Controller and Contact
The data controller for the service is INNORMA, the sole-proprietor brand used to provide the service through www.innorma.eu.
For any questions regarding personal data processing, data rights, or compliance, please contact us at contact@innorma.eu.
Data We Process
We process the following categories of data depending on how you interact with our service:
- Contact requests: name, email, and message content.
- User registration: name, email, company name, password credentials, and account status.
- Formula workspace: formula composition, ingredient identifiers, use categories, chromatogram data, allergen profiles, supplier data, certificate settings, and generated report data.
- Uploaded import files: supplier PDFs, spreadsheets, extracted text or table data, parser outputs, material matching suggestions, review decisions, and accepted import rows.
- Billing (where applicable): subscription status, payment provider customer identifiers, and payment-related metadata supplied by the payment provider.
- Technical data: authentication cookies, security logs, language preference, cookie preference, and service usage events.
Purposes and Legal Basis
INNORMA processes data to answer requests, provide user accounts, operate formula workspaces, run IFRA checks and EU allergen reports, generate documents, provide support, protect security, and manage subscriptions where applicable.
The legal basis is the performance of the requested service or contractual relationship, legitimate interests in operating and protecting the service, legal obligations where applicable, and consent where required.
Cookies and Analytics
INNORMA uses strictly necessary cookies and local storage for login, security, language preference, cookie preference, and formula workspace continuity.
With user permission, INNORMA may use Google Analytics to understand aggregate product usage and improve the service. Analytics storage is optional and is not activated unless accepted in the cookie banner. INNORMA does not use advertising cookies.
Recipients and Service Providers
Personal data is not sold. Data may be processed by service providers needed to operate the website and service, including hosting, database, email, analytics with consent, payment processing and subscription management, document parsing or AI-assisted extraction providers when import features are used, and technical support providers. These providers must process data under appropriate legal or contractual safeguards and only for the service purposes for which they are used.
Retention
Personal data is kept only for as long as necessary to answer requests, provide the service, maintain the formula workspace, protect security, comply with legal obligations, or address contractual, accounting, tax, regulatory, or legal claims.
Your Rights
Depending on applicable law, data subjects may request access, rectification, deletion, restriction, objection, portability, withdrawal of consent where applicable, and rejection of automated individual decisions where applicable.
To exercise rights, contact contact@innorma.eu. INNORMA may request proof of identity or representation when reasonably necessary to process the request securely.