Privacy Policy (Datenschutzerklärung)

Last updated: November 2025

1. General Information

This Privacy Policy explains how we ("we", "us", "our") collect, process, and store personal data when you use the website www.targetradar.eu ("Website", "Service").

We process your data in accordance with the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG), and other applicable privacy laws.

2. Controller (Data Operator)

Website Operator: Jakob Neugebauer
Address: Postgasse 8b, 1010 Vienna, Austria
Email: jakobneugebauer@pm.me

This is the entity responsible ("Verantwortlicher") for data processing on this Website under Art. 4(7) GDPR.

3. Purpose of the Website

Our Website aggregates and displays publicly available company listings from third-party websites.

• We use automated and AI-based tools to summarize, translate, and score listings to make them searchable
• No due diligence or verification is performed on the listings
• This Privacy Policy covers data processing related to Website operation, user accounts, and analytics

Third-Party Data Disclaimer:

• TargetRadar is not liable for the accuracy, completeness, or legality of data obtained from third-party platforms
• All third-party data is provided "as is" without warranties of any kind

AI-Generated Content Disclaimer:

• TargetRadar uses AI to generate summaries, translations, and scores
• AI-generated content may contain errors or inaccuracies
• TargetRadar assumes no responsibility for the output of AI systems
• Users should verify all AI-generated information independently before making decisions
• Similar to other AI services: "AI can make mistakes. Check important info."

4. Categories of Personal Data Processed

We process the following categories of data when you use our Website:

Website access (logs):

• IP address, timestamp, browser type, operating system
• Used for security, debugging, and optimization
• All data is anonymized and cannot be attributed to individual users without login

User registration:

• Email, display name, Firebase ID, authentication provider, email verification status, timestamps
• Required for login and account management
• Authentication via Google Sign-In (SSO): When you use "Continue with Google", we receive your email address and basic profile information from Google. This is processed through Firebase Authentication in accordance with Google's OAuth 2.0 protocol and privacy standards.

Analytics & performance:

• Usage data, click behavior, device type, anonymized identifiers
• Collected through Google Analytics, Firebase, and Hotjar
• All analytics data is anonymized and pseudonymized where possible

Cookies:

• Session and consent cookies
• Used for login persistence and analytics preferences
• You can revoke or modify your cookie consent at any time via the "Cookie Settings" button in the footer

5. Purposes and Legal Bases (Art. 6 GDPR)

Providing access to the Website:

• Legal Basis: Art. 6 (1)(b) GDPR – performance of contract
• You use the Website as a registered or guest user

Operating user accounts:

• Legal Basis: Art. 6 (1)(b) GDPR – contract performance
• Necessary to allow registration and authentication

Analytics and improvement:

• Legal Basis: Art. 6 (1)(a) GDPR – consent
• We process analytics data only with your consent via cookie banner

Security and fraud prevention:

• Legal Basis: Art. 6 (1)(f) GDPR – legitimate interest
• To ensure technical stability and prevent misuse

Communication (e.g. account verification):

• Legal Basis: Art. 6 (1)(b) GDPR
• Required for account activation and notifications

6. Hosting and Infrastructure

Our Website is hosted on Microsoft Azure, with servers located in Europe.

* We have concluded a Data Processing Agreement (DPA) with Microsoft in accordance with Art. 28 GDPR * Microsoft may process metadata for operational purposes in compliance with EU privacy law

7. Authentication and Database (Firebase)

We use Firebase Authentication (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland) to manage logins and user data.

Data processed includes: * Email, authentication provider, Firebase ID, display name, and timestamps Data transfers: * Data may be stored on servers operated by Google LLC (USA) * Where data is transferred outside the EEA, Google applies the EU Standard Contractual Clauses (SCCs) to ensure compliance with Art. 46 GDPR Firebase's privacy policy: https://firebase.google.com/support/privacy

8. Analytics and Tracking Tools

a) Google Analytics

We use Google Analytics (Google Ireland Ltd.) to analyze website usage.

