Privacy policy

This is a draft. The final privacy policy will be reviewed by counsel before public launch.

Controller

Datargo GmbH, contact details on the imprint page.

What this website collects

This marketing website (www.nextpki.com) is statically hosted and does not set cookies.

We use no third-party analytics and no cross-site tracking - no Google Analytics, no third-party trackers, no cookies. Reach is measured with Umami, which we host ourselves; see the section below.

Server-side, our hosting provider logs IP addresses for security and abuse prevention. Logs are rotated after 14 days.

Reach measurement with Umami

To understand which pages are read and where visitors come from, we use the open-source software Umami, which we run ourselves on a server in the European Union (analytics.datargo.com). No third parties are involved. Your browser loads a small measurement script from that server. No cookies are set and no information is stored on or read from your device; recognising you across websites is not possible.

Collected are the page requested (address and title), the referrer, browser and operating system type, screen size, language, and the approximate location (country, region, city) derived from the IP address. The IP address itself is used only transiently, together with a secret and regularly changing salt, to form a visitor hash and is not stored. This does not allow us to identify you. The statistics are deleted after 13 months.

The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is measuring the reach of our website without using third-party tracking services. The browser setting “Do Not Track” is respected; in that case no measurement takes place. You may object to this processing at any time under Art. 21 GDPR, for example by enabling “Do Not Track” in your browser or by writing to us (contact details on the imprint page).

When you use the request form

The request form on /request-access/ sends what you enter (name, e-mail address, company, the figures about your certificate estate and your message) to our own support system, the Datargo CRM, which Datargo GmbH operates on servers in the European Union (api.crm.datargo.com). No third party is involved. The page loads a small script from that server to submit the form; it sets no cookies and no information is stored on your device. An invisible honeypot field and a rate limit protect the form against automated submissions.

We use the data to answer your request and to set up your account. Legal basis: Art. 6(1)(b) GDPR (steps prior to entering into a contract) and Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries). We delete requests two years after the last reply unless you have become a customer.

When you email us

If you contact us by email, we retain the message and your email address to reply and follow up. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries). We delete enquiry threads two years after the last reply unless you have become a customer.

Your rights

Under the GDPR you have the right to access, correct, delete, and port your personal data, and to object to processing. Write to us using the contact details on the imprint page.

The supervisory authority for Datargo GmbH is [Landesdatenschutzbeauftragter to be filled in].