Controller
The controller is Hermes Khachatryan, a sole proprietor trading as Aspoot, Gabelsbergerstr. 1, 73033 Göppingen, Germany. Contact for privacy requests: info@aspoot.de.
Hosting, security and server logs
This website is hosted by Vercel Inc. Requests involve technical connection data, including IP address, time, requested address, referrer, browser and operating system information. These data support page delivery, troubleshooting and abuse prevention. Vercel Firewall counters are also used to limit form requests.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is reliable, secure operation and protection against automated abuse. Technical logs and counters are processed for the period needed for operation, security and troubleshooting. Records relevant to a specific security incident may be needed until it is resolved and for establishing or defending legal claims.
Enquiries and website checks
For enquiries we process your name, email address, optional company and requested service, and your message. Website checks also include the website address you provide and any optional context. We process your language and acknowledgment of the privacy notice. For direct email correspondence we process the information you send and the email metadata required for delivery.
We use these data to respond, prepare a business relationship and, where applicable, perform a contract. Article 6(1)(b) GDPR applies to requests from a prospective contracting party. Other business enquiries, including correspondence with company employees, are processed under Article 6(1)(f) GDPR on the basis of our legitimate interest in business communication. Acknowledging the privacy notice is not consent to advertising or a separate legal basis.
Providing data is voluntary. Without your name, a reachable email address and the required details we cannot process the form. Company, service and additional context are optional. Please do not send passwords, payment details or particularly sensitive personal data.
Enquiries and correspondence are retained while needed to handle the request and any resulting business relationship. Further retention is limited to applicable legal obligations or the necessary establishment or defence of legal claims. The period depends on the correspondence contents, closure of the matter and applicable retention obligations and limitation periods.
Email delivery and recipients
Form submissions are sent server-side through Resend (Plus Five Five, Inc.) to our mailbox. Resend processes the form contents and delivery information. Our Microsoft 365 mailbox is provided through GoDaddy, where incoming messages are stored for handling. Vercel, Resend and providers involved in mailbox delivery receive the data necessary for hosting, security or email communication. These forms do not subscribe you to newsletters or advertising.
Processing outside the EEA
Vercel, Resend, Microsoft and the email infrastructure provided through GoDaddy may process data outside the European Economic Area, particularly in the United States. The providers’ data processing terms contain provisions on subprocessors and international transfers, including EU Standard Contractual Clauses for transfers covered by those clauses. Relevant provider terms are linked below. You can request information about the safeguards applicable to your data and a copy at info@aspoot.de.
Fonts and cookies
Fonts and images are served by this website. Fonts are not fetched from Google Fonts. This website sets no cookies and uses no advertising trackers. Visitor analytics uses neither cookies nor local browser storage.
Visitor analytics with Vercel Web Analytics
We use Vercel Web Analytics, provided by Vercel Inc., to understand how the website is used and to improve it. When a page is viewed, the page address, referrer, browser, operating system, device type and the country derived from the IP address are recorded. Visits are not recognised through cookies but through a hash of request characteristics that is generated anew each day and discarded after 24 hours. The IP address is not stored for this purpose, and no profiles are built across websites.
We also record a few events without any form contents: clicks on links to the contact or website check page, starting to submit those forms, and successful submissions, each with the address of the page where the event happened. Names, email addresses, messages or submitted website addresses are not sent to analytics.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is a data-minimising evaluation of website use to improve content and enquiry paths. Results are only evaluated in aggregate. If your browser sends a Do Not Track signal, analytics is not loaded. You can also object to this processing at any time at info@aspoot.de.
Your rights and complaints
Subject to the legal requirements, you have rights of access, rectification, erasure, restriction and data portability. You may object to processing based on Article 6(1)(f) GDPR on grounds relating to your particular situation. Where other processing relies on consent, that consent can be withdrawn at any time for the future.
Contact info@aspoot.de to exercise your rights. You may also complain to a data protection supervisory authority. The authority for our location is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg: www.baden-wuerttemberg.datenschutz.de. We do not use automated decision-making, including profiling, within Article 22 GDPR.