← FIDATRA Passport

Legal

Privacy Policy

Last updated: 14 August 2026

1. Who we are

FIDATRA Passport is a digital product identity and Digital Product Passport platform operated by Gianluca Engst.

For questions about this policy or personal-data processing, use the contact details published by FIDATRA.

2. Personal data we collect

Depending on how you use FIDATRA Passport, we may process the following personal data.

Passwords are not stored in plain text. Authentication credentials use security mechanisms designed to protect account access.

  • First and last name
  • Email address
  • Company name and identifier
  • Account and authentication information
  • Information associated with product ownership, warranty, maintenance and Digital Product Passport records
  • Information provided when contacting or interacting with the service
  • Technical and security information needed to operate and protect the platform
  • With explicit permission for privacy-safe verification analytics, an approximate country may be derived locally from the network address. The address, precise location, city, coordinates and consumer identifiers are not stored in scan analytics. Verification remains available with essential processing only.

3. Why we process personal data

We may process personal data for the following purposes.

  • Create and manage accounts
  • Verify email addresses and authenticate users
  • Provide and secure platform access
  • Create and manage Digital Product Passports and related records
  • Manage ownership, warranty and maintenance information
  • Provide account recovery and password reset
  • Send service communications
  • Detect, investigate and prevent misuse or security incidents
  • Maintain and improve service reliability
  • Comply with legal obligations

4. Legal bases for processing

Where the GDPR applies, processing relies on one or more applicable bases: performance of a contract or pre-contractual steps, legal obligations, legitimate interests in operating and securing the service, and consent where specifically required.

5. Product ownership information

When ownership or transfer functions are used, related information may be associated with the product’s digital identity and lifecycle history.

Access to personal ownership information is restricted and may be subject to anonymisation, revocation or retention procedures according to the record and legal requirements.

6. Service providers

We may use providers for infrastructure, hosting, email delivery, storage, monitoring, security and other technical components.

They may process information only as necessary to provide their services and under applicable contractual and data-protection requirements.

7. International data transfers

Where personal data is transferred outside the European Economic Area, appropriate safeguards are used when required by applicable law.

8. Data retention

Personal data is kept only as long as reasonably necessary for its collection purpose, service operation and security, required product lifecycle records and legal obligations. Retention periods may differ by data category.

Scan attempts are removed after the configured analytics retention period. Approximate country data is recorded only after versioned consent. Geographic dashboard results are company-level aggregates and small country groups are suppressed.

9. Your rights

Where applicable under the GDPR, you may request access, correction, deletion, restriction, portability and object to certain processing.

Consent may be withdrawn at any time without affecting processing before withdrawal. Requests can be submitted using FIDATRA’s published contact details.

10. Complaints

If you believe your data was processed contrary to applicable law, you may contact us so we can investigate. You may also complain to the competent data-protection authority.

11. Security

We use technical and organisational measures intended to protect personal data against unauthorised access, alteration, disclosure or loss. No internet service can guarantee absolute security.

12. Cookies

FIDATRA Passport currently uses cookies necessary for authentication and service operation. More information is available in our Cookie Policy.

13. Changes to this Privacy Policy

We may update this policy when the platform, processing activities or legal requirements change. The latest version will be published on this page.

14. Contact

Privacy and data-protection enquiries can be submitted through the contact details published by FIDATRA.