Data protection declaration

Data protection declaration / Data protection provisions for TrustFair. De

Status: 07.07.2026

The protection of personal data is important to us. With this data protection declaration, we inform you which personal data we process on TrustFair.de, for which purposes this is done, on which legal basis the processing takes place, how long data is stored and what rights data subjects have.

TrustFair.de is an evaluation platform. Users can rate companies, services, products, shops, online offers or other business providers. Companies can claim company profiles, manage reviews, respond to reviews, report reviews, and use free or paid features depending on the offer.

This privacy policy applies to all visitors, registered users, rating persons, rating companies, company users, premium customers, contact persons, support requests and other persons whose personal data is processed in connection with TrustFair.de.

Personal data is any information relating to an identified or identifiable natural person. This includes, for example, name, e-mail address, IP address, telephone number, account data, payment data, evaluation content, communication data, proof, contract data or technical usage data.

We only process personal data if there is a legal basis for this. This may be the case in particular if the processing is necessary for the provision of the platform, for the performance of the contract, for the fulfilment of legal obligations, for the protection of legitimate interests or on the basis of consent.

Responsible for data processing on this platform is:

Fa. Zankoo.de
Owner: Daniel Schwieger
Stobraer Str. 47
99510 Apolda
Germany

Telephone: +49 (0) 3644 6053168
Fax: +49 (0) 3644 5109995
E-mail: welcome@trustfair.de
Website: https://www.trustfair.de

The controller is the natural or legal person who alone or together with others decides on the purposes and means of processing personal data.

A data protection officer is currently not appointed, as in our opinion there is no legal obligation for this.

Data protection requests can be addressed at any time to the following contact address:

Fa. Zankoo.de
Owner: Daniel Schwieger
Stobraer Str. 47
99510 Apolda
Germany

E-mail: welcome@trustfair.de

  1. Who is affected?

Data processing may affect in particular the following persons:

a) visitors to the website,
b) registered users,
c) persons submitting reviews,
d) people who read or report reviews,
e) companies and their contact persons,
f) enterprise users with a free or paid account,
g) customers or business contacts of companies invited to submit a valuation,
h) persons making support or contact requests,
(i) persons identified in evidence, complaints or test procedures;
j) invoice recipients and payment participants,
k) Receivers of system messages or notifications.

  1. What data do we process?

Depending on the use of the platform, in particular the following data can be processed:

a) name,
b) user name or display name,
c) e-mail address,
d) telephone number,
e) address,
f) company name,
g) role or position in the company,
h) account data,
i) login and registration data,
j) rating content,
k) star ratings or scores,
l) company responses,
m) grounds for notification and complaint,
n Evidence such as order numbers, invoices, support tickets or communication history,
o) contract and invoice data,
p) Payment status,
q) IP address,
r) browser and device data,
s) server logfiles,
t) technical safety and test features.

  1. Why do we process data?

We process personal data in particular in order to:

a to technically provide TrustFair.de,
b to create and manage user accounts,
c to publish and display reviews,
d to provide company profiles,
e enable companies to manage their profiles,
f to check reviews for authenticity, abuse or infringement of rights,
g) to process reports and complaints,
h prevent fake reviews, spam, manipulation and abuse,
i to answer support requests,
j) to pay for services,
k to fulfill legal obligations,
l to assert our own rights or to defend us against claims,
m) to ensure the security and stability of the platform.

  1. Are we passing on data?

Personal data will only be shared if this is necessary and legally permissible.

In particular, recipients may be:

a) hosting provider,
b) IT service providers,
c) e-mail service providers,
d) payment service providers,
e) tax advisors and accounting,
f) Lawyers,
g) authorities and courts,
h) affected users or companies in the context of evaluation, notification or complaint procedures,
i) other service providers, insofar as they are necessary for the operation of the platform.

  1. How long do we store data?

We store personal data only as long as it is necessary for the respective purposes or statutory storage obligations exist.

Typical storage periods are:

a) Account data: for the duration of the user account,
b ratings: as long as they are published or there are legitimate reasons for further storage,
c Evidence of assessments: for the duration of the examination and thereafter only as long as it is necessary for documentation or legal defence,
(d) notifications and complaints: for the duration of processing and adequate documentation,
e) contract and invoice data: corresponding to legal storage obligations,
f Server log files: usually up to 30 days, unless longer storage is required to detect security incidents.

