Compliance Translator
Draft. This text has not been reviewed yet and is not in force.

Privacy policy

Igor Kazazic, Segeparksgatan 18, 212 50 Malmö, Sweden, is the controller for the personal data described here. Contact: contact@dppmaker.com.

For documents and data that customers upload, we act as processor on the customer's behalf; see the Data Processing Agreement. This policy covers the data we process as controller.

What we process and why

Data Purpose Legal basis Kept for
Name, work email, company, password hash Providing your account Contract While the account exists
Sign-in and activity records (audit trail) Security, traceability for customers Legitimate interest While the organisation exists
Keyed hash of IP address (free check, rate limits) Preventing abuse Legitimate interest 24 hours (free check), 2 days (rate limits)
Files in the free gap check Running the check you asked for Legitimate interest / your request 60 minutes unless you save the report
Billing details Invoicing Contract, legal obligation As required by accounting law
Supplier contact name and email entered by customers Sending data requests On behalf of the customer (processor) As the customer decides

Who receives data

Sub-processors are listed on our security page. Hosting: [HOSTING PROVIDER], [REGION]. [TO BE REVIEWED: transfers outside the EU/EEA, e.g. if AI extraction or email delivery uses providers in the USA, and the safeguards used (EU-US Data Privacy Framework or standard contractual clauses).]

Your rights

You can ask for access, correction, deletion, restriction or a copy of your data, and object to processing based on legitimate interest, by emailing contact@dppmaker.com. You can complain to the Swedish Authority for Privacy Protection (IMY), imy.se.

Cookies

We use one session cookie that is needed to sign you in and to protect forms. No tracking or advertising cookies.

Version 3fd5ad7ba7ac