Information about data protection
The GDPR (General Data Protection Regulation) was adopted by the European Parliament in April 2016. It officially entered into force on May 25, 2018, and applies to all companies – without exception – that use the personal data of European citizens.
On this page, you can find out how Varify handles personal data.
Data protection comes first for us
Company headquartered & hosted in Germany
Varify GmbH is headquartered in Grünwald near Munich. Hosting takes place on AWS servers located in Germany.
Privacy first
Apart from the IP address, Varify.io® does not process any personal data. Experiment participants are not tagged with personal IDs.
No cookies
As a matter of principle, no cookies are set. To ensure that test participants can reliably be assigned again to the variation they have already seen, Varify.io® uses Local Storage or Session Storage. This can be configured in the application.
Data Processing Agreement (DPA)
Even though Varify.io® itself does not store any data, AWS is used for hosting and Cloudflare for the stable delivery of the variations as sub-processors. Both are technically necessary. Under the GDPR, data is already processed when the IP address is transmitted. Accordingly, Varify.io® provides a data processing agreement, including the annex of the technical and organizational measures (TOMs) taken, for download.