Privacy

Who is responsible

Linda Stupena, trading as Linda Stupena Advisory, Malta, is responsible for the personal data described on this page. Contact: [email protected].

What is collected

When a scan is requested through the scan request page, the following is stored:

• name and surname, work email, company and the brand website to be scanned
• the jurisdiction selected and what the requester wants checked
• the confirmations ticked on the form, with the version of their wording and the date and time of the request

IP addresses are not stored with the request.

The scan itself reads only the public pages of the brand website. The requester’s contact details are not passed to the tools that run the scan.

Why, and on what legal basis

• To handle the request, run the scan, send the report and reply about it. Legal basis: steps taken at the requester’s request before any agreement (GDPR Article 6(1)(b)).
• To keep the form free of spam and automated abuse. Legal basis: legitimate interest in protecting the service (GDPR Article 6(1)(f)).

The form fields are required. Without them the request cannot be handled. No decision with legal or similarly significant effects is made about anyone by automated means.

Who else handles the data

• Cloudflare: hosts this site and stores scan requests in a database restricted to the European Union.
• Cloudflare Turnstile: the security check on the request form. It processes technical signals such as IP address and browser details to tell people from bots. Cloudflare also uses these signals, as a controller in its own right, to improve the check.
• Zoho Mail (EU data centres): sends and receives email, including the report.

Personal data is not sold and is not used for marketing lists.

Your report

The report is sent only to the work email given in the request. Its contents and screenshots are never published or shown to anyone outside the requesting company, including in marketing. The only exception is a disclosure the law requires.

How long it is kept

Request details and the report are kept for 12 months from the request and then deleted. Earlier deletion can be requested at any time by email.

Your rights

Under the GDPR you can ask for access to your personal data, correction, deletion, restriction of its use, a copy in a portable format, and you can object to processing based on legitimate interest. Email [email protected]. A reply is given within one month.

You can also complain to the Office of the Information and Data Protection Commissioner in Malta: idpc.org.mt/file-a-complaint.

Cookies

This site sets no advertising or analytics cookies of its own and does not track visitors across sites. The security check on the request page is provided by Cloudflare, as described above.

Changes

If this page changes, the date at the top changes with it.