Privacy policy

Who is responsible

Obsidian UG (haftungsbeschränkt), Leopoldstr. 2-8, 32051 Herford, Germany, runs TheCompanyIndex.com and is responsible for the personal data handled here. Write to hello@thecompanyindex.com with any question about your data.

When you visit the site

Our servers log each request: your IP address, the time, the page, the referring page and your browser. We need these logs to deliver the site and to defend it against attacks (Art. 6 (1) (f) GDPR). They are deleted after 14 days at the latest.

The site is delivered through Cloudflare, Inc. (USA), which speeds it up and filters attacks. Cloudflare handles your IP address for this purpose and is certified under the EU-US Data Privacy Framework.

Google Analytics

We use Google Analytics 4 by Google Ireland Limited to see which pages are read and which help. Until you choose "Allow" in the bar at the bottom of the page, Google's tag runs without cookies. With your yes it sets its cookies (_ga and _ga_ followed by an ID) to recognize a returning browser (Art. 6 (1) (a) GDPR and § 25 (1) TDDDG). Google Analytics 4 does not store IP addresses. Google may process data in the USA; Google is certified under the EU-US Data Privacy Framework. You can change your choice at any time by clearing this site's data in your browser; the bar then asks again.

Your account

To add a company you create an account with your email address, a password and, if you like, your name, or you sign in with your Google account. We store a password only as a secure hash. With Google, Google Ireland Limited tells us your name, your email address, whether Google has confirmed that address, and an id for your Google account. We never see your Google password and receive nothing else from your Google account; you can remove our access in your Google account's settings at any time. We use this data to sign you in and to run your dashboard (Art. 6 (1) (b) GDPR) and keep it while the account exists. A cookie named tci_session keeps you signed in, and while you sign in with Google a second cookie, tci_google, holds that step for up to ten minutes. Both are needed for the service and hold no other information.

Your company's entry

What you write about the company (name, website, one-line and full description, section, founding year, country) is published on its page once approved. Your email address is never published. We send the company's domain, without anything about you, to Ahrefs Pte. Ltd. (Singapore) to read its public domain rating, which helps us review it. We keep entries and their history in our own systems, including our customer records, to review them, to answer questions about them and to write to you about your entry (Art. 6 (1) (b) and (f) GDPR).

The members' board

If you tick "Open to guest posts and intros", your company, your note and your email address are shown to other members who ticked the same box for their own live entry. You give this consent with the tick (Art. 6 (1) (a) GDPR) and withdraw it by removing the tick in your dashboard.

Where the data is kept

Our servers are rented from Contabo GmbH, Germany, and run in a data center in the United States, with a copy of the database in the European Union. Where data leaves the European Union, we rely on the safeguards the GDPR provides, such as the EU standard contractual clauses or the EU-US Data Privacy Framework.

Your rights

You may ask us what data we hold about you, have it corrected or deleted, restrict its use, receive it in a common format, and object to its use based on our legitimate interests (Art. 15 to 21 GDPR). You may withdraw a consent at any time, without effect on what happened before. You may also complain to a data protection authority, for example the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen.