Legal register · Document 1 of 2

Privacy notice.

We take the processing of personal data seriously. This notice explains what this site processes, on what basis, for how long, and the rights you hold. The full notice for the production platform is available on request.

01Data controller

The controller is ID-ware GmbH, registered in Germany. Questions about personal data, and any request to exercise a right under data protection law, go to the data protection officer at dpo@id-ware.com. General UK enquiries: enquiries@id-ware.co.uk.

02Scope of this notice

This notice covers this demonstration website. It is a static site published for evaluation purposes: it sets no cookies, runs no analytics, and embeds no advertising or tracking of any kind. Processing carried out on the production ID-ware platform is governed by the contract with each customer and by the full platform privacy notice, available on request.

03What we process

Site operation. The hosting infrastructure records standard access logs - IP address, user agent, requested URL and timestamp - used solely for security monitoring and operations.

Correspondence. If you email us, we process your contact details and the content of your message in order to respond.

Platform data (under contract). For customers of the platform we process contact details, corporate identifiers, and usage data required to operate the platform - as processor or controller as set out in the customer agreement.

04Hosting and third parties

Amazon Web Services. This site is static content served from AWS S3 through Amazon CloudFront, hosted in eu-west-2 (London). CloudFront edge servers process your IP address in standard access logs in order to deliver the pages.

Google Fonts. The Inter typeface is loaded from fonts.googleapis.com and fonts.gstatic.com. When a page loads, your browser sends your IP address and user agent to Google LLC to fetch the font files. Google's own privacy policy governs that processing, and the request may be answered from servers outside the UK and EU.

05Legal basis

Contract performance (Article 6(1)(b)), legitimate interest (Article 6(1)(f)) - operating and securing this site and responding to enquiries - and explicit consent (Article 6(1)(a)) where required. The same bases apply under the UK GDPR and the EU GDPR.

06Retention

Data is retained only as long as required for the purpose of processing, then deleted or anonymised. Infrastructure access logs are kept on a short rotation for security purposes; correspondence is kept for as long as needed to handle the enquiry and any follow-up.

07International transfers

Platform personal data is processed in the UK and EU sovereign cloud - AWS eu-west-2 (London) · eu-central-1 · EUSC - and does not leave the UK or the EU. The only exception on this website is the Google Fonts request described in clause 04, which may be served from outside the UK and EU.

08Your rights

Under the UK GDPR and the EU GDPR you have the right of access, rectification, erasure, restriction of processing, data portability, and objection, and the right to withdraw consent at any time where processing is based on consent. Email dpo@id-ware.com to exercise any right; we respond within one month.

09Complaints

If you believe we have processed your personal data unlawfully, you may complain to the UK Information Commissioner's Office at ico.org.uk, or to the supervisory authority of the German federal state in which ID-ware GmbH is registered. We would welcome the chance to address any concern first via dpo@id-ware.com.

10Changes to this notice

This notice is reviewed periodically; the date of the last review appears in the document header above. Material changes will be published on this page.

This is a demonstration site. The full privacy notice for the production platform is available on request via dpo@id-ware.com.