* Cookies are only set with your consent * Data such as device information, IP address (anonymized), and usage patterns may be transmitted to servers in the USA * We have activated IP anonymization and concluded a data processing agreement with Google

b) Hotjar

We use Hotjar Ltd. (Malta) to record anonymized user interactions (e.g., heatmaps, scroll depth).

* Hotjar does not record personal information or text entered by users * Processing occurs based on your consent (Art. 6 (1)(a) GDPR)

c) Firebase Analytics

Used to monitor app and website performance.

* Data is pseudonymized where possible and processed under Firebase's DPA and EU SCCs

9. Cookie Information & Settings

What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help websites remember your preferences and improve your browsing experience.

Types of Cookies We Use

Essential Cookies: * Session management and authentication * Security features * Basic functionality * These cookies cannot be disabled as they are required for the platform to work Analytics Cookies: * Usage statistics * Feature testing * Performance monitoring * These are only set with your consent

Managing Your Cookie Preferences

When you first visit the site, you will be asked to provide your consent to non-essential cookies.

You can withdraw consent at any time by clicking the "Cookie Settings" button in the footer of any page:

Manage Cookie Settings

You can also control cookies through your browser settings. However, disabling necessary cookies may affect the functionality of the platform.

10. Email Communication and Marketing

• Account confirmation and verification emails are sent via Firebase Authentication
• Your email address will only be used for account-related purposes
• No newsletters or marketing messages are sent by TargetRadar
• TargetRadar does not sell, rent, or share your personal data with third parties for marketing purposes

Account Deletion (GDPR Right to Erasure):

• You have the right to request deletion of your account and all associated personal data at any time
• To delete your account, please contact us at jakobneugebauer@pm.me with the subject line "Account Deletion Request"
• We will process your request within 30 days and confirm deletion via email
• After deletion, your data will be permanently removed from our systems, except where retention is required by law

Data Access Transparency:

• You have the right to know who has access to your personal data
• Access to backend systems and personal data is restricted to authorized personnel only:

- Developers and system administrators - For a complete list of individuals with data access, please contact us at jakobneugebauer@pm.me

• All personnel with data access are bound by confidentiality obligations and GDPR compliance requirements

11. Data Retention

Personal data is stored only as long as necessary for the purpose of providing the Service.

• Currently, user data and logs are retained indefinitely; however, this may change as deletion functionality is implemented
• We recommend registered users request deletion if they wish to remove their data

12. Data Transfers Outside the EU/EEA

Where external service providers (e.g., Google LLC, Firebase) process data in countries outside the EU/EEA, data transfers are protected by:

• Standard Contractual Clauses (SCCs) under Art. 46 GDPR
• Additional security and encryption measures

13. Your Rights (Art. 15–22 GDPR)

You have the right to:

• Request access to your personal data (Art. 15)
• Request correction (Art. 16) or deletion (Art. 17)
• Restrict processing (Art. 18)
• Object to processing (Art. 21)
• Data portability (Art. 20)

To exercise your rights, contact us at jakobneugebauer@pm.me

You also have the right to lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde).

14. Data Security

We implement appropriate technical and organizational measures to protect data against loss, misuse, or unauthorized access, including:

• Encryption
• Access control
• Secure storage

15. AI-Generated Content

All content (summaries, scores, tags) displayed on this Website is AI-generated.

• These elements are informational only and not based on personal data or user profiling
• No automated decision-making or profiling occurs within the meaning of Art. 22 GDPR

16. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in technology, law, or our services.

The current version will always be available on this page with the effective date at the top.

---

17. Contact

If you have any questions about this Privacy Policy or your data, please contact:

Operator: Jakob Neugebauer
Email: jakobneugebauer@pm.me
Address: Postgasse 8b, 1010 Vienna, Austria