Privacy policy

Who is responsible

The controller for this website is [LEGAL ENTITY NAME], [REGISTERED ADDRESS] ("APTISOFT", "we"). You can reach us about anything in this policy at hello@mail.aptisoft.com.

Our representative in the European Union under Article 27 GDPR is [EU REPRESENTATIVE NAME AND ADDRESS].

Visiting the website

When you open a page, our hosting provider Vercel Inc. processes technical data your browser sends: IP address, date and time, the page requested, referrer, browser and operating system. This is needed to deliver the site and keep it secure. The legal basis is our legitimate interest in running a reliable website (Art. 6(1)(f) GDPR). Server logs are kept for a short period and then deleted.

We also use Vercel Web Analytics and Speed Insights to count page views and measure loading performance. These tools do not set cookies and do not identify individual visitors; they work with aggregated, anonymised data on the same legal basis.

Contact form, email and WhatsApp

If you use the contact form, we process the name, email address, optional phone number, the service you pick and your message, so we can answer your enquiry and, where relevant, prepare an offer (Art. 6(1)(b) GDPR). The form is delivered to us by email through our email provider.

To block spam, the form uses Cloudflare Turnstile by Cloudflare, Inc. Turnstile checks your browser for signs of automated abuse and processes technical data such as your IP address. The legal basis is our legitimate interest in protecting the form (Art. 6(1)(f) GDPR).

The WhatsApp button only opens WhatsApp with a message you wrote; nothing is sent until you press send in WhatsApp. From then on, WhatsApp (Meta Platforms Ireland Ltd.) processes the conversation under its own privacy policy.

We keep enquiries for as long as needed to handle them and any resulting project, and delete them after two years without further contact unless tax or commercial law requires us to keep them longer.

Google Analytics, only with your consent

If you click "Accept" in the cookie banner, we use Google Analytics 4 by Google Ireland Limited to understand how visitors use the site, such as which pages are viewed and where visits come from. Google Analytics sets cookies (_ga, _ga_*) and processes your shortened IP address, device and browser information, and your interactions with the site.

The legal basis is your consent (Art. 6(1)(a) GDPR and the ePrivacy rules on storing information on your device). If you click "Reject" or do nothing, Google Analytics is not loaded at all. You can change your choice at any time with the "Cookie settings" link in the footer; withdrawing consent does not affect processing that already happened.

Google may process data in the United States. Google is certified under the EU-U.S. Data Privacy Framework, and standard contractual clauses apply as an additional safeguard. Analytics data is retained for 14 months.

Cookies and local storage

Apart from the analytics cookies described above, we only store what is strictly needed for the site to work as you asked:

• aptisoft_consent (cookie, 6 months): remembers whether you accepted or rejected analytics.
• NEXT_LOCALE (cookie): remembers the language you picked.
• theme (local storage): remembers light or dark mode.

Who receives your data

We share personal data only with service providers that process it on our behalf under a data processing agreement: Vercel Inc. (hosting and cookieless analytics), Cloudflare, Inc. (spam protection), our email provider, and Google Ireland Limited (analytics, with your consent). Some of these providers are based in or use servers in the United States or other countries outside the EU. Transfers rely on adequacy decisions such as the EU-U.S. Data Privacy Framework or on standard contractual clauses.

We do not sell personal data or use it for automated decision-making.

Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you (Art. 15)
• have inaccurate data corrected (Art. 16)
• have your data deleted (Art. 17)
• restrict processing (Art. 18)
• receive your data in a portable format (Art. 20)
• object to processing based on legitimate interests (Art. 21)
• withdraw consent at any time, with effect for the future (Art. 7(3))
• lodge a complaint with a data protection supervisory authority, in particular in the EU country where you live or work (Art. 77)

Changes to this policy

We update this policy when our website or the services we use change. The date at the top shows the latest version. To exercise any of your rights, write to hello@mail.aptisoft.com.