Privacy policy

1. Data controller

This portal is operated by a non-profit citizen initiative. Data voluntarily provided through the report form is processed exclusively for the purposes described in this policy and in accordance with the GDPR and applicable national data protection legislation.

2. Data we collect and how it is used

When submitting a citizen report, you voluntarily provide the following data:

• —Public name: may be displayed alongside the published citizen report.
• —Email address: used solely for report verification, internal moderation or contact related to the report. Not published.
• —Phone number (optional): used solely for internal contact if necessary. Not published.
• —Country and city: used for internal analysis, report classification and general statistics. Not published alongside the report.
• —Case description: published on the portal with the name provided.
• —Company name and domain: used to classify the report and may be published.

Data marked as private in the form will not be published under any circumstances. Only the public name provided may be displayed alongside the report.

Users should avoid submitting passwords, private keys, full card numbers, full identity documents, access codes or sensitive information about third parties. Private data may only be disclosed when required by law, requested by a competent authority or expressly authorised by the user.

3. Purpose and legal basis

The data provided is processed for the following purposes:

• —Informational publication: the name and report content may be published on the portal for citizen guidance purposes.
• —Verification: the email address is used to confirm identity before publishing the report.
• —Moderation: reviewing content to ensure it does not violate the terms of use.
• —Internal contact: email or phone may be used for clarifications related to the report, if the user authorised contact.

The legal basis for processing is the consent granted when submitting the form and the portal's legitimate interest in disseminating information of public interest.

4. Data retention

Report data is retained for as long as the report remains published on the portal or as long as there is a legitimate interest in maintaining it. If you request removal of a report you submitted, we will process it within a reasonable timeframe.

5. Sharing data with third parties

This portal does not sell, rent or share personal data with third parties for commercial purposes. We do not share private data with asset recovery companies, law firms or third parties.

Data may be disclosed to competent authorities in response to a legal requirement or to cooperate with properly accredited investigations.

6. Your rights

You may exercise your rights of access, rectification, erasure, restriction, portability and objection under the GDPR by contacting us through the means indicated on the portal. If you believe your rights have been violated, you may lodge a complaint with the relevant data protection authority.

7. Cookies

This portal may use strictly necessary technical cookies for the platform to function. We do not use commercial or advertising tracking cookies.