Datenschutz

Wir verarbeiten die Daten, die Sie uns geben, um Ihr Konto zu betreiben: Name, geschäftliche E-Mail-Adresse, Unternehmen, Land und Markteinstellungen, die von Ihnen gespeicherten Einträge und Ihre Nachrichten an den Support sowie technische Daten, die der Sicherheit der Konten dienen (Anmeldungen, IP-Adresse). Wir verwenden keine Werbe-Tracker und keine Analysedienste Dritter; unsere Seiten setzen nur die Cookies, die nötig sind, um Sie angemeldet zu halten und Formulare zu schützen. Die Vergabedaten auf der Website stammen aus öffentlichen Bekanntmachungen (TED); wir erstellen keine Profile einzelner Beschäftigter des öffentlichen Sektors. Sie können jederzeit eine Kopie oder die Löschung Ihrer Kontodaten verlangen – Kontakt: support@govtorch.com.

Last updated: 27 October 2026 · Dieses Dokument wird auf Englisch bereitgestellt; maßgeblich ist der englische Text.

1. Who is responsible

Controller: [LEGAL_ENTITY_NAME], [REGISTERED_ADDRESS], Montenegro (CRPS [CRPS_NUMBER] · PIB [PIB] · PDV/VAT [VAT_NUMBER_IF_APPLICABLE]). Privacy and data-protection requests: [LEGAL_CONTACT_EMAIL]; any other question: support@govtorch.com.

2. What we process

• Account data — name, work e-mail, organisation, country, market preferences (countries, categories), role in your organisation, interface language and notification choices. Passwords are stored only as a one-way hash.
• Billing data you give for an invoice — company name, billing e-mail and address, VAT number, purchase-order reference, message.
• Service usage — items you watch, alert rules, settings, exports, data-problem reports, and counts of the features your organisation used per day.
• Support communications — what you send through the support form or by e-mail, with your e-mail, organisation and the page you were on.
• Technical and security data — IP address and browser type of your sessions, sign-in times, failed sign-in attempts, request counters used for rate limits, and server error logs.
• Cookies — only the cookies the service needs: a session cookie that keeps you signed in and a short-lived security cookie for forms. No advertising trackers, no third-party analytics.

3. Why

• to provide the service and your account, alerts and digests you switch on (performance of the contract);
• to issue invoices and keep accounting records (contract; legal obligation);
• to keep the service secure and fair — sign-in protection, one session per user, request limits against scraping and credential sharing (legitimate interest);
• to answer your support requests (contract; legitimate interest).

4. Public procurement data

The procurement information in GovTorch comes from public notices (TED). Notices can contain names or contact details of contact persons as published by buyers or suppliers; we show them as published and do not build profiles of individuals.

5. Who else receives data

• Hosting and backup storage: Hetzner Online GmbH (Germany); the application server is located in Helsinki, Finland (EU).
• Transactional e-mail delivery (account, invitation, password and billing e-mails): Zoho CPaaS (ZeptoMail), Zoho Corporation.

We do not sell personal data and do not share it for advertising.

6. How long

Account and usage data for as long as the account exists, then as long as legal retention duties require (e.g. invoices). Sessions end after 14 days without use; request counters are deleted after two days; backups are overwritten in a short rotation.

7. Your rights

You can ask for access to, correction, deletion or restriction of your data, for a copy in a portable format, and object to processing based on legitimate interest. Write to [LEGAL_CONTACT_EMAIL] (or support@govtorch.com). You can also complain to a data-protection supervisory authority.

8. Changes

We update this notice when our processing changes; the date above shows the current version.