Privacy policy
This page is an unfilled template, not legal advice. Before going live, have it reviewed and completed by a reputable generator (e.g. eRecht24, Datenschutz-Generator.de) or a lawyer. German law requires the German version of this notice to be authoritative.
This notice describes what personal data HalalSpot processes, for what purpose, and on what legal basis. It reflects the actual state of the product – but doesn't replace a legal review of the exact wording.
Data controller
[Name/company, address, email – see legal notice]
Registration & account
When you register, we process your email address, password (stored encrypted), and optionally a display name. The legal basis is performance of the usage contract (Art. 6(1)(b) GDPR). Authentication is provided by Supabase (EU/Frankfurt region).
Reviews
Reviews (star rating, text, display name, date) are publicly visible. The legal basis is your consent through actively submitting the form (Art. 6(1)(a) GDPR). You can edit or delete your own review at any time.
Halal certificate (owners)
Uploaded certificates are stored exclusively in a private storage area and are only viewable by you and the admin for review – never publicly. The legal basis is contract performance (Art. 6(1)(b) GDPR).
Map & location search
The map loads map tiles from CARTO and uses the geocoding service Nominatim (OpenStreetMap) for address search. Your IP address may be transmitted to these providers in the process. The map only loads once you actively use it – never automatically on page load. The legal basis is our legitimate interest in a working core feature (Art. 6(1)(f) GDPR).
Email notifications
For notifications (e.g. about your certificate status), we use the email service Resend. The legal basis is contract performance (Art. 6(1)(b) GDPR).
Hosting & processors
This website is hosted on Vercel; database/auth/storage run on Supabase (EU/Frankfurt region). Data processing agreements exist or need to be concluded with both providers.
Cookies
We only use technically necessary cookies (login session, language preference). There is no tracking and no analysis of your usage behavior – which is why no cookie banner is required.
Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability, and objection (Art. 15–21 GDPR). Contact the address listed above to exercise these rights.
Contact for privacy requests
[Insert email address]