Subject matter
Data protection, transparency and processing
Personal data protection is for TrustFair. De An essential part of our platform. As a review portal, we process data not only for the provision of user accounts and company profiles, but also for the publication, review and management of reviews.
Our goal is to provide reviews transparently, comprehensibly and as far as possible against abuse. At the same time, we take care to process personal data only if this is necessary, legally permissible and intended.
We are guided by the requirements of the General Data Protection Regulation (GDPR), German data protection law and the legal requirements for digital platforms. Our data protection information, technical protection measures and internal processes are regularly reviewed and adjusted as necessary.
Why data protection is particularly important in an evaluation portal
Various interests meet on an evaluation portal:
Users want to share their experiences.
Companies want to be able to understand whether reviews are real, accurate and fair.
Data subjects have a right to have their personal data protected.
That is why we rely on clear rules, transparent procedures and data-saving processing.
Personal data is processed by us in particular when users create an account, publish reviews, claim a company profile, report reviews, upload proof, book premium functions or contact our support.
Detailed information can be found in our data protection declaration.
Where is data stored?
The technical storage and processing takes place via the hosting and IT service providers we use.
Server Location: Germany
Web hosting provider:www.eghosting.pro
Fa. Zankoo.de
Inh.: Daniel Schwieger
Stobraer-Str 47
99510 Apolda
Germany
E-mail:hello@eghosting.de
If external service providers are used, we ensure that they provide suitable technical and organizational measures for the protection of personal data.
If necessary, we conclude contracts for order processing with service providers.
Assessment seals, widgets and integrations
Companies may, where offered, use rating seals, widgets or similar integrations on their own website.
These functions serve to publicly display ratings, rating scores or profile information.
Our widgets and rating seals are designed in such a way that they do not set tracking cookies and do not store unnecessary personal data of website visitors.
When loading a widget, however, technically necessary connection data can be processed. This can include in particular IP address, browser information, time of retrieval and the accessed website. This data is required to technically deliver the widget and to ensure the security of the service.
If cookies, tracking technologies or external services are used for individual integrations, we inform you separately in our data protection declaration and, if necessary, provide suitable consent options.
Can personal data be deleted?
Users generally have the opportunity to have their personal data deleted, insofar as no legal storage obligations, open test procedures, security reasons or legitimate interests conflict.
This applies in particular to account data, voluntary profile information or no longer necessary proof.
In the case of published reviews, it can be checked in individual cases whether deletion, anonymization or further storage is necessary and legally permissible. This can be relevant, for example, if an assessment is subject to audit, notification or legal proceedings.
Requests for the deletion of personal data can be made via the account area or via the contact address specified in the data protection declaration.
Evidence during assessment tests
If a review is reported or doubted, it may be necessary for users or companies to submit evidence.
Such evidence may be, for example:
Order numbers, invoices, contract numbers, booking confirmations, support tickets, email history or other documents that make a real customer experience or complaint traceable.
The following applies: Only the data that are really necessary for the test should be transmitted.
Unneeded personal data should be blackened before uploading. This includes in particular payment data, private information, data of uninvolved third parties or particularly sensitive information.
The submitted evidence will be used exclusively for the examination of the respective transaction, unless there is another legal basis.
Do companies need a contract processing contract?
Whether a contract processing contract is necessary depends on how a company uses [name of the rating portal].
An order processing contract may be necessary in particular if a company processes or has personal data of its customers processed via our platform.
This can be the case, for example, if a company sends review invitations via our platform, imports customer data, uploads names or e-mail addresses or uses comparable functions in which we process personal data on behalf of the company.
If a company only uses the platform to manage a public company profile, view reviews or publicly respond to reviews, a contract processing agreement is not automatically required in each case. The decisive factor is always the concrete use and the question of whether personal data is processed on behalf of the company.
Companies themselves are responsible for checking whether they need a contract processing contract for their concrete use of our platform.
Complete the AVV electronically
As far as an order processing contract is necessary for the use of certain functions, we provide companies with a possibility to conclude it electronically.
The AVV can be requested, checked and confirmed via the account area.
After completion, the document can be saved as a PDF or downloaded for your own data protection documentation.
Completion of the AVV is free of charge.
[Insert button/text: request AVV]
Our demand for transparency
We want users and companies to be able to understand which data is processed, why this happens and what rights exist.
That is why we provide information on data protection, evaluation review, reporting procedures, deletion requests and order processing in an understandable manner.
Further information can be found here:
❤ General business conditions
Conditions of Use
Data protection declaration
Obligations of processors
TrustFair processes data only according to documented instructions and under appropriate security measures.
Sub-processors
Use only with prior approval or general written consent.