About
Privacy: CSRD Reporting
How csrdreporting.net handles your data: no analytics or advertising tools, form data kept 24 months, hosting by a processor and how to reach us.
Summary
This notice explains which personal data csrdreporting.net collects, why, how long it is kept and how to reach us about it, under the General Data Protection Regulation, Regulation (EU) 2016/679.
The site is an independent, provider-neutral reference where the Corporate Sustainability Reporting Directive (CSRD) is explained together with the voluntary standard (VS, formerly VSME).
The short version: no analytics or advertising tools run on any page, form data is kept for 24 months, and a newsletter subscription is kept until you unsubscribe.
Who Is Responsible for Your Data
csrdreporting.net, published under the brand CSRD Reporting, is responsible for the personal data described on this page, and every request about it goes to editorial@csrdreporting.net. The site is run by its editorial team, the CSRD Reporting Editorial Team, which also answers requests about personal data.
One address serves every privacy request, the same address that receives corrections and editorial questions. The page about who publishes CSRD Reporting sets out who publishes the site.
What We Collect and Why
csrdreporting.net collects personal data in three situations only: when you send a provider match request, when you subscribe to the newsletter and when you email the editorial team; reading pages involves no analytics or advertising tools. Table 1 sets out each situation with its data, its purpose and how long the data is kept.
| Situation | Data | Purpose | Kept |
|---|---|---|---|
| Reading pages | No analytics or advertising data | Delivering the page through the hosting processor | n/a |
| Provider match request | Email, company and project details | Forwarding the request to independent providers; how requests stay independent under our editorial policy | 24 months |
| Newsletter | Email address | Sending the newsletter | Until you unsubscribe |
| Email to the editorial team | Your message and email address | Answering it | No fixed period in this notice |
Reading Pages: No Analytics or Advertising Tools
No analytics service and no advertising vendor runs on csrdreporting.net, and no reading data is passed to an analytics or advertising company.
Pages reach your browser through the hosting processor of csrdreporting.net, which delivers them on the publisher's behalf. The hosting section below names that processor and its role.
Provider Match Requests
A provider match request is a form in which you describe your reporting project, and csrdreporting.net forwards it to independent CSRD and VSME providers. The form asks for two groups of data, listed below.
- Contact details: your email address and your company.
- The project: your situation, the service type, the first financial year if known, the Member State or States concerned, the employee band, the turnover band, the timing and a free description.
The request is forwarded to independent providers, such as reporting software providers, double-materiality and reporting consultants, assurance providers and training providers. The rule that applies to every request reads: "Requests are forwarded to independent providers. No provider pays to be listed or ranked here." Readers who want to describe their own project can send a provider match request on the CSRD compliance page.
csrdreporting.net keeps a provider match request for 24 months.
The Newsletter
The newsletter uses your email address only to send the newsletter, and your subscription is kept until you unsubscribe. The sign-up form falls under the same form-data rule as a provider match request, 24 months, except that the subscription itself runs until you unsubscribe.
Emails to the Editorial Team
An email to editorial@csrdreporting.net, for example a correction or a question about this notice, is read by the editorial team and used only to answer it. The email address and the message serve that answer and no other purpose.
How Long We Keep Your Data
csrdreporting.net keeps form data from provider match requests and newsletter sign-ups for 24 months, and keeps a newsletter subscription until you unsubscribe. The data is deleted when its period ends. Table 2 lists the three periods.
| Data | Period |
|---|---|
| Provider match form data | 24 months |
| Newsletter sign-up form data | 24 months |
| Newsletter subscription | Until you unsubscribe |
Hosting and Other Processors
csrdreporting.net is hosted on Cloudflare, which acts as a processor: it delivers the pages on the publisher's behalf. Cloudflare is the only company this notice names.
No analytics or advertising vendor receives data from csrdreporting.net.
Your Rights and How to Contact Us
You can send any request about your personal data on csrdreporting.net to editorial@csrdreporting.net, and you can leave the newsletter at any point by unsubscribing. The publisher answers requests under Regulation (EU) 2016/679, whose Articles 15 to 22 set out the rights of the person the data concerns, listed below.
- Article 15: the right of access to your data.
- Article 16: the right to rectification.
- Article 17: the right to erasure.
- Article 18: the right to restriction of processing.
- Article 19: the notification obligation.
- Article 20: the right to data portability.
- Article 21: the right to object.
- Article 22: rights on automated decision-making.
Consent may be withdrawn at any time under Article 7(3), without affecting the lawfulness of processing before withdrawal, and withdrawing must be as easy as giving consent. Article 12(3) sets the reply period: "without undue delay and in any event within one month of receipt of the request", extendable by two further months where necessary, with information on the extension within one month. Article 77 gives the right to lodge a complaint with a supervisory authority, in particular in the Member State of habitual residence, place of work or place of the alleged infringement.
Every privacy request uses the same address. Other questions to the editorial team go through contact CSRD Reporting.
Questions about your data: editorial@csrdreporting.net
Changes to This Notice
This notice was last updated on 29 October 2026, and any change to what csrdreporting.net collects or how long it keeps it is published on this page with a new date.
What This Notice Does Not Cover
This notice covers csrdreporting.net only, not the providers that receive a forwarded request and not the official websites the pages link to. It describes what the site itself collects and keeps.
Links to Official Sources and Other Websites
The pages link to EUR-Lex, EFRAG, the European Commission and national authorities, and those websites apply their own privacy notices. Commercial websites are linked nofollow under the editorial policy, which this notice does not repeat.