Privacy Notice

This notice explains what personal data I process when you use automatics.dev, why I process it, and what you can ask me to do about it. The German Datenschutzerklärung is the version written for German law; the processing it describes is the same.

Who is responsible

The controller for this website is Mircea Preotu, Düsseldorf, Germany. Email hi@automatics.dev, phone +49 156 79819490.

The postal address and full provider details are in the Impressum. For any question about your data, write to hi@automatics.dev.

Hosting and access data

The site is a set of static files served from Amazon S3 and CloudFront, operated by Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg. Delivering a page means processing technical access data: IP address, time of the request, the page requested, browser and device information, and the referring URL.

Legal basis: Art. 6(1)(f) GDPR, my legitimate interest in delivering the site securely and reliably. A data processing agreement is in place with AWS.

Contact form and audit request form

The contact form on /contact collects your email address and, if you give them, your name and the message you write. The technical audit form collects the website address you want audited, your email address, and an optional company name.

Submissions go to an AWS Lambda function in the eu-central-1 (Frankfurt) region, which forwards them by email through Amazon SNS to hi@automatics.dev. I use this data to answer you and, if it leads to one, to scope an engagement.

Legal basis: Art. 6(1)(b) GDPR where the exchange is about a possible contract, otherwise Art. 6(1)(f) GDPR. I keep enquiries until they are closed and any statutory retention period has run out.

Spam protection (Google reCAPTCHA v3)

Both forms are protected by reCAPTCHA v3 from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. reCAPTCHA analyses how the form is used to tell people from bots, which involves sending your IP address and interaction data to Google.

Legal basis: Art. 6(1)(f) GDPR, my legitimate interest in keeping the forms usable. Google's privacy policy is at https://policies.google.com/privacy.

Analytics

I load Google Analytics through Google Tag Manager (Google Ireland Limited) to see which pages get used. It records page views, time on page, operating system, and rough origin, using cookies or comparable techniques to recognise a returning browser.

Legal basis: your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG. You can withdraw consent at any time, with effect for the future.

Booking a call

The Book a free call button opens the appointment scheduling feature of Google Calendar (Google Ireland Limited). What you enter there, such as your name, email address, and the slot you pick, goes to Google and is processed there.

Legal basis: Art. 6(1)(f) GDPR for organising appointments, and Art. 6(1)(b) GDPR where the appointment is a step towards a contract.

Transfers outside the EU

AWS and Google can process data in the United States. Those transfers rest on the EU Standard Contractual Clauses and, where the provider is certified, the EU-US Data Privacy Framework.

Your rights

Under the GDPR you can ask me for a copy of the personal data I hold about you and where it came from, have it corrected or deleted, have its processing restricted, receive it in a machine-readable format, and object to processing based on legitimate interest. Where processing rests on consent, you can withdraw that consent at any time without affecting what was lawful before.

Write to hi@automatics.dev and I will answer. You can also complain to a supervisory authority, for me the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen in Düsseldorf.

Encryption

The site is served over HTTPS with TLS, so what you send through the forms cannot be read in transit by third parties.