  1. What rights do data subjects have?

In accordance with the statutory provisions, data subjects have in particular the following rights:

a) Right of access,
b) Right to rectification,
c) right of deletion,
d right to restriction of processing,
the right to data portability;
f) right to object,
g) right to withdraw consent,
h) Right to complain to a data protection supervisory authority.

We process personal data in particular on the basis of the following legal bases:

  1. Article 6(3) 1 lit. a GDPR

This legal basis applies if consent has been given. This may be the case in particular for unnecessary cookies, analysis functions, marketing measures or newsletters.

  1. Article 6(3) 1 lit. b GDPR

This legal basis applies if the processing is necessary for the performance of a contract or for the implementation of pre-contractual measures. This applies in particular to user accounts, corporate accounts, premium functions, support requests with contract reference, payment processing and platform services.

  1. Article 6(3) 1 lit. c GDPR

This legal basis applies if we are legally obliged to process. This applies in particular to tax and commercial law storage obligations, legal proof obligations, official inquiries or legal reporting obligations.

  1. Article 6(3) 1 lit. f GDPR

This legal basis applies if the processing is necessary to safeguard legitimate interests and does not conflict with overriding interests or fundamental rights of the data subject.

Legitimate interests may in particular be:

a) secure operation of the platform,
b protection against fake evaluations,
protection against manipulation, spam and abuse,
d) examination and moderation of assessments,
e) processing of legal complaints,
ensuring freedom of expression and transparency in the evaluation system,
protection of rated companies against illegal content,
h protection of evaluating persons from unauthorized interference,
i legal defense and enforcement of own claims,
j) Improvement of the platform,
k) IT security and error analysis.

When TrustFair.de is called up, technical data is automatically processed. These may include, in particular:

a) IP address,
b) date and time of access,
c) called page or file,
d) referrer URL,
e) browser type and browser version,
f) operating system used,
g) instrument type,
h) amount of data transmitted,
i) HTTP status code,
j) requesting provider,
k) technical safety features.

This data is processed in order to technically deliver the website, to ensure system security, to analyze errors, to detect abuse and to operate the platform in a stable manner.

The legal basis is Art. 6 par. 1 lit. f GDPR.

Server log files are usually stored for up to 30 days and then deleted or anonymized. Longer storage can take place if this is necessary to clarify security incidents, abuses, attacks or legal violations.

Our platform is operated through the following hosting providers:

Server Location: Germany
Web hosting provider: www.eghosting.pro

Fa. Zankoo.de
Inh.: Daniel Schwieger
Stobraer-Str 47
99510 Apolda
Germany

E-mail: hello@eghosting.de
Privacy policy of the hosting provider: https://eghosting.pro/datenschutz

The hosting provider processes technical data necessary for the operation, delivery and security of the platform.

If necessary, a contract for order processing is concluded with the hosting provider.

TrustFair.de uses cookies, local storage or similar technologies.

Technically necessary cookies and storage technologies serve in particular to:

a to provide the Website,
b to store the login status,
c to manage sessions,
d implement security settings,
e) to store language settings,
f to document cookie settings,
g to provide shopping cart or booking functions where available.

Technically necessary cookies are based on § 25 Abs. 2 TDDDG and Art. 6 para. 1 lit. f GDPR or art. 6 par. 1 lit. b GDPR is used.

Unnecessary cookies, analytics cookies, marketing cookies or external services are only used if consent has been given.

The legal basis is then § 25 Abs. 1 TDDDG and Art. 6 par. 1 lit. a GDPR.

A given consent can be revoked at any time via the cookie settings.

We may use a consent management system to obtain, document and manage consent for cookies and external services.

In particular, the following data can be processed:

a) consent status,
b) date and time of consent,
c) selected categories,
d) technical browser data,
e) abbreviated or pseudonymised IP address,
f) Consent ID,
g) language used,
h) Version of the declaration of consent.

The processing takes place in order to be able to prove and manage consents.

The legal basis is Art. 6 par. 1 lit. c GDPR, insofar as there is a legal obligation to prove, as well as art. 6 par. 1 lit. f GDPR.

If no external consent management tool is currently used, the management of technically necessary settings takes place via internal platform functions. As soon as an external provider is used, this data protection declaration is supplemented accordingly.

For certain functions, registration is required.

