OSINT NavigatorDE Deutsch

Privacy policy

Draft, not yet legally reviewed. Placeholders in square brackets will be replaced before publication.

1. Controller

The controller responsible for data processing on this website is:

corma GmbH
Anka Weber and Jörn Weber
Robert-Perthel-Straße 4
50739 Köln (Cologne)
Germany

Phone: +49 221 29202110
Email: [email protected]

2. Data protection officer

Mr Jürgen Recha
c/o interev GmbH
Robert-Koch-Straße 55
30853 Langenhagen, Germany

Phone: +49 511 89 79 84 10
Email: [email protected]

3. Overview

This website is a directory of OSINT tools. It does not use cookies and does not create usage profiles. Fonts, images and our own scripts are loaded from this domain. The only exception is the Cloudflare Web Analytics script described in section 5. Personal data is only processed in the cases described below.

4. Hosting and delivery of the website

This website is delivered via Cloudflare Pages. The provider is Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA.

Cloudflare processes technical data required to deliver the website and protect the infrastructure. This includes in particular the IP address, time of the request, requested URL, referrer, browser information, system information and technical diagnostic and security data. If a search term or filter is part of the address, it is included in the requested URL.

Cloudflare is used on the basis of Art. 6 (1) (f) GDPR. Our legitimate interest lies in providing the website reliably, quickly and securely.

Data may be transferred to the USA and other third countries. Cloudflare refers to EU standard contractual clauses and, according to its own information, is certified under the EU-US Data Privacy Framework. Cloudflare provides a Data Processing Addendum for processing as a processor.

Further information:

5. Access statistics with Cloudflare Web Analytics

We use Cloudflare Web Analytics to count aggregated page views and visits. The provider is Cloudflare, Inc. as described in section 4. For this purpose, the page loads a small script from Cloudflare (static.cloudflareinsights.com). It transmits the requested page, the referring page, information about browser and device, and loading times. In the process, your IP address is technically transmitted to Cloudflare.

According to Cloudflare, the service does not use cookies or fingerprinting. It does not count individual persons and does not create individual usage profiles. If your browser signals Global Privacy Control or Do Not Track, we do not load the script. According to Cloudflare, analytics data is stored for up to six months.

The legal basis is our legitimate interest in developing the directory according to demand under Art. 6 (1) (f) GDPR. Section 4 applies to the transfer to the USA. Further information: Cloudflare Web Analytics.

6. No cookies, no tracking

This website does not set cookies and does not store anything in your browser’s storage. There are no advertising trackers, no tracking pixels and no fingerprinting. A cookie banner is therefore not required.

7. Search and filters

Search and filters run entirely in your browser. For this purpose, the page loads a file with the directory data from this domain. Search terms are not transmitted while you type. The selected filters appear in the address bar so that you can share or save a link. If you open such an address, it becomes part of the request described in section 4. If the address contains a search term, the analytics script described in section 5 is not loaded. Address changes while you search are not reported to the statistics.

8. Fonts

The fonts used, Satoshi and Source Sans 3, are hosted on this server. When a page is loaded, there is no connection to Google Fonts, Fontshare or any other font service.

The directory links to the websites of the described tools and to sources. External content is not loaded automatically. Your browser only opens a third-party website when you click a link. The address of our page is not transmitted as the origin. The operator of the third-party website is responsible for processing on that website.

10. Contact by email or phone

If you contact us by email or phone, we process your details to handle your request. The legal basis is Art. 6 (1) (b) GDPR if your request relates to a contract, otherwise our legitimate interest in responding under Art. 6 (1) (f) GDPR. We delete the data once the request has been dealt with, unless statutory retention obligations apply.

11. Information about operators of listed tools

For each tool, the directory names the operator where it could be identified. For sole proprietors, the operator name may be the name of a natural person. The information comes from publicly accessible sources such as legal notices, terms of use or registers and informs users about the origin and responsibility of a tool. The legal basis is our legitimate interest under Art. 6 (1) (f) GDPR. Data subjects may object to being named as described in section 12.

12. Your rights

You have the right to:

  • access your stored data (Art. 15 GDPR)
  • rectification of inaccurate data (Art. 16 GDPR)
  • erasure (Art. 17 GDPR)
  • restriction of processing (Art. 18 GDPR)
  • data portability (Art. 20 GDPR)
  • object to processing based on Art. 6 (1) (f) GDPR on grounds relating to your particular situation (Art. 21 GDPR)

Please use the contact details above. You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW).

13. Objection to advertising emails

We object to the use of the contact details published in the legal notice for sending unsolicited advertising and information material. We reserve the right to take legal action in the event of unsolicited advertising, for example spam emails.

14. Data security

This website uses TLS encryption. You can recognise it by “https://” in your browser’s address bar. In addition, security headers and a content security policy limit which content the browser may load and execute.

15. Last updated

Last updated: [month and year of publication]. We will adapt this privacy policy if the website or legal requirements change.