Privacy Policy
Last updated: September 2026
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Sovarion Software GmbH, Rosenstraße 4, 35619 Braunfels, Germany
E-mail: info@reqcompass.com
2. The essentials at a glance
This website is deliberately designed to be data-minimal: we do not use cookies, analytics, tracking or marketing services, and we do not transfer data to third countries outside the EU/EEA. Fonts are served exclusively from our own server (self-hosted); no connection to Google or other font providers is established. Personal data is only processed for the technical operation of the website (server log data), when you contact us by e-mail, and when you use our contact form or the free potential analysis questionnaire.
3. Hosting and server log data
This website is operated by an external hosting provider with servers located in the EU, with whom a data processing agreement pursuant to Art. 28 GDPR is in place (recipient category: hosting provider; we will name the specific provider on request). When you access the website, the server automatically processes technical access data: IP address, date and time of access, page accessed, referrer URL, browser type and operating system. This data is required to deliver the website, ensure operational security and defend against attacks; the legal basis is our legitimate interest in the secure operation of the website (Art. 6(1)(f) GDPR). Log data is not merged with other data sources and is deleted or anonymised after 30 days at the latest.
4. Locally hosted fonts
For a consistent appearance we use fonts (Archivo, Source Sans 3, IBM Plex Mono) licensed under the SIL Open Font License. The font files are stored on and served from our own web server. No connection to Google (Google Fonts) or other third-party servers is established, and no personal data is transmitted to third parties as a result.
5. Contact by e-mail and contact form
If you contact us by e-mail or via the contact form, we process the data you provide (name, e-mail address, company, request, content of your message and voluntary details such as a phone number or a partner code) to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR where the enquiry is aimed at entering into a contract (e.g. trial, quote, demo), and otherwise our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR). Transmission is TLS-encrypted; form contents are delivered to us by e-mail and are not permanently stored on the web server. We delete the data once it is no longer required, unless statutory retention obligations apply. If you send us documents as part of a trial, the contractual arrangements agreed for this purpose, including confidentiality and data processing terms, apply in addition.
6. "Free potential analysis" questionnaire
On the "Potential analysis" page you can voluntarily provide information about your company and your review process (contact details and answers regarding industry, company size, documents, processes, effort and goals). We process this information solely to prepare your individual, non-binding assessment and to deliver the result via the channel you have chosen. The legal basis is the performance of pre-contractual measures at your request (Art. 6(1)(b) GDPR). We treat your answers confidentially, do not pass them on to third parties and delete them once they are no longer required for preparing and following up on the assessment, at the latest after the process is completed plus any statutory retention periods.
7. Newsletter (consent only)
In the potential analysis questionnaire you can additionally consent to receiving our newsletter with product news and practical tips. The legal basis for sending it is your consent (Art. 6(1)(a) GDPR); without the consent box ticked, you will not receive a newsletter. You can withdraw your consent at any time with effect for the future – via the unsubscribe link in every newsletter e-mail or informally by e-mail to info@reqcompass.com. To document your consent, we store the time of your registration. Should we use a service provider for dispatch in the future, this will be based on a data processing agreement with processing in the EU; we will update this privacy policy accordingly.
8. Form spam protection
To protect our forms against automated submissions, we use a data-minimal method without third-party providers: a control field invisible to humans ("honeypot") and a check of the time taken to complete the form. No cookies are set, no user behaviour is analysed and no data is transmitted to third parties. The legal basis is our legitimate interest in preventing abusive submissions (Art. 6(1)(f) GDPR).
9. Encryption
This website uses TLS encryption (recognisable by "https://" in the address bar). Data you transmit to us cannot be read by third parties.
10. Your rights
As a data subject you have the rights under Art. 15 to 21 GDPR: access to the data stored about you, rectification of inaccurate data, erasure, restriction of processing and data portability. You may withdraw any consent you have given (e.g. for the newsletter) at any time with effect for the future (Art. 7(3) GDPR). You may object at any time, on grounds relating to your particular situation, to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR). To exercise your rights, an informal e-mail to info@reqcompass.com is sufficient.
You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Hessian Commissioner for Data Protection and Freedom of Information (HBDI), Wiesbaden, Germany.
11. No automated decision-making; no obligation to provide data
No automated decision-making, including profiling, takes place on this website; the potential analysis questionnaire is also evaluated by us personally. The provision of personal data is neither legally nor contractually required; however, the website cannot be delivered without the technical data mentioned in section 3, and we cannot respond to enquiries or prepare assessments without your contact details.
12. Changes to this privacy policy
We will amend this privacy policy as soon as data processing on this website changes – for example, if analytics services (in that case with prior consent) or a newsletter dispatch provider are introduced in the future. The current version published here applies in each case.