Privacy Policy

1. Introduction

Welcome to DevSeal (we, our, or us). We provide digitalization, process automation, and software engineering. We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, in compliance with the General Data Protection Regulation (GDPR).

2. Data Controller

The data controller responsible for your personal data is DevSeal OÜ. If you have any questions about this Privacy Policy, please contact us at:

3. Data We Collect

We may collect information you provide voluntarily when you fill out our contact form, including your name, email address, and message content.

We may also automatically collect Usage Data about how you access and use the website, including:

• IP address
• Browser type and version: information about the browser you use.
• Pages visited: which pages of the website you visit.
• Date and time: the time and date of your visit.
• Time spent: how long you spend on the website.

4. Hosting, Security, and Email Processors

This website is hosted on Cloudflare Workers. When you submit our contact form, we use Cloudflare Turnstile to help prevent abuse. Your message is queued on Cloudflare Queues and processed asynchronously; transactional emails are sent via Resend. These providers may process technical data such as your IP address as part of delivering the service.

Legal basis: Processing contact inquiries is based on our legitimate interest in responding to inquiries (Art. 6(1)(f) GDPR) or, where applicable, preparatory steps to entering into a contract (Art. 6(1)(b) GDPR).

5. Log Files

DevSeal follows a standard procedure of using log files. These files log visitors when they visit websites. Information may include IP addresses, browser type, ISP, date and time stamp, referring and exit pages, and possibly the number of clicks. This information is not linked to personally identifiable information and is used for analysing trends, administering the site, tracking movement on the website, and gathering demographic information.

6. Web Analytics with Umami

For reach measurement we use Umami, a privacy-friendly open-source web analytics tool that we operate ourselves on our own infrastructure in Germany. The analysis works without cookies: nothing is stored on or read from your device, so no consent under Section 25(1) of the German TDDDG is required.

Umami collects only aggregated, anonymous metrics (pages visited, referrer, browser and device type, approximate region). To distinguish sessions, an anonymous hash that changes daily is derived from technical characteristics; your IP address is not stored. The data never leaves our infrastructure and is not shared with third parties.

If you manually switch the website language, we store your choice in a purely functional cookie; it is required for the function you requested and needs no consent (Section 25(2) No. 2 TDDDG). The legal basis for the web analytics is our legitimate interest in the statistical analysis of our website (Art. 6(1)(f) GDPR).

7. International Data Transfers

Our web analytics processes data exclusively on our own infrastructure in Germany. When delivering the website and processing contact requests, personal data (e.g. IP addresses, email traffic) may also be processed by our service providers Cloudflare and Resend in third countries outside the EEA, in particular the United States.

These transfers rely on adequacy decisions of the EU Commission (EU-US Data Privacy Framework) where the respective provider is certified, and additionally on EU standard contractual clauses.

8. How We Use Your Data

We use collected data for various purposes:

• to provide and maintain our service,
• to notify you about changes to our service,
• to enable interactive features of our service when you request them,
• to provide customer support,
• to gain analytics or useful insights to improve our service,
• to monitor the use of our service, and
• to identify, prevent, and fix technical problems.

9. Your Data Rights (GDPR)

Under the GDPR you have the following rights regarding your personal data:

• Right of access: you can request copies of your personal data.
• Right to rectification: you can request correction of inaccurate data.
• Right to erasure: you can request deletion of your data under certain conditions.
• Right to restriction of processing: you can request limited processing under certain conditions.
• Right to object: you can object to processing under certain conditions.
• Right to data portability: you can request transfer of collected data to another organization or directly to you where the conditions are met.

If you submit a request, we have one month to respond. Contact us to exercise your rights.

10. Children's Information

We give additional attention to protecting children while using the internet. We encourage parents and guardians to observe, participate in, and/or guide children's online activity.

DevSeal does not knowingly collect personal data from children under 13. If you believe your child submitted such information on our website, contact us immediately and we will remove it as soon as possible.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of changes by posting the new policy on this page. Please review this Privacy Policy regularly. Changes become effective when published on this page.