Data Subject Notice

Information pursuant to Art. 14 GDPR for businesses whose publicly available data is processed in ScanToPitch. This page addresses owners and contact persons of businesses that appear in our application as potential business contacts. The German version is legally authoritative.

1. Who is responsible?

DigitalToolsList Extended UG (haftungsbeschränkt), Paalende 26, 22149 Hamburg, Germany.

Email: bdoerffer@digitaltoolslist.com

Further details can be found in our imprint.

2. What data do we process?

• Business master data from public directory and map services (Google Places): company name, address, industry/category, website URL.
• Business contact data exclusively from the business's own publicly accessible website (in particular the legal notice/imprint and contact pages): email address, phone number, postal address, and contact persons named publicly there.
• Technical and design assessments of the business website: automatically collected measurements (e.g. load time, encryption, accessibility and compliance signals), screenshots of the website, and scores calculated from them.
• Public links to the business's social media profiles, where linked from its own website.

3. What are the data sources?

Exclusively publicly accessible sources: the business's own website and public directory and map services (in particular Google Places). We do not purchase address databases and we do not read private or access-restricted profiles. Email addresses are checked for technical deliverability exclusively via DNS lookups (MX/A records) — no emails are sent and no mail servers are contacted in the process.

4. For what purpose and on what legal basis?

The purpose of processing is the operation of a B2B research and analysis application: our customers (e.g. web design professionals and agencies) use it to identify businesses whose web presence could be improved technically or visually, in order to offer them their own services.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest). Our legitimate interest lies in operating the service; our customers’ legitimate interest lies in initiating business contacts in a commercial context. Only business-related, publicly available data is processed.

Important: ScanToPitch itself never advertises to you or contacts you. Whether and how our customers contact you is their responsibility; our terms of service oblige them to comply with the applicable rules (in particular the German Act against Unfair Competition (UWG) and the GDPR).

5. Who receives the data?

Recipients are our commercial customers within the scope of their research, and the processors we use (hosting, database, storage, AI analysis, email delivery). A complete list of service providers, including the safeguards for third-country transfers, can be found in our privacy policy.

Where our customers store and manage the researched data in their own account (e.g. in lists or with their own notes), they are themselves the controller for that data; to that extent we process the data on their behalf under a data processing agreement (Art. 28 GDPR).

6. How long do we store the data?

We store the data for as long as it is required for the stated purpose and review that necessity regularly. Location coordinates from map services are deleted no later than 30 days after collection. Upon objection, we promptly and permanently delete your record from our database unless statutory retention obligations require otherwise; in addition, the record is blocked from future collection.

7. Third-country transfers

Some service providers are based in the USA or process data there. Transfers take place on the basis of Art. 44 et seq. GDPR, in particular an adequacy decision (EU-US Data Privacy Framework) and/or the EU Standard Contractual Clauses. Details per provider can be found in the privacy policy.

8. Your rights

• Access to the data stored about your business (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Objection to processing on grounds relating to your particular situation, and at any time to direct marketing (Art. 21 GDPR)
• Complaint to a data protection supervisory authority (Art. 77 GDPR)

For an objection or erasure, an informal email to bdoerffer@digitaltoolslist.com with the name of your business and your website is sufficient. We will then promptly and permanently remove your record.

9. Obligation to provide data

There is neither a statutory nor a contractual obligation to provide us with data. You will not suffer any disadvantages from objecting.