Privacy Policy

1.2 This privacy policy informs you in accordance with Art. 12 ff. GDPR about how we handle your personal data when you use our website or services. In particular, it explains which data we collect, what we use it for, and how and for what purpose this is done.

This privacy policy applies to the use of the TASSEO website, and all services hosted or operated by TASSEO. Regarding additional data privacy information from third-party services or partner platforms that may be linked through TASSEO, please refer to their corresponding policies.

In the event of any data protection-related inquiry regarding the use of TASSEO services, you can contact us at contact@tasseolab.com.

2.1

As with any website, our server automatically and temporarily collects information in the server log files that are transmitted by the browser while you are browsing our website. Depending on the settings of your browser, the following data are collected:

• IP address of the requesting computer
• The internet page from which you visit us (referrer URL)
• Date, time, and duration of the server session
• Browser type and version
• Type of end device and operating system used by the requesting computer

2.2

The storage of server log files is necessary for technical reasons to provide a functional website and to ensure system security. This also applies to the storage of your IP address, which is necessary and, under further conditions, can at least theoretically enable an assignment to your person. In addition to the above-mentioned purposes, we use server log files solely for the purpose of designing and optimizing our website, purely for statistical purposes and without any reference to your person. A personal evaluation of the server log files does not take place. This data is not merged with other data sources. The access data collected in connection with the use of our website is only stored for the period of time for which this data is required to achieve the aforementioned purposes. Your IP address is stored on our web server for a maximum of two years. For data stored through the use of cookies, please see the section 3 below.

2.3

If you visit our website to find out about or use our range of products and services, the basis for the temporary storage and processing of server log files is Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfilment of a contract or for the execution of pre-contractual measures. In addition, Art. 6 para. 1 sentence 1 lit. f GDPR serves as the legal basis for the temporary storage of technical access data. Our legitimate interest in this regard is to be able to provide you with a technically functioning and user-friendly website and to ensure the security of our systems.

3.1

This website uses cookies and other tracking technologies. Cookies are small text files that contain an identification number. Cookies are stored on your computer, tablet or smartphone ("device") when you call up our website. If you call up our website again, your device can be recognised on the basis of this identification number.

3.2

Upon first accessing this website, you will be presented with a cookie consent banner in compliance with applicable privacy regulations, provided by Usercentrics, our consent management platform. You may accept all cookies, configure your preferences, or decline non-essential cookies. Your choices are recorded by the consent platform. You can reopen the consent interface at any time using the "Privacy Settings" link in the site footer to change or withdraw consent. Rejection of non-essential cookies will not affect access to the core functionality of the Website, including embedded contact forms.

We use Google Analytics (Google Tag / gtag.js) to understand how visitors use this marketing website—for example which pages are viewed and how traffic arrives here. Google Analytics and related tags are loaded through Google Tag Manager and are subject to your consent choices. Before you decide, analytics and advertising storage are denied by default (Google Consent Mode). Google may set or read cookies or similar storage on your device and receive technical information such as your IP address (which may be truncated or anonymised depending on configuration), browser characteristics, and page URLs only after you grant the relevant consent. For details on how Google processes data, see Google's privacy documentation.

Selected pages on this marketing site embed a contact or enquiry flow provided by Typeform (Typeform embed loaded from embed.typeform.com). The Typeform embed loads when you view a page that includes it and is not withheld pending your cookie consent choices. Typeform may set or read cookies or similar storage on your device and receive technical data (for example IP address, browser information, and interaction data) in line with Typeform's own privacy documentation. Any personal data you choose to submit through the form is processed for the purpose of handling your enquiry; for that processing, Typeform typically acts as a processor on our instructions. Further details are available in Typeform's privacy and cookie information.

3.3 Cookies

3.4

Session cookies are typically deleted after closing the browser. Retention for persistent cookies and analytics data follows the relevant provider configuration and our retention practices as described in this policy.

Contact Form or General Contact

If you send us enquiries via the contact form or any other contact channel (including an embedded Typeform on this website), your message including the contact data you provide will be stored and processed for the purpose of handling and answering the enquiry, including any follow-up questions. We do not pass this data on to third parties unless this is necessary to process your enquiry or you have given explicit consent.

If you contact us in the context of an existing contractual relationship or contact us in advance for information about our range of services or our other services, the data and information you provide will be processed for the purpose of processing and answering your contact enquiry in accordance with Art. 6 para. 1 lit. b GDPR (legal basis), and otherwise to safeguard our legitimate interests in accordance with Art. 6 para. 1. Lit. f GDPR for the proper answering of contact enquiries.

The data you enter in the contact form will remain with us until the purpose for storing/processing the data no longer applies and mandatory retention periods (in particular any retention obligations under commercial or tax law) have been fulfilled.

4.2 User Accounts

To access TASSEO services (e.g., Eureka or Ethicality), users may need to register an account. During registration, we may ask you to provide personal information including, but not limited to, your name, valid email address, job title, organization, and country/region. Additional optional information may include department, address, city, and postal code. Your IP address will also be stored as part of your registration and upon each login.

We collect personal data when you sign up for a TASSEO account, create or modify user information, or provide any other information to access or use TASSEO services. Data provided during registration may be shared with the relevant client organization (e.g., your employer or institution) where this forms part of an enterprise agreement with TASSEO.

5.2

If we transfer data to recipients in a third country (located outside the European Economic Area, "EEA"), we will only do so if there is an adequate data protection level in accordance with Art. 44 - 50 GDPR. Some third countries are certified by the European Commission through so-called adequacy decisions as having a data protection standard that is comparable to the level in the European Economic Area. You can find a list of these countries at https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en. If a country does not have a comparable data protection standard, we ensure that data protection is sufficiently guaranteed by other measures. This is possible, for example, through binding corporate rules, standard contractual clauses of the European Commission for the protection of personal data, certificates or recognised codes of conduct. Otherwise, we do not transfer your personal data to countries outside the EU or the EEA or to international organisations, unless expressly stated otherwise in this privacy policy.