When registering and using a user account, the following data in particular can be processed:

a) name or user name,
b) e-mail address,
c) password in encrypted form,
d) Account ID,
e) registration date,
f) login times,
g) account settings,
h) roles and authorizations,
i) booked functions or packages,
j) technical safety data,
k) Confirmation status of the email address.

The processing takes place to create, manage and secure the user account as well as to provide the platform functions.

The legal basis is Art. 6 par. 1 lit. b GDPR.

If data is processed for the prevention of abuse, system security or to prevent unauthorized access, the legal basis is art. 6 par. 1 lit. f GDPR.

Part 11: Reviews and Public Content

When users post reviews on TrustFair.de, we process the data entered.

These may include, in particular:

a) rating content,
b) star rating or other score,
c) rated entity;
d) date and time of assessment,
e) user name or display name,
f) verification status,
g) response history,
h) processing course,
i) reporting and verification status,
j) technical test features for misuse detection.

Reviews can be publicly visible. Publicly visible content can be perceived, stored or further processed by other users, search engines or third parties.

Users should not publish personal data of third parties in reviews. This includes in particular names, telephone numbers, e-mail addresses, addresses, customer numbers, payment data, health data, private messages or other confidential information.

The processing takes place for the publication, management and display of reviews.

The legal basis is Art. 6 par. 1 lit. b GDPR, insofar as the evaluation is provided as a platform function.

In addition, art. 6 par. 1 lit. f GDPR relevant. Our legitimate interest lies in the operation of a transparent evaluation system, the presentation of real experiences, the prevention of abuse and the information of the public.

When a person submits a review, we may process personal data to technically enable the review, prevent abuse and verify the authenticity of the review.

These may include, in particular:

a) e-mail address,
b) name or display name,
c) IP address,
d) time of assessment,
e the content of the assessment;
f) the rated entity;
g) technical test characteristics,
h) evidence for evaluation,
i) communication history for queries,
j) status of verification.

The processing is done to provide the evaluation function, to prevent fake reviews, to review complaints and to ensure the integrity of the platform.

Legal bases are kind. 6 par. 1 lit. b GDPR and Art. 6 par. 1 lit. f GDPR.

Depending on the functional scope, companies can invite customers or business contacts to submit a review.

In particular, the following data can be processed:

a) Name of the invited customer,
b) e-mail address,
c) company arranging the invitation,
d) time of dispatch,
e) invitation status,
f) assessment status,
g) technical shipping data,
h) Order number, customer number or transaction number, if provided by the company.

If a company imports customer data into TrustFair.de or triggers a review invitation, the company is generally responsible for ensuring that there is a legal basis for this.

TrustFair.de processes such data, as far as an order processing is available, according to the instructions of the respective company and on the basis of a contract for order processing.

Insofar as TrustFair.de processes data for its own purposes, for example for security, abuse prevention, documentation or to fulfill legal obligations, the processing takes place as its own controller.

Legal bases can be art. 6 par. 1 lit. b GDPR, Art. 6 para. 1 lit. c GDPR or art. 6 par. 1 lit. f GDPR.

To check the authenticity or plausibility of an evaluation, we can request or process proof.

Possible evidence is in particular:

a) order number,
b) invoice,
c) booking confirmation,
d) contract number,
e) customer number,
f) Support ticket,
g) proof of payment with blackened sensitive data,
h) e-mail communication,
i) proof of delivery or performance,
j) other appropriate evidence.

Users and companies should blacken unnecessary data before uploading. This includes in particular payment data, private message content, health data, ID data, data of third parties or other sensitive information, insofar as this is not necessary for the examination.

The processing is carried out to check whether an evaluation is based on real experience, as well as for abuse prevention, moderation and legal defence.

The legal basis is Art. 6 par. 1 lit. f GDPR.

As far as the examination under a user contract is necessary, art. 6 par. 1 lit. b GDPR is relevant.

Company profiles can be displayed on TrustFair.de.

In the case of company profiles, the following data may in particular be processed:

a) company name,
b) address,
c) Website,
d) sector,
e public contact information,
f) assessments,
g) company responses,
h) Profile description,
i) logo or images,
j) authorised representatives or contact persons,
k) publicly available company data.

As far as data relate exclusively to legal persons, it is not always personal data. However, personal data may be affected if data relating to sole proprietors, managers, contact persons, employees or other natural persons are processed.

