Privacy Policy

1. Data Controller

The controller responsible for data processing on this website under the GDPR is:

Raphael Rammel
Pfarrwald 41/6
3354 Wolfsbach
Austria
Email: opensourcesoftwarefinder@gmail.com

2. Types of Data Processed

When visiting this website, technical server log data (such as your IP address, browser type, operating system, date/time of access, and referrer URL) is automatically processed to ensure the security and stability of the platform.

Furthermore, if you use the "Suggest a Tool" feature, we collect and store the submission data you actively provide (e.g., tool names, URLs, and optional descriptions) in order to review and integrate the suggested software into our directory.

3. Purpose of Processing

We process your data to securely provide the website, maintain its core technical functionality, handle user-submitted tool recommendations, and optimize the overall user experience.

4. Legal Basis for Processing

The processing of your data is based on Art. 6(1)(f) GDPR (Legitimate Interests) to guarantee a secure, fast, and operational system architecture, as well as Art. 6(1)(b) GDPR if inputs are part of pre-contractual requests or feature usage.

5. Third-Party Infrastructure (Data Transfer)

To host this application and manage our database dynamic features, we use backend infrastructure services provided by Supabase, Inc. (970 Summer St, Stamford, CT 06905, USA).

Data is processed based on strict Data Processing Agreements (DPA) incorporating EU Standard Contractual Clauses (SCC) to guarantee an adequate level of data protection outside the European Economic Area.

6. Cookies & Web Analytics

We use Google Analytics (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to understand how visitors use this website. Google Analytics sets a cookie to store a pseudonymous browser identifier. This is not technically necessary to operate the website, so it is loaded only after you have actively given your consent via the cookie banner shown on your first visit. You can withdraw your consent at any time by clearing your browser's local storage for this site, which will show the banner again on your next visit. This processing is based on Art. 6(1)(a) GDPR (consent).

We additionally use Vercel Web Analytics (Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA), a cookieless analytics service that does not set any cookies or store personally identifiable or persistent identifiers. As it does not process personal data in a way that requires consent, it is used on the basis of Art. 6(1)(f) GDPR (legitimate interest).

7. Data Retention Period

Technical server log data is stored temporarily and deleted automatically. User submissions via the tool suggestion form are kept as long as necessary to evaluate the entry or maintain the directory, unless legal retention obligations dictate otherwise.

8. Your Rights Under GDPR

You have the right to request access to, rectification of, or erasure of your personal data stored by us. You also hold the right to restrict processing, object to processing, and request data portability.

Additionally, you have the right to lodge a complaint with a competent data protection authority (such as the Austrian *Datenschutzbehörde*). To exercise your rights, please contact us using the email address listed in Section 1.