As of: November 27, 2024
1. Controller and Contact
Controller:
Turmitus.Tech
c/o orientas.digital
St. Niklausstrasse 8
CH-3425 Koppigen
Switzerland
Email: office@turmitus.tech
2. Data Collected
From users:
- Name, email, payment data
From data subjects:
- Publicly accessible data (social media, news, forums, licensed databases)
- Special categories: None, unless publicly available (e.g., political opinions in social media)
3. Legal Basis
- GDPR (EU/UK): Art. 6(1)(f) (legitimate interest) for research. For sensitive data: Art. 9(2)(e) (publicly disclosed data)
- CCPA (California): "Business Purpose" (§ 1798.140)
- PIPEDA (Canada): "Legitimate Business Interest"
- Switzerland FADP: Art. 31 (legitimate interest)
4. Data Sharing
To third parties:
- APIs (Google, Bing, Social Media)
- Cloud providers (Infomaniak)
- Proxy services
International transfers:
- EU → USA: Standard Contractual Clauses (SCCs)
- Switzerland → Third countries: Adequacy decision or SCCs
5. Data Security
Technical measures:
- Encryption (SSL, data at rest)
- Access controls
- Anonymized reports
Organizational measures:
- Contracts with data processors
- Training
6. Data Subject Rights
You have the right to:
- Access, rectification, deletion ("Opt-Out")
- Restriction of processing
- Data portability
- Objection
Requests should be submitted via office@turmitus.tech
InvestigateHub.com verifies the identity of the requester to prevent abuse.
7. Retention Periods
- Personal data is deleted after 30 days, unless legal retention obligations apply
- Reports are anonymized after 12 months
8. Special Notes for Target Countries
USA (CCPA):
Opt-Out from Sale of Personal Information via office@turmitus.tech
Canada (PIPEDA):
Reporting of data breaches to authorities
Australia:
Notifiable Data Breaches (NDB) Scheme
UK:
Compliance with UK GDPR and Data Protection Act 2018
9. Changes to this Privacy Policy
We reserve the right to adjust this privacy policy to reflect changed legal requirements or changes to our service.