The processing takes place for the provision and management of company profiles as well as for the presentation of evaluations.

The legal basis is Art. 6 par. 1 lit. f GDPR.

Our legitimate interest lies in providing a transparent rating portal, informing the public and assigning ratings to companies.

When a company claims or manages a profile, we process data to check eligibility and manage the company account.

These may include, in particular:

a) name of the applicant,
b) business e-mail address,
c) telephone number,
d position or role in the company,
e) company name,
f) company address,
g) proof of representation,
h) Business Registration Statement,
i) proof of business,
j) domain or website confirmation,
k) power of attorney,
l) Roles and permissions in the company account.

The processing is carried out to check whether the applicant is entitled to manage the company profile and to provide the account functions.

The legal basis is Art. 6 par. 1 lit. b GDPR, insofar as the processing is necessary for the use of the company account.

In addition, art. 6 par. 1 lit. f GDPR relevant. Our legitimate interest lies in the prevention of unauthorized profile assumptions and in the protection of the integrity of the platform.

Companies can respond to reviews as far as this feature is enabled.

In particular, the following data can be processed:

a) name or display name of the enterprise user,
b) corporate account,
c) response text,
d) date and time of publication,
e) processing course,
f) reporting or verification status,
g) technical test characteristics.

Company responses may be publicly visible.

The processing takes place to provide the response function, to document company reactions and to moderate illegal or abusive content.

Legal bases are kind. 6 par. 1 lit. b GDPR and Art. 6 par. 1 lit. f GDPR.

Companies, users or third parties may report reviews if they believe they are false, unlawful, abusive or not experience-based.

In particular, the following data may be processed in the event of a notification:

a) reporting person,
b) affected assessment,
c) affected user or company,
d) reporting reason,
e) justification of the notification,
f) evidence,
g) communication history,
h) decision and reasons for the decision,
i) processing status,
j) internal audit reports,
k) technical safety data.

Where an entity requests the deletion or review of an assessment, appropriate evidence may be required to be submitted. These may include, in particular:

a) customer data reconciliation,
b) order or contract data,
c Proof that there was no business relationship,
d) communication history,
e) invoice,
f) cancellation,
g) proof of delivery or performance,
h evidence of confusion,
i. evidence of abuse or extortion,
j) legal letter,
k) judicial decision.

Unnecessary personal data must be blackened before the upload.

The processing is carried out for the purpose of examining the report, deciding on the removal, blocking or retention of the evaluation, documenting the operation and legal defence.

The legal basis is Art. 6 par. 1 lit. f GDPR.

Our legitimate interest lies in the legally compliant moderation of content, the protection of affected persons and companies, the prevention of fake reviews and the legal defence.

As far as legal obligations exist, the processing takes place on the basis of art. 6 par. 1 lit. c GDPR.

Insofar as TrustFair.de is subject to legal obligations for online platforms, we provide reporting and complaint channels for unlawful content and moderation decisions.

In particular, the following data can be processed:

a) name or contact details of the reporter,
b) affected content,
c) URL or unique content identifier,
d) reporting reason,
e) legal or factual reasons,
f) evidence,
g) decision on the notification,
h) statement of grounds of appeal,
i) communication history,
j) internal audit reports.

The processing takes place to process statutory notification and complaint procedures as well as to document moderation decisions.

The legal basis is Art. 6 par. 1 lit. c GDPR, insofar as legal obligations exist.

In addition, art. 6 par. 1 lit. f GDPR be relevant. Our legitimate interest lies in proper platform moderation, abuse prevention and legal defence.

When users, companies or other persons contact us, we process the transmitted information.

These may include, in particular:

a) name,
b) e-mail address,
c) telephone number,
d) enterprises;
e) Subject,
f) message,
g) customer number or account ID,
h) Annexes,
i) communication history,
j) Processing status.

The processing takes place to process the request, to communicate with the requesting person and to document the process.

The legal basis is Art. 6 par. 1 lit. b GDPR, if the request is related to a contract, account or pre-contractual measures.

In all other cases, the legal basis is Art. 6 par. 1 lit. f GDPR.

Our legitimate interest lies in the processing and documentation of inquiries.

If paid functions, premium packages or additional services are booked, we process the necessary data.

These may include, in particular:

a) name or company,
b) contact person,
c) invoice address,
d) e-mail address,
e) booked package,
f) scope of power,
g) maturity,
h) Payment status,
i) invoice number,
j) control data,
k) method of payment,
l) transaction data,
m) Contract communication.

