Privacy Policy

Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation is:

You can reach us for any question about your data at the email address above.

The Short Version

Cataleo is a static website. Every page is generated in advance and served as a plain file. There is no user account, no login, no database and no application running on the server that could store anything about you. This site sets no cookies and loads nothing from a third party while a page is opening. What happens is this: the server logs the request, and our hosting provider turns those logs into an anonymised visitor statistic. Both are described below. Beyond that, no personal data is processed unless you type it into one of the forms yourself.

Hosting and Server Log Files

This website is hosted with IONOS Deploy Now, a service of IONOS SE, Elgendorfer Strasse 57, 56410 Montabaur, Germany. The finished pages are uploaded there after each change; IONOS acts as a processor on our behalf.

Like any web server, the hosting provider records each request in a log file. This typically covers your IP address, the date and time of the request, the address of the page requested, the browser and operating system you use, and the page you came from. The same applies to files this site loads from its own server while you browse, such as the search index or a form that opens in a dialog.

We do not merge this data with any other source and we do not use it to identify individual visitors. The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest is delivering this website reliably and keeping it secure.

A data processing agreement under Art. 28 GDPR is in place with IONOS SE. It was concluded on 21 May 2022 and has been part of the IONOS general terms and conditions since 19 July 2022.

Under clause 4.3 of that agreement, processing takes place in a member state of the European Union or in another state party to the Agreement on the European Economic Area, unless a transfer to a third country is necessary in order to provide the service. In that case IONOS ensures that the requirements of Art. 44 and following GDPR are met.

The log data is held by IONOS as our processor only for as long as it is necessary for the secure operation of this website, and is deleted or anonymised after that. No fixed period is published for it, so none is stated here.

Visitor Statistics

Our hosting package includes the visitor statistics built into IONOS Deploy Now, and it is switched on for this website. It builds its figures from the server log files described above, on the server. No script for it runs in your browser, which is why you will not find it in this site’s code, and it creates and reads no cookies.

Your IP address is transmitted with the page request, as it is with any request on the internet. It is anonymised immediately after transmission and is processed only in that form, without any personal reference. It serves solely to determine the approximate location of the access.

The statistic records:

• The page or file requested.
• The page you came from.
• Browser type and version.
• Operating system.
• Device type.
• The time of access.
• The anonymised IP address, used only for location.

The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest is understanding which pages are used and how the site performs, so we can improve it. Because the measurement works without cookies and without any personal reference, it needs no consent and this site therefore has no consent banner. It builds no profile of you and does not recognise you across visits or across websites.

Forms

This site has four forms. All of them are optional, all of them are sent only when you press the button yourself, and none of them is needed to read anything here. Each submission is sent directly from your browser to the address configured for it.

• The advertising and listing enquiry at the bottom of the Get Listed page asks for your name, your company, your work email address, the name of your tool, what you are interested in, and your message.
• The listing request behind the button on the Get Listed page asks whether you represent the vendor, your role, your name and email address, and the details of the software you want listed: its name, website, tagline, category, industries, deployment, company sizes, starting price, free trial and any message. You may attach images.
• The correction form on a software page asks what the correction is about, whether you represent the vendor, your role, your name and email address, your message and optionally a link to material. You may attach images. The name and page of the software are added automatically.
• The review form on a software page asks for a headline, what you like, what could be better, the problem the tool solves for you, your role, the name shown with the review, your email address and a rating on six axes.

For a listing request or a listing correction, the legal basis is Art. 6 (1) (b) GDPR, because the processing serves steps taken at your request before entering into an agreement. For a general enquiry and for a review, the legal basis is Art. 6 (1) (f) GDPR: our legitimate interest in answering what you asked and in keeping the directory accurate. Providing the data is voluntary, but without it we cannot answer or act on your submission.

We keep a submission for as long as it takes to deal with it, and after that only as long as the law requires. A listing that goes live stays published; the contact details behind it are not published. You can ask us to delete a submission at any time.

