Privacy Policy

We take the protection of your personal data seriously. This privacy policy explains how personal data is processed when you visit our website or contact us.

1. Controller

2. Hosting

This website is hosted by HOSTINGER, UAB, Švitrigailos str. 34, LT-03230 Vilnius, Lithuania. When you visit our website, the hosting provider collects server log files including your IP address, browser type, date and time of access, and the pages visited. This data is processed on the basis of our legitimate interest in providing a secure and functional website (Art. 6(1)(f) GDPR). The server used for this website is located in the United States; what that means for your data is set out in section 7. Server log files are kept only for as long as they are needed to operate the site securely and to investigate faults or attacks, and are then deleted automatically; we do not evaluate them for any other purpose and do not merge them with other data.

3. Contact form

Our contact form does not transmit anything to us. It composes a message in your own email program, pre-filled with what you typed; nothing is sent until you press send there. We therefore receive your inquiry as an ordinary email, and the data we hold is whatever your message contains — typically your name, your email address, your company if you gave one, and your description of your project.

We process this data solely to handle your inquiry. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (our legitimate interest in responding to inquiries). Your data is deleted once the inquiry has been fully handled, unless we are legally required to retain it.

Providing this data is entirely voluntary: you are under no statutory or contractual obligation to supply it, and doing so is not a condition of any contract. However, we need your email address and your message in order to reply — without them we cannot respond. The company field is optional and can be left blank.

4. Cookies

This website sets no cookies. It stores nothing on your device — no cookies, no local storage, no session storage, no device fingerprinting. The only thing ever read from your device is the opt-out flag described in the next section, and only in order to honour it. Because nothing is stored on your terminal equipment, no consent under § 25 TDDDG or Art. 6(1)(a) GDPR is required, and no cookie banner is shown.

5. Web analytics

We use Umami, an open-source analytics tool that we host ourselves on our own server. It is not Google Analytics and it is not a third-party service: the measurement data goes only to our own instance at stats.simpletool.pro. No advertising network, data broker or analytics company receives anything.

Umami records aggregate reach figures only: the page visited, the referring page, browser type and version, operating system, approximate screen size, language setting, and a country derived from the IP address. Your IP address itself is neither stored nor logged, no cookie is set, no identifier is written to your device, and no profile is built. Visits cannot be traced back to you, and we cannot follow you across other websites.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is to understand which pages are actually useful and to detect faults, using the least intrusive method available; we consider this proportionate because no data identifying you personally is retained.

Objecting is easy. The script honours your browser's "Do Not Track" setting: if you enable it, nothing is measured at all. Independently of that, you have the right to object at any time under Art. 21(1) GDPR — see section 10 — and an informal message to info@speecon.com is enough.

6. Recipients of your data

Personal data is disclosed only to the following categories of recipient, each acting exclusively on our behalf and on our instructions as a processor under a data processing agreement pursuant to Art. 28 GDPR:

• Our hosting provider, HOSTINGER, UAB, Švitrigailos str. 34, LT-03230 Vilnius, Lithuania, which serves this website and keeps the server logs described in section 2.
• Our email provider, Cloud86 B.V., Netherlands, which transports and stores the messages you send to us.

Beyond that we do not disclose your data to any third party. We do not sell, rent, or otherwise share personal data, and we use no advertising networks, no third-party analytics services and no third-party content delivery networks. The analytics described in section 5 run on our own server, so no external analytics provider is involved.

7. International transfers

The server hosting this website is located in the United States, as is the server running our own analytics instance described in section 5. When you visit the site, the technical connection data described in section 2 — including your IP address — is therefore transferred to a third country within the meaning of Art. 44 et seq. GDPR. The analytics requests reach the same jurisdiction, although the IP address is discarded there rather than stored.

Our hosting provider, HOSTINGER, UAB, Švitrigailos str. 34, LT-03230 Vilnius, Lithuania, is established in the European Union. The transfer to its US infrastructure is safeguarded by the European Commission's Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR, which our provider has concluded with us and with its own sub-processors. You may request a copy of these safeguards from us at any time at info@speecon.com.

You should be aware that United States law may permit public authorities to access data held by providers subject to its jurisdiction, and that the level of protection there is not equivalent in every respect to that under the GDPR. Enforcing your rights against a recipient in a third country may be more difficult than within the EU.

Email you send to us is handled separately, by Cloud86 B.V., Netherlands, and is not affected by the above. All website assets — fonts, scripts, images — are served from our own hosting infrastructure. The only other host your browser contacts is our own analytics server described in section 5.

8. Automated decision-making

We do not use automated decision-making, including profiling, within the meaning of Art. 22(1) and (4) GDPR (Art. 13(2)(f) GDPR). Your data is not subjected to any automated evaluation, scoring, or profiling, and no decision affecting you is taken solely on the basis of automated processing.

9. Your rights

Under the GDPR, you have the right to:

• Request access to your personal data (Art. 15 GDPR)
• Request rectification of inaccurate data (Art. 16 GDPR)
• Request erasure of your data (Art. 17 GDPR)
• Request restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)

To exercise these rights, please contact us at info@speecon.com. Exercising them is free of charge, and we will respond within one month of receiving your request.

10. Right to object

Where we process your personal data on the basis of our legitimate interests (Art. 6(1)(f) GDPR), you have the right to object at any time to that processing on grounds relating to your particular situation (Art. 21(1) GDPR). On this website, that applies to the server log files described in section 2, the analytics described in section 5, and the handling of inquiries described in section 3.

If you object, we will no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or unless the processing is necessary for the establishment, exercise, or defence of legal claims. An informal message to info@speecon.com is sufficient to exercise this right; no particular form is required.

11. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates the GDPR (Art. 77 GDPR). You may contact any supervisory authority, in particular the authority in the EU Member State where you live, work, or where the alleged infringement took place.

The authority competent for us is:

Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Lautenschlagerstraße 20, 70173 Stuttgart, Germany
https://www.baden-wuerttemberg.datenschutz.de

12. Changes to this policy

We may update this privacy policy from time to time. The current version is always available on this page, and the date at the top shows when it was last revised.