Privacy policy

Controller

The controller for processing on this website is Blue Pepper S.L., represented by Hanns-Christopher Deppe (address above). For any data protection question you can reach us at info@doxario.com.

Scope

This policy applies to the public website doxario.com. The processing of personal data inside the Doxario application, for example when agencies identify buyers and owners, is governed by separate data protection information and is not covered here.

Hosting and server log files

The website is hosted by Vercel Inc. (USA). Server-side functions run in the Frankfurt am Main (EU) region; static content is delivered by the provider's delivery network. When you visit, the server processes technically necessary data: your IP address, date and time, the page requested, and information about your browser and operating system.

The purpose is to deliver the website and keep it stable and secure. The legal basis is our legitimate interest in a secure and working website (Art. 6(1)(f) GDPR).

Because Vercel Inc. is based in the USA, access from a third country cannot be ruled out. We safeguard the transfer with guarantees under Art. 46 GDPR, in particular EU standard contractual clauses.

Audience measurement with Plausible

We measure use of the website with Plausible Analytics (Plausible Insights OÜ, Estonia). Plausible does not set cookies and, according to the provider, does not build profiles of individual visitors. Analysis is aggregated, for example by page views, referring page, country, browser and device type.

We also count clicks on our demo buttons and the submission of the demo form. Your name and email address do not reach Plausible.

The purpose is to improve the website. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR). You can object to this processing at any time; see “Your rights”.

Demo request

If you submit the demo form, we process your name, your email address, the name of your agency and the language of the page on which you made the request. The purpose is to answer your request. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures at your request) and, additionally, point (f).

The details are delivered to our mailbox through the email provider Resend (Resend Inc., USA). Here too, access from a third country cannot be ruled out; we safeguard the transfer with guarantees under Art. 46 GDPR.

We do not use the details for advertising, do not pass them on to third parties and do not send a newsletter. A hidden form field serves as spam protection and does not collect additional data about you.

We delete the request once it has been handled, unless a statutory retention obligation or an existing business relationship prevents deletion.

Contact by email

If you write to us, we process your details to handle your enquiry (Art. 6(1)(b) or (f) GDPR). We delete them when they are no longer needed for that purpose and no retention obligation applies.

Cookies and fonts

On the public website we do not set cookies and do not store information on your device that would require consent. The fonts used are served from our own server; no connection to Google servers is made when a page loads.

Recipients

Your data is received only by the following service providers, to the extent necessary for the respective purpose:

• Vercel Inc. — hosting of the website
• Plausible Insights OÜ — audience measurement
• Resend Inc. — email delivery of demo requests

Data processing agreements under Art. 28 GDPR are in place with these providers.

Your rights

You have the right to:

• access your data (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• object to processing based on legitimate interests (Art. 21 GDPR)
• withdraw consent you have given, with effect for the future (Art. 7(3) GDPR)

An email to info@doxario.com is enough to exercise them.

You may also lodge a complaint with a supervisory authority. In Spain this is the Agencia Española de Protección de Datos (AEPD, www.aepd.es); you may also contact the authority where you habitually reside.

No automated decision-making

No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place on this website.

Changes

We will update this policy when the website or the law changes.