Privacy Policy

1. Data Controller

This platform operates as an independent digital verification and documentation system for certificates, declarations, and product-related compliance information.

The platform also supports the registration, management, publication, and verification of company, personnel, and training certificates issued by certification bodies and other certificate issuers.

2. Information We Collect

• Account information (name, company name, email address)
• Manufacturer and product-related information
• Certificates, declarations, DPPs, and related technical data
• Contact form submissions
• IP address, browser type, and device information
• Certification body and certificate issuer information
• Company, personnel, and training certificate information
• Certificate holder names, qualifications, assessment information, and certification status, where applicable
• Certificate identification, validity, revision, and verification information

Some certificate records may contain personal data relating to individuals who are not registered users of the platform. Such information may be submitted by the organization responsible for issuing or managing the certificate.

3. Purpose of Processing

Personal data is processed for the following purposes:

• Providing certificate and document verification services
• Generating QR codes for public validation
• Allowing manufacturers to manage products, DoP, CE marking, and DPPs
• Responding to contact and support requests
• Improving system security and performance
• Allowing certification bodies to manage and publish company, personnel, and training certificates
• Providing public verification of certificate identification, validity, scope, and status

4. Publicly Accessible Information

Certain information may be publicly accessible via QR codes or public links, including certificates, declarations, or Digital Product Passports explicitly published by the data owner.

No personal data is made public unless it is required for verification purposes and explicitly provided by the user.

Public verification of company, personnel, and training certificates may include certificate numbers, issuer information, certificate holder names, certification scope, qualifications, relevant dates, and certificate status, depending on the certificate type and the information made available by the certificate issuer.

Certificate issuers are responsible for ensuring that personal data submitted for public verification is processed and published on an appropriate legal basis and in accordance with applicable data protection requirements.

5. Legal Basis for Processing

Data processing is based on one or more of the following legal grounds:

• User consent
• Performance of a contract
• Legal obligations
• Legitimate interests related to system security and integrity

The applicable legal basis may vary depending on the type of personal data, the purpose of processing, and the responsibilities of the platform operator or certificate issuer.

6. Data Retention

Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected or as required by applicable laws.

Certificate records may be retained after expiration, suspension, withdrawal, cancellation, or replacement where necessary for historical verification, traceability, or compliance with applicable retention requirements.

7. Data Sharing

We do not sell or rent personal data to third parties. Data may only be shared when legally required or to provide essential platform services (e.g. hosting, security).

Information published for certificate verification may be accessible to persons using the relevant public verification page, QR code, or direct verification link.

Certain technical and usage information may also be processed by external service providers supporting website analytics and automated abuse prevention.

8. Data Security

Appropriate technical and organizational measures are implemented to protect personal data against unauthorized access, loss, or misuse.

Access to certificate management and account administration functions is restricted to authorized users.

9. Your Rights

Users have the right to:

• Access their personal data
• Request correction or deletion
• Restrict or object to processing
• Withdraw consent at any time

These rights are subject to applicable legal conditions and exceptions. Individuals whose personal data appears in certificate records may also contact the responsible certificate issuer regarding correction, publication, or other data protection requests.

10. Cookies

This platform uses cookies only for essential functionality, authentication, and security purposes.

The platform also uses Google Analytics to understand website usage and improve its services. Google Analytics may use cookies or similar technologies to collect technical and usage information.

Google reCAPTCHA is used on certain forms to help prevent automated submissions and misuse. This service may process technical information about user interactions in accordance with Google's applicable privacy terms.

Non-essential cookies and related technologies are subject to applicable consent and data protection requirements.

11. Changes to This Policy

This Privacy Policy may be updated from time to time. The latest version will always be available on this page.

12. Contact

If you have any questions regarding this Privacy Policy, please contact us via the Contact page.