Legal
Privacy notice
Short version: analytics (Google Analytics 4 via Google Tag Manager) and session recording (Microsoft Clarity) run only if you accept them in the cookie banner. You can change your choice at any time with “Cookie settings” at the bottom of every page.
- Analytics only with consentNothing optional runs before you choose, and “Reject all” is as easy as “Accept all”.
- Two necessary cookiesOne stores your consent choice, the other your language if you pick one.
- Served from our own serverFonts, styles and scripts come from our server; Google and Microsoft are contacted only for the analytics you allow.
Controller
The controller is the publisher of Compliance Ratings, reachable at hello@credibilidy.com.
When you visit this site
Like every website, the server that delivers these pages receives technical data with each request: your IP address, the date and time, the page requested, the referring page if your browser sends it, and your browser’s user-agent string. This is necessary to deliver the page and to keep the server secure (Article 6(1)(f) GDPR). Our hosting provider processes this data on our behalf, only to deliver the site and keep it secure. We do not use this data to identify visitors or build profiles.
The filter and comparison controls run entirely in your browser; any selection is kept only in the page address and is never sent to us or anyone else.
Analytics and session recording
These services run only after you accept the “Analytics” category in the cookie banner. Legal basis: your consent (Article 6(1)(a) GDPR and Article 5(3) ePrivacy Directive), which you can withdraw at any time with effect for the future.
| Service | Purpose | Provider | Cookies | Retention |
|---|---|---|---|---|
| Google Tag Manager | Loads the analytics tags below and applies your consent choice. | Google Ireland Limited | none | – |
| Google Analytics 4 | Visitor statistics: pages viewed, time on page, device type and approximate location (country or region). | Google Ireland Limited | _ga, _ga_* | up to 2 years |
| Microsoft Clarity | Session recordings and heatmaps that show how pages are used; text you type is masked. | Microsoft Ireland Operations Limited | _clck, _clsk | 1 year (_clck), 1 day (_clsk) |
| Google Ads | Measures whether a visit from our Google Ads campaign leads to a click to LegisCheck.eu (conversion measurement). | Google Ireland Limited | _gcl_au, _gcl_aw | 90 days |
Google Ads conversion measurement runs only if you accept the “Marketing” category.
Both providers may involve their group companies and process data in third countries; such transfers rely on an EU adequacy decision or the EU standard contractual clauses.
Consent cookie and consent log
Your choice is stored for 180 days in a first-party cookie named “site_consent” (policy version, a random consent ID, the time and your choices). As proof of consent (Article 7(1) GDPR), each decision is also recorded on our server with that ID, your choices, the page language and address, the time, a shortened IP address (last part removed) and a hashed browser identifier. The record is kept only as long as needed to demonstrate consent.
How to change your choice
Use “Cookie settings” at the bottom of any page to open the settings, switch analytics on or off or withdraw consent. Withdrawing deletes the analytics cookies and reloads the page without the tags. You can also delete cookies in your browser at any time.
Language cookie and country lookup
When you open the site at an address without a language, the server picks a language for you: first a language you chose earlier, then your country, then your browser’s language settings. To find your country, your IP address is looked up in a country database stored on our own server. This happens in memory only: we do not store or log the IP address for this purpose, and it is not sent to anyone else.
If you choose a language with the language switcher, a first-party cookie named “lang” remembers that choice for one year. It is set only because you asked for it, contains nothing but the language code and is used for nothing else (strictly necessary for a service you requested, Article 5(3) ePrivacy Directive).
IP-to-country data: IP to Country Lite by DB-IP (db-ip.com), licensed under Creative Commons Attribution 4.0 (CC BY 4.0).
Links to vendors and sources
When you follow a link to a vendor or a legal source, you leave this site and that website’s own privacy notice applies. Links to vendor websites carry a referral tag (utm_source) naming this site, so the vendor can see that the visit came from us; nothing about you is attached. Our referrer policy means the other site learns at most our domain name, not the page you came from.
When you write to us
If you e-mail us, we use your address and message only to reply and to handle your request (Article 6(1)(b) or (f) GDPR), and delete them when they are no longer needed.
Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection under Articles 15 to 21 GDPR. Write to the address above to exercise them. You can also lodge a complaint with a data protection supervisory authority, in particular in the EU Member State where you live or work (Article 77 GDPR).
Last updated .