Privacy policy

Protecting your personal data matters to us. This policy explains which data is processed when you visit this website and what rights you have.

Controller

The controller for data processing on this website is the operator named in the imprint. For questions about data protection, contact us at office@ambertech.solutions.

Hosting and server log files

This website is hosted by Vercel Inc. (USA). When you visit the website, technically necessary data is processed, in particular your IP address, the date and time of access, the requested address, the referrer and information about your browser. This processing serves to deliver the website and keep it secure (Art. 6(1)(f) GDPR). We have concluded a data processing agreement with Vercel. Transfers to the USA are based on the provider’s certification under the EU-US Data Privacy Framework.

Contact form and email

When you contact us via the contact form or by email, we process the information you provide (name, company, email address, phone number, message and, where applicable, the selected event) in order to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract, and otherwise our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).

Messages sent through the contact form are delivered to our inbox via the email service Resend. We keep your enquiry for as long as necessary to handle it and delete it afterwards, unless statutory retention obligations apply.

To prevent messages from being sent in bulk, we limit the number of messages per visitor. For this, we keep a shortened hash of your IP address in memory for ten minutes; it is not stored. The legal basis is our legitimate interest in protecting the form against abuse (Art. 6(1)(f) GDPR).

Applications

If you apply to us via the contact form or by email, we process your details and documents in order to decide on a possible employment (Art. 6(1)(b) GDPR). If no employment results, we delete your data once the application process has ended, unless statutory deadlines require longer retention or you have agreed to us keeping it for future positions.

Domain check

In the domain check, you enter a domain and, if you like, a DKIM selector. Our server then queries public DNS records of this domain, such as SPF, DKIM and DMARC, and shows you the result. The queries go through the public DNS resolver of Quad9 (Quad9 Foundation, Zurich, Switzerland) and from there to the name servers responsible for the domain. Your IP address is not passed on. The domain is neither stored nor written to log files.

In addition, our server requests the home page of the website under this domain over HTTPS and HTTP, as well as the file /.well-known/security.txt, and evaluates the response, such as the certificate and security headers. The web server of the domain sees a request from our server, not your IP address. Content of the website is neither stored nor displayed, except for the checked headers and details from the security.txt.

To prevent abuse, we limit the number of checks per visitor. For this, we keep a shortened hash of your IP address in memory for a few minutes; it is not stored. The legal basis is our legitimate interest in offering the check securely (Art. 6(1)(f) GDPR).

Cookieless audience measurement

To understand how our website is used, we use Vercel Web Analytics. It does not set cookies or store any information on your device. It records the pages visited, the referring page, device type, operating system and browser (each with its version) and the approximate location derived from the IP address (country, region and city). Your browser removes any additions to the address, such as search terms, before sending. You are not tracked across websites: visits are counted using only a hash of the request data, which is discarded after 24 hours. The legal basis is our legitimate interest in designing the website according to its use (Art. 6(1)(f) GDPR). The provider is Vercel Inc. (see “Hosting and server log files”).

In the AI check and the CMDB check, your answers are evaluated exclusively in your browser and are neither transmitted nor stored. If you then click “Discuss your result with us”, your browser copies the result per area into the message in the contact form. To do so, it briefly keeps it in the session storage of this browser tab and deletes it when the form opens. It only reaches us when you send the form. Only the result reached (high, medium or low potential in the AI check; well set up, getting there or just starting out in the CMDB check) is counted, without any reference to you. In the domain check, too, we only count the overall result (well, partly or barely protected), not the domain checked.

We likewise count a few actions as events: submitting the contact form (only with the selected topic), failed attempts to send it (only with the type of error) as well as clicks on our phone number, email address and WhatsApp link and downloads of calendar entries (each with the page on which the click happened). Your contact details and the content of your message are not recorded.

Fonts are served directly from our server; no data is transferred to third parties such as Google Fonts.

External links

Our website contains links to external services, such as LinkedIn, app stores or our partners’ websites. Data is only transferred to these providers once you click the link. The respective provider is responsible for its own data processing.

Your rights

You have the right to access, rectification, erasure and restriction of processing of your data, the right to data portability and the right to object to processing. To exercise these rights, contact office@ambertech.solutions.

If you believe that the processing of your data violates data protection law, you can lodge a complaint with the Austrian Data Protection Authority (www.dsb.gv.at).