Payment processing can take place via external payment service providers.

Depending on the payment method, payment data is processed directly by the payment service provider. For this processing, the data protection notice of the respective payment service provider applies in addition.

The specific payment methods and payment service providers available are displayed in the order or checkout process.

The processing takes place for the execution of the contract, payment processing, invoicing, contract management and fulfillment of statutory storage obligations.

The legal basis is Art. 6 par. 1 lit. b GDPR.

Insofar as tax or commercial law storage obligations exist, the legal basis is Art. 6 par. 1 lit. c GDPR.

For the sending of system messages, own mail servers or external e-mail service providers can be used.

System messages can in particular be:

a) registration confirmation,
b) password reset email,
c) security notifications,
d) assessment notifications,
e) assessment invitations,
f) payment and billing information,
(g) notification and complaint decisions;
h) Notes on account changes.

In particular, the following data can be processed:

a) e-mail address,
b) Name,
c) account ID,
d) message type,
e) time of dispatch,
f) delivery status,
g) technical shipping data.

The legal basis is Art. 6 par. 1 lit. b GDPR, as far as the messages are necessary for contract or account processing.

For security-relevant notifications and proof of delivery is additionally art. 6 par. 1 lit. f GDPR relevant.

If an external e-mail service provider is used, it will be named in this data protection declaration or in the context of additional data protection information.

If a newsletter is offered, it will only be sent if there is consent or legal permission.

In particular, the following data may be processed for the newsletter:

a) e-mail address,
b) Name, if indicated,
c) date of filing,
d) confirmation time,
e) IP address upon registration,
f) consent status,
g) Deregistration status.

The application can be made via a double opt-in method.

The legal basis for sending the newsletter is art. 6 par. 1 lit. a GDPR.

The consent can be revoked at any time with effect for the future.

Existing customers can receive information on similar own services, provided this is legally permissible and no objection has been made.

Legal basis may in this case art. 6 par. 1 lit. f GDPR.

If no newsletter is offered, no newsletter-related processing takes place.

We may use analysis tools to understand and improve the use of the Platform.

In particular, the following data can be processed:

a) page views,
b) click behavior,
c) dwell time,
d) instrument type,
e) browser information,
f) approximate location data,
g) referrer,
h) pseudonymous user identifiers.

Analysis tools are only used to the extent permitted by law. If consent is required for this, the use takes place only after consent.

The legal basis is Art. 6 par. 1 lit. a GDPR in conjunction with § 25 Abs. 1 TDDDG, unless necessary cookies or comparable technologies are used.

For purely server-side, data-saving and non-personal statistics, art. 6 par. 1 lit. f GDPR be relevant.

If no external analysis tools are currently used, no corresponding data transmission to external analysis providers takes place.

Security services or Captcha services can be used to protect against spam, bots, fake accounts, automated attacks and abuse.

In particular, the following data can be processed:

a) IP address,
b) browser information,
c) device information,
d) interaction data,
e) referrer,
f) dwell time,
g) technical test data,
h) security tokens,
i) Risk or test values.

It is used to secure the platform and prevent abuse.

The legal basis is Art. 6 par. 1 lit. f GDPR.

Insofar as the service is not technically necessary or access to terminal information is provided, an additional consent according to § 25 Abs. 1 TDDDG is required.

If no external captcha or security service is currently used, the protection of the platform takes place via internal technical and organizational measures.

As soon as an external captcha or security service is used, this data protection declaration is supplemented accordingly.

To prevent fake reviews, spam, manipulation, multiple accounts, security attacks and other misuse, we can use technical and organizational auditing measures.

In particular, the following can be processed:

a) IP address,
b) account data,
c) login data,
d) valuation patterns,
e) device and browser data,
f) times of action,
g) Frequency of certain actions,
h) technical safety features,
i) reporting and verification history,
j) conspicuous usage patterns,
k) Verification status.

The processing is done to secure the platform, the integrity of the rating system and to protect users and companies.

The legal basis is Art. 6 par. 1 lit. f GDPR.

Our legitimate interest lies in the prevention of fake reviews, manipulation, spam, fraud, automated attacks and other abuse.

We can use automated systems to detect flashy activity, fake ratings, spam, manipulation patterns or security risks.

