(1)(f) GDPR). Cookies: Consent for non-essential cookies (Art. 6(1)(a) GDPR).
4. Your Rights (GDPR Art. 15-22)
You have the right to: access your personal data; rectify inaccurate data; erase your data ("right to be forgotten"); restrict processing; data portability; object to processing. To exercise these rights, contact us via your company settings email.
5. Data Retention
Account data is retained while your account is active. Product passport data is retained as required by international product transparency standards for product lifecycle traceability. Anonymous analytics are retained for 24 months. You may request deletion of your account and associated data at any time.
6. Data Security
We use industry-standard security measures including encrypted connections (TLS), secure password hashing, row-level security policies, and regular security audits. Data is stored in secure cloud infrastructure with industry-standard data protection.