Nothing is uploaded, converted or cached in your browser. The email address you enter is checked in your browser against a list of common free mail providers, which produces a hint on the page and nothing else. That check sends no data anywhere.

Submissions reach us at info@cataleosoftware.com and are read by the controller named above. They are not passed on to anyone else.

Your Light or Dark Setting

If you switch between the light and dark appearance, that choice is stored in your browser under the key "cataleo-theme" so the page does not flip back on your next visit. It stays on your device, it is never sent to us or to anyone else, and it holds nothing but the word "light" or "dark". This is not a cookie. Storing it is strictly necessary to provide a function you explicitly asked for, so it needs no consent under Section 25 (2) no. 2 TDDDG. You can clear it at any time by deleting the site data in your browser.

What This Site Does Not Do

Because these are the things visitors usually have to worry about, here is what is verifiably absent:

• No cookies. This site sets none, of any kind, and therefore has no cookie banner.
• No analytics product in your browser. There is no Google Analytics, no Matomo, no Umami and nothing comparable. The only measurement is the cookieless, anonymised server-side statistic described above.
• No advertising network and no ad delivery. Paid placements on this site are agreed directly with the vendor and marked as sponsored; they involve no ad server and no profiling.
• No external fonts, scripts, images, videos or maps. Every asset comes from this site’s own server, including all vendor logos. Body text uses the fonts already installed on your device.
• No social media buttons and no embedded content from other sites.
• No profiling and no cross-site recognition.

The practical result is that opening a page here causes your browser to contact exactly one server, the one serving this site. No third party learns that you visited.

Google Search Console

This website serves no Google script and no Google verification file, and nothing is loaded from Google when you open a page. Where the site is registered with Google Search Console, ownership is proven through a DNS record at the domain registrar. That happens outside your browser and processes no data about you. Search Console shows us only aggregated search statistics that Google collects on its own side when someone uses Google Search, not data this site collected.

Links to Vendor Websites

This directory links to the websites of the software vendors it lists, and some of those links are affiliate links, which is disclosed on the methodology page. Such a link only does something when you click it. Nothing is loaded from those sites while you read a page here. Once you follow a link you are on someone else’s website, and their privacy policy applies, not ours.

Recipients

Your data is not sold and not passed on for advertising. The only recipient in ordinary operation is our hosting provider named above, which processes data on our behalf and on our instructions. Processing takes place inside the EU or the EEA, with the one exception described in the hosting section. Beyond that, data is disclosed only where we are legally obliged to do so.

Retention

Server log files, and with them the basis of the visitor statistics, are kept by the hosting provider only for as long as the secure operation of this site requires, and are then deleted or anonymised. Form submissions are kept until the matter is settled and afterwards only for as long as statutory retention periods require, in particular under commercial and tax law. The light or dark setting stays on your device until you clear it.

Your Rights

Under the GDPR you have the following rights regarding your personal data. Exercising them is free, and a short email to the address above is enough.

• Access (Art. 15): to be told whether we process data about you and, if so, which.
• Rectification (Art. 16): to have inaccurate data corrected and incomplete data completed.
• Erasure (Art. 17): to have your data deleted where one of the grounds in the regulation applies.
• Restriction (Art. 18): to have processing limited instead of deleted, for example while a correction is being checked.
• Portability (Art. 20): to receive the data you provided in a machine-readable format, or to have it sent to another controller.
• Objection (Art. 21): to object at any time to processing based on our legitimate interest, on grounds relating to your particular situation. We then stop unless we can show compelling legitimate grounds that override your interests.
• Complaint (Art. 77): to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, your place of work or the place of the alleged infringement. The authority responsible for us is the data protection authority of Lower Saxony, where the controller is based.

No Automated Decision-Making

No automated decision-making and no profiling within the meaning of Art. 22 GDPR takes place. The order of tools in a list is calculated from the entry data alone, identically for every visitor, and takes nothing about you into account.

Changes to This Policy

We update this policy when what the site does changes, for example when the forms go live or a new feature is added. The version you are reading is the one that applies.