Privacy Policy

Pursuant to sections 5, 13 TMG and Art. 13, 14 GDPR

1. Data controller

TrustSource is a brand and a Software-as-a-Service platform operated by EACG Operations Services GmbH, a wholly-owned subsidiary of EACG GmbH.

2. General principles

EACG is committed to compliance with the applicable provisions of German and European data protection law when designing the platform and service offering. We uphold the right to informational self-determination and maintain the highest possible standard of data security. Our security measures are continuously reviewed and improved in line with technological developments to protect your personal data against accidental or intentional manipulation, loss, destruction or unauthorised access.

3. What personal data do we collect and use?

We collect and use two types of information. On the one hand, we collect customer data for the performance of contracts and payment processing. On the other, we collect bill-of-materials information via our scanners, which we store, process and share with third parties only in the customer context.

4. How is information processed in detail?

The information you provide for ordering, processing and customer support is stored and processed by us. This includes the information you enter on our website (e.g. when registering for the TrustSource solution or purchasing a licence). These are data necessary for establishing, defining the content of, or amending the contractual relationship (master data). We use them only for the performance of the contractual relationship with you and only for the purpose for which you provided the data.

TrustSource serves to trace actions in the context of open source. To this end, legally relevant activities are collected in a so-called audit log. It is the responsibility of the respective user (customer) to review and use the audit logs. EACG does not use the logs and cannot inspect them.

5. Bill-of-materials data

Your individual bill-of-materials data can be used by you in accordance with our Terms and Conditions. In addition, the bill-of-materials information collected by the scanners may be aggregated, stored, processed and analysed in a data pool with other data. This is done exclusively in anonymised form. EACG holds the sole copyright and usage rights to the performance data generated and aggregated in this pool. Tracing or individual assignment to your personal data is excluded due to anonymisation.

6. Communication security

Access to your data stored with us is exclusively via an encrypted connection, and a firewall provides maximum protection. The entire registration process via our website as well as the use of the TrustSource platform is exclusively encrypted via an SSL/TLS connection.

7. Server log files

Each time our web pages are accessed, data is temporarily stored in a log file and processed:

• IP address of the requesting computer
• Date and time of access
• Name and URL of the retrieved file
• Notification of whether the retrieval was successful
• Identification data of the browser and operating system used
• Website from which the access was made
• Name of your Internet access provider

This data is processed to enable the use of the website (connection establishment) and additionally serves system security, technical administration and optimisation of the website. Data is only evaluated for statistical purposes and subsequently deleted.

8. Cookies and embedded content

Articles on this site may include embedded content (e.g. videos, images, articles). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website. These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content.

9. Disclosure to third parties

Upon court order, upon a legally effective request by an investigating authority, or for evidentiary purposes, data and information stored by us may be used and disclosed to third parties within the framework of applicable law, insofar as this is necessary.

10. Right of access

We are happy to provide registered customers with information about the data stored about them. Please contact our support at support@trustsource.io.

11. Web analytics (Google Analytics)

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited ("Google"). Google Analytics sets cookies that allow an analysis of your use of the website. The information generated (including your truncated IP address) is transmitted to and processed by Google.

Analytics is used only with your prior consent (Art. 6(1)(a) GDPR, § 25(1) TTDSG). On your first visit no analytics cookies are set and no analytics script is loaded without your agreement — you can accept or decline via the cookie notice. IP anonymization is enabled.

Your consent is voluntary and can be withdrawn at any time with effect for the future (e.g. by clearing the choice stored in your browser and then declining). For more information see Google's privacy policy: policies.google.com/privacy.