Privacy

1. Controller

The party responsible for data processing on this website is the operator of PeptideJury named in the imprint. For privacy questions, contact us at support@peptidejury.com.

2. Overview of processing

PeptideJury is a reputation and information platform that combines publicly available signals about vendors with experience reports submitted by registered users. This notice explains which personal data we process, for what purpose, and on what legal basis under the General Data Protection Regulation (GDPR).

3. Providing the website and server log files

When you visit the website, we automatically process technical data (including IP address, date and time of the request, page requested, browser used, and referrer URL) to technically deliver the site and to safeguard system security. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure, functioning operation).

4. Cookies and local storage

We use technically necessary cookies and local browser storage, for example to remember your selected language and an existing sign-in session. This storage is necessary to provide the feature you have explicitly requested (Art. 6(1)(b) or (f) GDPR). See our cookie notice for details.

5. Registration and user account

Certain features (such as submitting an experience report, favorites, and extended vendor detail) require registration. We collect first and last name, chosen username, email address, country, and a password (stored encrypted). The email address is used to confirm the account. The legal basis is Art. 6(1)(b) GDPR (performance of the usage contract). Your username may be publicly visible next to experience reports you submit; your name, email address, and country stay private and are never published.

6. Experience reports and community submissions

When you report an experience with a vendor, we process the text you enter, the rating you choose (positive/neutral/negative), the category, and any optional platform and product details. Reports are reviewed by our moderation team before publication and may factor into the affected vendor’s trust score. The legal basis is Art. 6(1)(b) GDPR (performance of the usage contract) and, to the extent we have a legitimate interest in reviewing and preventing abusive submissions, Art. 6(1)(f) GDPR.

7. Automated analysis of publicly available sources

To determine the trust score, we also analyze publicly available online sources (such as forums, social networks, and review platforms) using automated tools supported by AI systems. This may include personal information about vendors or their representatives to the extent it is publicly available in connection with their business activity. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in providing reliable, evidence-based reputation information for consumers). Affected vendors may object to this processing as described in the “Your rights” section, or request a correction via our entry dispute form.

8. Contacting us and support

If you contact us by email or contact form, we process the information you provide (including your contact details and the content of your message) to handle your request. The legal basis is Art. 6(1)(b) or (f) GDPR.

9. Recipients, processors, and transfers outside the EU

We work with carefully selected service providers (for example for hosting, sending emails, and AI-assisted text analysis) who act on our behalf and strictly under our instructions (data processing under Art. 28 GDPR). Where individual providers process data outside the EU/EEA, we ensure an adequate level of data protection through appropriate safeguards (such as EU Standard Contractual Clauses).

10. Retention period

We store personal data only for as long as necessary for the respective purpose or as required by law. Account data is retained until the account is deleted; rejected experience reports and the review records they generated are permanently deleted after a reasonable traceability period (generally 30 days after rejection).

11. Your rights

Under the GDPR you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object to processing based on Art. 6(1)(f) GDPR (Art. 21). Any consent you have given can be withdrawn at any time with future effect. To exercise your rights, an informal message to support@peptidejury.com is sufficient.

12. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence, place of work, or the place of the alleged infringement.

13. Data security

We use technical and organizational measures to protect your data against accidental or intentional manipulation, loss, destruction, or unauthorized access, including encryption in transit (TLS) and when storing passwords.

14. Changes to this notice

We update this privacy notice whenever the legal situation or our data processing changes. The version available on this page at the time of your visit applies.

Last updated: September 2026