Privacy Policy

Controller

dunedive LLC Limited Liability Company, 30 N Gould St, Ste N, Sheridan, WY 82801, USA. Contact: admin@dunedive.com.

Data we collect

Account data, usage data, inspection content you upload, and contact-form submissions (name, company, email, message).

Purposes & legal basis

Contract performance (Art. 6(1)(b) GDPR), legitimate interests (Art. 6(1)(f)), and consent where required (Art. 6(1)(a)).

Hosting (Germany)

Application data is hosted in Germany. The processors are listed under Third parties / processors.

Cookies & analytics

Essential cookies only: a language preference cookie for every visitor, plus a session cookie for the admin login. For reach measurement we run Umami, an analytics tool we host ourselves on our own server at Hetzner Online GmbH in Falkenstein, Germany. The tracking script sets no cookies and writes nothing into your browser storage. If your browser sends a Do Not Track signal, no measurement takes place. Your IP address is processed in transit only, to run a bot and blocklist check, to derive an approximate location and to compute a non-reversible visitor hash. It is never written to the analytics database. The hash is salted with a value that rotates monthly, so visits cannot be linked across rotation periods. Recorded per visit: page path and query string, referrer, page title, browser, operating system, device type, screen size, language, country, region and city. No names, no email addresses, no account identifiers, no profile across other websites. The data stays on our own server, is not passed to any third party and is not used for advertising. Analytics records are deleted automatically after 14 months. Independently of this, our web server keeps access logs including IP addresses for 14 days for security and troubleshooting, after which they are deleted automatically.

Third parties / processors

Processors are bound by data-processing agreements: Hetzner Online GmbH, Germany (hosting); Resend, Inc., USA (transactional email); Cloudflare, Inc., USA (DNS/CDN and DDoS protection). Transfers to the USA rely on the EU-US Data Privacy Framework and/or standard contractual clauses.

Your rights

Access, rectification, erasure, restriction, portability and objection under GDPR. Contact admin@dunedive.com to exercise them.

US privacy rights

For visitors and customers in the United States: the categories of personal information we collect are identifiers and contact details (name, company, email address), account and usage data of the SondeScan platform, inspection content you upload, and the technical data described under Cookies & analytics. We do not sell personal information, and we do not share it for targeted or cross-context behavioral advertising. Residents of California and of other states with comparable privacy laws may request access to, deletion of, or correction of their personal information, and will not be treated differently for exercising these rights. To exercise them, contact admin@dunedive.com; we verify the request before acting on it.

Retention

Data is retained only as long as necessary for the stated purposes or statutory obligations, then deleted.

Data protection contact

No data protection officer is appointed. All privacy requests: admin@dunedive.com.