Privacy policy

Controller and representative

Controller for the processing of personal data on this website is the Operator, dunedive LLC Limited Liability Company (Wyoming, USA), e-mail [email protected], address 30 N Gould St, Ste N, Sheridan, WY 82801, USA.

Representative in the EU / Switzerland pursuant to Art. 27 GDPR: Fairlane Ventures GmbH, Baarerstrasse 107, 6300 Zug, Switzerland, UID CHE-240.244.650. Data subjects in the EU and Switzerland may also address this representative on all data-protection matters.

Data we process

Server log data: when you load a page, our infrastructure and our CDN/proxy (Cloudflare) automatically process technical connection data, in particular your IP address, the requested URL, date and time, the referrer and your browser/user-agent string. This is necessary to deliver the site, to ensure stability and to defend against attacks.

Account data (hosted console only): if you use a hosted Sonde console, we process the account data you provide, such as your e-mail address, your name or username, your organisation/tenant and a securely hashed password. The inspection data you enter belongs to your organisation; we process it on your behalf to operate the service.

Contact data: if you contact us by e-mail, we process the data contained in your message (e-mail address and content) in order to handle your request.

Cookies and local storage: this site does not use tracking or advertising cookies. We store a language preference in your browser's local storage (key aqua_lang) and your cookie choice (key sonde_consent_v1). When you sign in to a hosted console, an essential authentication token is stored so you stay logged in. Both are strictly necessary or set on your action and are not used to build a profile.

Web analytics

Umami: for reach measurement we run Umami, an analytics tool we host ourselves on our own server at Hetzner Online GmbH in Falkenstein, Germany. Umami is loaded only after you have consented to analytics in the cookie settings; without that consent no measurement takes place and no request is sent to the analytics server. You can withdraw your consent at any time via "Cookie settings" in the footer. The tracking script sets no cookies and writes nothing into your browser storage. If your browser sends a Do Not Track signal, no measurement takes place. Your IP address is processed in transit only, to run a bot and blocklist check, to derive an approximate location and to compute a non-reversible visitor hash. It is never written to the analytics database. The hash is salted with a value that rotates monthly, so visits cannot be linked across rotation periods. Recorded per visit: page path and query string, referrer, page title, browser, operating system, device type, screen size, language, country, region and city. No names, no email addresses, no account identifiers, no profile across other websites. The data stays on our own server, is not passed to any third party and is not used for advertising. Analytics records are deleted automatically after 14 months. Independently of this, our web server keeps access logs including IP addresses for 14 days for security and troubleshooting, after which they are deleted automatically.

Legal bases

We process server logs on the basis of our legitimate interest in a secure, stable and functioning website (Art. 6(1)(f) GDPR). We run web analytics (Umami) only on the basis of your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time with effect for the future. We process account and contact data to perform or prepare a contract or to handle your request (Art. 6(1)(b) GDPR) and, where you have given consent, on the basis of that consent (Art. 6(1)(a) GDPR). Under Swiss FADP the corresponding bases (legitimate interest, contract, consent) apply.

Retention

Server log data is kept only as long as needed for operation and security and is then deleted or anonymised (typically within a few weeks). Account data is kept for as long as your account exists and afterwards only as far as statutory retention duties (for example accounting / invoicing obligations) require. Contact correspondence is deleted once your request has been dealt with and no retention duty applies.

Recipients and processors

The service is hosted on servers in Germany (data center of Hetzner Online GmbH, Falkenstein). We use the following service providers as processors: Hetzner Online GmbH (server hosting, Germany), Resend / Amazon SES (EU region, delivery of transactional e-mails such as verification and password-reset messages) and Cloudflare (CDN and proxy). These providers process data only on our instructions and under a data-processing agreement. When you purchase a plan, the checkout is handled by Dodo Payments Inc., 8 The Green, STE A, Dover, Delaware 19901, USA (a Delaware corporation), as merchant of record: you enter your payment details on the Dodo Payments checkout page, Dodo Payments processes the payment, issues the invoice and handles taxes under its own privacy policy (dodopayments.com/legal/privacy-policy). We receive the purchase confirmation (plan, billing e-mail address, payment status) and never your card data. We do not sell personal data.

International data transfer

The Operator is established in the United States and Cloudflare operates a global network, so personal data (in particular connection data such as your IP address) may be processed outside the EU/EEA and Switzerland, including in the USA. Such transfers are safeguarded by the EU Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework, together with additional technical and organisational measures. Server hosting via Hetzner Online GmbH is located in Germany (Falkenstein data center); e-mail delivery via Resend / Amazon SES uses the EU region.

Your rights

Subject to the applicable law, you have the right to access your personal data, to rectification, to erasure, to restriction of processing, to data portability and to object to processing based on legitimate interest. Where processing rests on consent, you may withdraw that consent at any time with effect for the future. You also have the right to lodge a complaint with a supervisory authority (in the EU, your local data-protection authority; in Switzerland, the Federal Data Protection and Information Commissioner, FDPIC).

US privacy rights

For visitors and customers in the United States: the categories of personal information we collect are identifiers and contact details (name, company, email address), account and usage data of the SondeScan platform, inspection content you upload, and the technical data described under Web analytics. We do not sell personal information, and we do not share it for targeted or cross-context behavioral advertising. Residents of California and of other states with comparable privacy laws may request access to, deletion of, or correction of their personal information, and will not be treated differently for exercising these rights. To exercise them, contact [email protected]; we verify the request before acting on it.

Contact for privacy requests

To exercise your rights or for any question about this policy, contact the Operator at [email protected] or the EU/CH representative Fairlane Ventures GmbH, Baarerstrasse 107, 6300 Zug.

Processing on behalf of customers

For the inspection data your organisation enters into its Sonde workspace, your organisation is the controller and the Operator processes that data on its behalf as a processor. Business customers can request a data-processing agreement (Art. 28 GDPR) from the Operator via the contact e-mail above.