Privacy Notice

1. Controller

Name

Lukas Zens

Address

Zirknitz 50
8511 St. Stefan ob Stainz
Austria

Email

2. How the service works and data categories

You enter identifiers relating exclusively to yourself. These may include your name, previous locations, employers, projects, usernames, email addresses, websites and additional context. WebScanMe searches for publicly discoverable profiles, images, documents, location signals, domains and social-media traces.

We also process your confirmation or rejection of findings, workflow status, essential session identifiers, security events and limited payment metadata. Full card or bank details are processed by Stripe and are not stored on the WebScanMe server.

3. Purposes and legal bases

• Free preview and steps before entering a contract: Article 6(1)(b) GDPR.
• Paid analysis and dossier: performance of the contract under Article 6(1)(b) GDPR.
• Potentially sensitive public content: explicit consent under Article 9(2)(a) GDPR where findings reveal special categories of personal data.
• Abuse prevention and security: legitimate interests under Article 6(1)(f) GDPR.
• Accounting and statutory retention: Article 6(1)(c) GDPR.

We do not offer searches on other people. Findings are used for deeper analysis only after you confirm them.

4. Sources

Research uses freely accessible websites, search results, profiles, documents, image results, social-media pages and public domain or DNS information. Sources are linked where possible. Private login areas, private registers, breach dumps and unlawfully obtained data are not used.

5. Service providers and recipients

• Hostinger: server hosting.
• OpenAI: structured web research, matching and summarisation on our behalf.
• Stripe: payment processing and billing data.
• Google Fonts: web fonts; your IP address may be transmitted.
• OpenStreetMap and technical map providers: map display inside your private dossier.
• Public source websites: when you open evidence or an externally hosted image loads, that provider may receive technical connection data.

Where processing occurs outside the EEA, an adequacy decision or suitable safeguards such as Standard Contractual Clauses are used where legally required.

6. Retention

Your input, findings, decisions and dossier are normally deleted automatically 30 days after the analysis begins. You can delete them earlier at any time using “Delete data”. Payment and accounting records are retained only where and for as long as the law requires.

7. Cookies and local storage

Only essential identifiers are used: a secure customer identifier that links you to your analysis and, for administrative access, a time-limited session. The active analysis is stored locally in your browser so it can resume after reloading. No advertising or tracking cookies are used.

8. Automated analysis

The software connects confirmed findings and generates possible conclusions and perspectives. It has no legal effect and does not make decisions about you. It may be incomplete or wrong, so evidence and uncertainty are shown and findings require your confirmation.

9. Your rights

Subject to legal conditions, you may request access, rectification, erasure, restriction, portability or object to processing. Consent may be withdrawn at any time for the future. Requests can be sent to the email address above. You may also complain to the Austrian Data Protection Authority.

10. Required information

A name and at least one additional personal identifier are required for meaningful research. Other details are optional but can improve matching. Payment data is required to purchase the complete analysis.