Privacy.

1. Data controller

The data controller within the meaning of the GDPR is:

2. Overview

This website is designed to collect as little personal data as possible. We do not use analytics services, trackers, advertising networks, or social-media plugins. Fonts are served from our own origin; no third-party resources are loaded.

3. Hosting

This website is hosted by:

Servers are located within the European Union (Germany or Finland). A data processing agreement under Art. 28 GDPR is in place with the provider. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in reliable and secure delivery of the service). For details see Hetzner's privacy policy: hetzner.com/legal/privacy-policy.

4. Server log files

When you visit this website, the hosting provider automatically collects information in server log files that your browser transmits. This includes:

• IP address (shortened or anonymized where technically feasible)
• Date and time of the request
• Requested URL
• Referrer URL
• User-agent string of the browser

This data is not merged with other data sources. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in technical delivery and security of the website). Logs are deleted after a maximum of 14 days unless a security incident requires longer retention.

5. Cookies

This website does not set cookies and does not use comparable storage (e.g., local storage) for tracking or analytics. No consent banner is required.

6. Contact via email

If you contact us by email, your information (email address, message content, and any name you provide) is processed solely to handle your request. The legal basis is Art. 6(1)(b) GDPR where your inquiry concerns pre-contractual or contractual matters, otherwise Art. 6(1)(f) GDPR. Data is deleted once it is no longer required and no legal retention obligations apply.

7. International data transfers

The technical delivery of this website (hosting, server logs) takes place exclusively on servers inside the European Union. However, because the controller (ASISTO LLC) is based in the United States, administrative access to personal data from the US can occur (e.g. when reviewing email). Any such transfer to the US relies on the European Commission's adequacy decision regarding the EU-US Data Privacy Framework, or — where applicable — on Standard Contractual Clauses under Art. 46(2)(c) GDPR.

8. Your rights

Under the GDPR, you have the right to:

• Access to your stored data (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)

To exercise your rights, contact us at hello@asisto.io.

9. Right to lodge a complaint

Without prejudice to any other remedy, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your residence, place of work, or place of the alleged infringement.

10. TLS encryption

This site uses TLS encryption for security reasons. You can recognize an encrypted connection by the "https://" prefix in your browser's address bar.

11. Changes to this policy

We update this privacy policy whenever changes to our processing or legal requirements make it necessary. The version published on this page applies.