As of: November 27, 2024

1. Controller and Data Protection Officer

The controller for data processing is:
Turmitus.Tech
c/o orientas.digital
St. Niklausstrasse 8
CH-3425 Koppigen
Switzerland
Email: office@turmitus.tech

2. Data Collected and Purposes of Use

We process personal data based on the following legal bases:

For contract performance (Art. 6(1)(b) GDPR) for premium memberships
Based on your consent (Art. 6(1)(a) GDPR) for newsletters etc.
For legitimate interests (Art. 6(1)(f) GDPR) for operational security, fraud prevention and improvement of our service
To fulfill legal obligations (Art. 6(1)(c) GDPR)

In detail, we process:

a) Usage data:

When visiting the website, we collect log data (IP address, browser type, access times), which is necessary for providing the website and defending against cyber attacks. IP addresses are anonymized after 7 days.

b) Contact data:

If you contact us via form or email, we store your information to process the request.

c) Report data:

We process the data you enter into the scam reporting system (URL, description) to conduct our analysis. Please do not disclose any personal data of third parties.

d) Account and payment data:

When registering and purchasing a premium membership, we store email address and password (hashed). Payment data (e.g., credit card data) is processed directly by our payment service provider (e.g., Stripe, PayPal); we only receive a confirmation of payment.

e) Cookies and tracking:

We use cookies that are necessary for the technical operation of the website. For analysis and advertising purposes (e.g., Google Analytics, Google AdSense), we obtain your separate consent (cookie banner).

3. Data Transfer to Third Parties

Your data is only transferred:

To data processors (e.g., hosting providers, email delivery services, analytics tools), who process our data strictly according to instructions
To advertising partners and affiliate networks (e.g., Google AdSense, Ezoic), if you have consented
To authorities, if required by law

Since we offer a global service, it may happen that recipients are located in countries outside the EU/EEA (so-called third countries) that do not have an adequate level of data protection (e.g., USA). In these cases, we ensure an adequate level of protection through appropriate safeguards, e.g., by using EU Standard Contractual Clauses, which you can review upon request.

4. Storage Period

We store your personal data only as long as necessary for the respective processing purposes or if statutory retention obligations (e.g., commercial or tax law) exist. After that, the data will be deleted or anonymized.

5. Your Rights

You have the following rights regarding your personal data:

Right of access (Art. 15 GDPR)
Right to rectification or erasure (Art. 16, 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to object to processing (Art. 21 GDPR)
Right to data portability (Art. 20 GDPR)
If processing is based on consent, you have the right to withdraw this consent at any time

To exercise these rights, you can contact the address provided in point 1. You also have the right to lodge a complaint with a data protection supervisory authority.

6. Special Notes for California Residents (USA) / CCPA/CPRA

If you are a consumer in California, the California Consumer Privacy Act (CCPA), as amended by the CPRA, grants you additional rights:

You have the right to know about the categories and specific pieces of personal data we have collected about you, as well as the sources, purposes, and third parties to whom we disclose the data
You have the right to request deletion of your personal data (with certain exceptions)
You have the right to opt-out of the "sale" or "sharing" of your personal data for cross-context behavioral advertising. We do not "sell" data in the traditional sense under CCPA, but we use analytics and advertising tools that may constitute this activity. Use our cookie banner or the "Do Not Sell or Share My Personal Information" link to manage your preferences
We will not discriminate against you for exercising your CCPA rights

7. Special Notes for Canadian Residents (PIPEDA)

Your data is processed in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA). You have the right to access your data and request correction. You can object to the use of your data for secondary purposes (such as marketing).

8. Automated Decision-Making

Our free scam analysis service uses automated processing (algorithms) to generate a risk assessment. This decision has no legal effect on you and does not significantly affect you. You have the right to request human review of the automated decision.

9. Changes to this Privacy Policy

We reserve the right to adjust this privacy policy to reflect changed legal situations or changes to our service. The current version is always available on our website.