Privacy Policy

1. Data Controller

The controller responsible for data processing on this website under the GDPR is:

Raphael Rammel
Pfarrwald 41/6
3354 Wolfsbach
Austria
Email: opensourcesoftwarefinder@gmail.com

2. Types of Data Processed

When visiting this website, technical server log data (such as your IP address, browser type, operating system, date/time of access, and referrer URL) is automatically processed to ensure the security and stability of the platform.

Furthermore, if you use the "Suggest a Tool" feature, we collect and store the submission data you actively provide (e.g., tool names, URLs, and optional descriptions) in order to review and integrate the suggested software into our directory.

3. Purpose of Processing

We process your data to securely provide the website, maintain its core technical functionality, handle user-submitted tool recommendations, and optimize the overall user experience.

4. Legal Basis for Processing

The processing of your data is based on Art. 6(1)(f) GDPR (Legitimate Interests) to guarantee a secure, fast, and operational system architecture, as well as Art. 6(1)(b) GDPR if inputs are part of pre-contractual requests or feature usage.

5. Third-Party Infrastructure (Data Transfer)

To host this application and manage our database dynamic features, we use backend infrastructure services provided by Supabase, Inc. (970 Summer St, Stamford, CT 06905, USA).

Data is processed based on strict Data Processing Agreements (DPA) incorporating EU Standard Contractual Clauses (SCC) to guarantee an adequate level of data protection outside the European Economic Area.

6. Data Retention Period

Technical server log data is stored temporarily and deleted automatically. User submissions via the tool suggestion form are kept as long as necessary to evaluate the entry or maintain the directory, unless legal retention obligations dictate otherwise.

7. Your Rights Under GDPR

You have the right to request access to, rectification of, or erasure of your personal data stored by us. You also hold the right to restrict processing, object to processing, and request data portability.

Additionally, you have the right to lodge a complaint with a competent data protection authority (such as the Austrian *Datenschutzbehörde*). To exercise your rights, please contact us using the email address listed in Section 1.