Such systems may provide guidance but do not necessarily lead to a final decision with legal effect alone.

If an automated review leads to restrictions, blocks or removal of content, affected users may submit a review or complaint to the extent provided by law or offered by us.

The legal basis is Art. 6 par. 1 lit. f GDPR.

An exclusively automated decision with legal effect or similar significant impairment does not take place in principle, unless expressly stated or permitted by law.

Part 28: External Content and Links

TrustFair.de may contain links to external websites.

When users click on external links, they leave our platform. The respective provider is responsible for the data processing on external websites.

We can also integrate external content, such as maps, videos, fonts, widgets or social media content. Such content will only be integrated if this is permitted under data protection law.

If external content transfers personal data to third parties or requires access to terminal information, the integration takes place only after consent, unless there is a legal exception.

If no external content is currently integrated, no corresponding data transmission to external content providers takes place.

We can operate our own presences in social networks.

When users visit our social media pages or communicate with us about them, personal data may be processed by us and the respective platform operator.

For the processing by the respective platform operator, its data protection information applies.

Our social media presences serve for external presentation, communication, information and user interaction.

The legal basis is Art. 6 par. 1 lit. f GDPR.

If no social media presences are currently operated, no corresponding processing takes place via our own social media presences.

Personal data may be transmitted to the following recipients to the extent necessary:

a) hosting provider,
b) IT service providers,
c) e-mail service providers,
d) payment service providers,
e) Support and CRM providers,
f) analytics and security service providers;
g) tax advisors and accounting,
h) Lawyers,
i) authorities and courts,
j) affected users or companies in the framework of notification and verification procedures,
k other service providers, insofar as they are necessary for operation, security or contract implementation.

A transfer will only take place if there is a legal basis for this.

We conclude contracts with processors, where necessary, for order processing.

Insofar as we process personal data on behalf of a company, we act as a processor in the sense of art. 28 GDPR.

This can be the case in particular if a company imports customer data, triggers review invitations or uses account-related evaluations.

In these cases, the processing takes place according to the instructions of the respective company and on the basis of a contract for order processing.

In other cases, we act as our own controller. This applies in particular to the operation of the platform, the publication and moderation of ratings, the examination of fake ratings, the processing of legal complaints, abuse prevention, own user accounts, own billing and the fulfillment of legal obligations.

A transfer of personal data to countries outside the European Union or the European Economic Area will only take place if the legal requirements are met.

This can be done in particular if:

a there is an adequacy decision of the EU Commission,
b standard contractual clauses have been concluded,
(c) there are additional protective measures;
d) there is an explicit consent,
e) the transmission is necessary for the performance of the contract,
f) there is another legal basis.

Third-country transfers may be relevant in particular for external services such as payment service providers, analytics tools, captcha services, cloud services or communication services.

Unless external third-country-related services are used, no corresponding third-country transmission by these services shall take place.

We store personal data only as long as it is necessary for the respective purposes or statutory retention periods exist.

Typical storage periods:

a) Account data: for the duration of the user account,
b reviews: as long as they are published or there are legitimate reasons for storage,
c Evidence of assessments: for the duration of the examination and thereafter only as long as it is necessary for documentation, abuse prevention or legal defence,
(d) notifications and complaint procedures: for the duration of processing and adequate documentation,
e contract data: for the duration of the contractual relationship and statutory storage obligations,
f) Payment and billing data: in accordance with statutory storage obligations,
g) business letters and contract-relevant communication: usually 6 years,
h) billing data: usually 10 years,
i) server log files: usually up to 30 days, unless longer storage is required,
j Security data: as long as this is necessary to investigate or prevent abuse.

A longer storage can take place if this is necessary for asserting, exercising or defending legal claims, for information about abuse or for fulfilling legal obligations.

Users can request the deletion of their account.

After deletion of the account, personal data will be deleted or anonymized, as far as no statutory storage obligations, open inspection procedures, security reasons, suspicion of abuse or legitimate interests conflict.

Public reviews may be deleted, anonymised or retained as far as legally permissible and necessary.

If reviews remain anonymized, no direct personal reference is provided anymore.

We take technical and organizational measures to protect personal data against loss, misuse, unauthorized access, alteration or disclosure.

These may include, in particular:

a) encrypted transmission via TLS/SSL,
b) access restrictions,
c) password encryption,
d) role-based permissions,
logging of security-relevant processes,
f. regular updates,
g) backups,
h) technical protection against attacks,
internal data protection and security processes,
j) Restricting access to required persons.

