1. Scope
This policy covers the website at vinculixos.com (the “website”). It does not cover the VinculixOS software, which is installed and operated by each client on their own infrastructure. Personal data processed inside a client’s installation is processed by that client, under that client’s own policies, and never reaches us.
2. Who is responsible
The controller for the processing described here, within the meaning of the EU General Data Protection Regulation (GDPR), is the operator of the website identified in the legal notice. You can reach us about anything in this policy at contact@vinculixos.com.
3. Hosting and server logs
The website is a static site hosted by Vercel Inc., which acts as our processor. To deliver pages and protect the service against abuse, Vercel’s infrastructure necessarily processes technical data for each request, such as your IP address, the page requested, the time of the request, and your browser’s user agent.
- Purpose: delivering the website securely and reliably.
- Legal basis: our legitimate interest in operating a secure website (Article 6(1)(f) GDPR).
- Retention: request logs are kept by Vercel for a limited period under its own retention schedule and are not used by us to identify visitors.
4. Visitor statistics
We use Vercel Web Analytics to count page views in aggregate, so we know which pages are read. It sets no cookies and stores nothing on your device. Instead of a cookie, a visitor is recognised for the duration of a visit by a hash derived from the incoming request, and that hash is discarded after 24 hours. We cannot use it to identify you, and it is not used to follow you across other websites.
For each page view, the following may be recorded:
- the time of the page view, the page address and the referring page;
- an approximate location (country, region, city) derived from the request;
- your operating system, browser and their versions, and device type (desktop, mobile, tablet).
- Purpose: understanding, in aggregate, how the website is used so that we can improve it.
- Legal basis: our legitimate interest in measuring the reach of our website without tracking individuals (Article 6(1)(f) GDPR).
- Your choice: you can object at any time by writing to us. Blocking JavaScript, or using a content blocker, also prevents the statistics from being sent.
5. When you email us
The website has no forms. If you write to us, we process the content of your message, your email address and any details you choose to include, in order to reply.
- Legal basis: taking steps at your request before entering into a contract (Article 6(1)(b) GDPR) where you enquire about our product; otherwise our legitimate interest in answering correspondence (Article 6(1)(f) GDPR).
- Retention: as long as needed to deal with your enquiry and any relationship that follows, and then only as long as the law requires.
- Recipients: our email service provider, which acts as our processor. We do not sell, rent or share your details for anyone else’s marketing.
6. What we do not use
- No cookies, of any kind. See our cookie statement.
- No advertising or cross-site tracking technology.
- No third-party fonts, scripts, embeds or social media plugins. Fonts are served from this website.
- Our profiles on X, GitHub and YouTube are reached through ordinary links. Nothing is loaded from those services until you follow a link, and from then on their own privacy policies apply.
- No automated decision-making or profiling.
7. International transfers
Vercel Inc. is established in the United States, and data processed for hosting and visitor statistics may be processed outside the European Economic Area. Such transfers rely on the safeguards set out in Vercel’s data processing addendum, including the European Commission’s Standard Contractual Clauses. You can ask us for more information about these safeguards.
The operator is based outside the European Economic Area. If you email us, your message and the personal data in it are therefore read and answered outside the European Economic Area. We send it to no one else, and we apply the protections described in this policy wherever it is processed.
8. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased;
- restrict how we process it;
- receive your data in a portable format;
- object to processing based on our legitimate interests.
To exercise any of these rights, write to contact@vinculixos.com. We will respond within one month. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state where you live or work.
9. Changes
We will update this policy when what the website does changes, for example if we add a contact form. The date at the top of this page shows when it last changed.