Privacy

Controller

Hanseatic LifeScience Consulting, Grenzweg 45, 21244 Buchholz, Germany. Privacy questions: info@h-lsc.com.

What we process

• Account data: name, work email, organisation name and a password hash, to provide the service you signed up for (Art. 6(1)(b) GDPR).
• Evaluation content: criteria, weights, scores, comments and the documents you upload. This content belongs to your organisation.
• Vendor responses: what invited vendors enter through their private link, including the contact name and email you sent it to.
• Enquiries: what you write in the contact form, so we can answer it.
• Audit records: changes to an evaluation with actor, action and timestamp.

AI processing

When the AI tools are enabled, evaluation text — criteria, expectations, extracts from vendor documents and anonymised scores — is sent to a model provider for analysis. Names and email addresses are not part of that payload. On a private instance you choose the endpoint yourself.

Retention

Content stays for as long as your workspace exists. Demo workspaces are deleted in full after 24 hours. We delete your workspace on request.

Your rights

Access, rectification, erasure, restriction, portability and objection, and you may complain to a supervisory authority. Evaluations can be exported at any time as a decision pack and as CSV.

Cookies

One strictly necessary session cookie. No tracking and no advertising cookies. Language and theme are stored locally in your browser.

We also keep anonymous counts of visits to this site — how many pages were viewed and which links were used — with nothing that identifies who visited. These counts use no cookie, store no IP address, and are not tracking.