Despite all measures, complete safety cannot be guaranteed. Internet-based data transmissions may have security risks.

The provision of certain personal data is necessary to use the Platform.

Without certain data, individual functions cannot be provided.

In particular:

a) e-mail address for registration and login,
b account data for user accounts,
(c) evaluation data for the publication of evaluations;
d) company data for claimed company profiles,
e) payment data for paid packages,
f) Evidence when an assessment has to be verified or a claim has to be substantiated.

There is no legal obligation to use the platform.

The platform is not aimed specifically at children.

Minors may only use the Platform to the extent that they have legally valid consent or can act or have the consent of the legal representatives.

We reserve the right to suspend or delete accounts if there is any doubt about the effective use by minors.

Data subjects have the following rights in accordance with statutory provisions:

  1. Right of access

Data subjects can request information about whether and which personal data we process about them.

  1. Right to rectification

Data subjects may request the correction of inaccurate personal data.

  1. Right of cancellation

Affected persons may request the deletion of personal data insofar as no statutory storage obligations, legitimate interests, legal defence reasons or other statutory reasons conflict.

  1. Right to restriction of processing

Data subjects may, under certain conditions, request that the processing of their personal data be restricted.

  1. Right to data portability

Data subjects may request to receive personal data they have provided to us in a structured, common and machine-readable format, as far as the legal requirements are met.

  1. Right of appeal

If personal data based on art. 6 par. 1 lit. f GDPR, data subjects may object to the processing for reasons arising from their particular situation.

If personal data are processed for direct marketing, there is a right to object at any time without giving reasons.

  1. Right to withdraw consent

If a processing is based on consent, this consent can be revoked at any time with effect for the future.

The legality of the processing until the revocation remains unaffected.

  1. Right to complain to a supervisory authority

Data subjects have the right to complain to a data protection supervisory authority.

For the exercise of rights, a notification shall be sufficient to:

Fa. Zankoo.de
Owner: Daniel Schwieger
Stobraer Str. 47
99510 Apolda
Germany

E-mail: welcome@trustfair.de

We may ask data subjects to prove their identity if this is necessary to clearly assign a request and to avoid unauthorized information.

Data subjects have the right to complain to a data protection supervisory authority.

In particular, the data protection supervisory authority of the federal state in which we have our headquarters or the supervisory authority at the place of residence of the person concerned is responsible.

Our headquarters in Thuringia is responsible for:

The Thuringian State Commissioner for Data Protection and Freedom of Information
PO Box 90 04 55
99107 Erfurt

House address:
Häßlerstrasse 8
99096 Erfurt

E-mail: poststelle@datenschutz.thueringen.de
Telephone: +49 (0) 361 57-3112900
Website: https://www.datenschutz.thueringen.de

  1. Personal data

Personal data is any information relating to an identified or identifiable natural person.

  1. Person concerned

The data subject is any natural person whose personal data is processed.

  1. Processing

Processing is any operation related to personal data, such as collection, storage, use, transmission, deletion or restriction.

  1. Accountable person

The controller is the body which decides on the purposes and means of processing personal data.

  1. Processors

Processor is an entity that processes personal data on behalf of a controller.

  1. Consent

Consent is a voluntary, informed and unambiguous statement by which a data subject agrees to a particular processing.

  1. Pseudonymisation

Pseudonymisation means that personal data can no longer be assigned to a specific person without additional information.

  1. Anonymity

Anonymization means that a personal reference no longer exists and the person concerned can no longer be identified.

  1. Cookies

Cookies are small files or information that can be stored on a user’s device.

  1. Logfiles

Logfiles are technical log data that can arise when accessing a website or platform.

We may adjust this privacy policy if our platform, services used, legal requirements or data processing changes.

The current version is available on TrustFair.de.

In the event of significant changes, registered users can also be informed by e-mail or in the account area.

For questions about data protection, the processing of personal data or the exercise of affected rights, please contact us at:

Fa. Zankoo.de
Owner: Daniel Schwieger
Stobraer Str. 47
99510 Apolda
Germany

Telephone: +49 (0) 3644 6053168
Fax: +49 (0) 3644 5109995
E-mail: welcome@trustfair.de
Website: https://www.trustfair.de