GDPR requests

Rights you can exercise

• Access - a copy of the personal data we hold about you, together with the purposes, the categories, the recipients, the retention periods and, where the data did not come from you, its source
• Portability - the data you provided to us, in a machine-readable format: every scan and every finding of your workspace as CSV from Settings, under the Data tab, plus the per-screen CSV exports of findings, pages and the audit log; anything those files do not contain, such as screenshots and report PDFs, on request
• Rectification - correction of inaccurate account or billing data; where we have shared data we notify each recipient of a rectification or erasure, unless that proves impossible or disproportionate (Art. 19)
• Erasure - delete your account yourself in Settings, under the You tab, or ask us to; what little survives an erasure is listed below
• Restriction - processing put on hold while a dispute about the data is resolved
• Objection - we stop the processing you object to unless we demonstrate compelling legitimate grounds that override your interests, or the processing is needed for legal claims. An objection to direct marketing is absolute: we stop, no balancing
• Withdrawal of consent - at any time, without affecting the lawfulness of what happened before

How to submit a request

Account deletion is self-service: Settings → the You tab → Delete account, confirmed by typing your e-mail address. Workspace owners and admins can download every scan and every finding of the workspace as CSV from Settings, under the Data tab, with no request; what that export does not contain - screenshots, page inventories, report PDFs and the like - is provided on request.

For everything else, write to [email protected]. An e-mail from the address on your account is sufficient verification. For other requests we verify identity proportionately to the sensitivity of the data and the risk involved - and we never ask for a password or a payment detail. Requests can also be sent by post to ADMI ENTERPRISES s.r.o., Nové sady 988/2, Staré Brno, 602 00 Brno.

Requests are free of charge, and we respond in a commonly used electronic format. Where requests are manifestly unfounded or excessive, in particular because they repeat, we may charge a reasonable fee or refuse to act - and we carry the burden of showing that they are.

If you own a website we scanned

You do not need an account, and you do not need to write to us: at /opt-out you can verify control of your domain by publishing one DNS TXT record, then block all future scanning of it - the block binds every customer, paying ones included - and erase what earlier scans stored, screenshots and reports included.

The block and the erasure of public-scanner scans take effect at once. Scans stored in a customer's workspace are erased 7 days later: we tell that workspace's owners first, and a repeated request within 90 days of a cancelled one is reviewed by a person before anything is erased.

If you prefer e-mail, the same address as above works.

If you are not the customer

For a scan run anonymously from our homepage, we are the controller: we answer your request ourselves, directly.

Where we process data on behalf of a customer's workspace as processor, the request is theirs to answer: we forward it to that controller without undue delay and support them in responding rather than acting unilaterally.

Response times, once a request reaches us

• Fulfilment without undue delay and within one month, extendable by two further months for complex or numerous requests - we tell you within the first month if we extend, and why (Art. 12(3))
• Deletion propagates to backups within a further 8 days - the copies are Neon (AWS eu-central-1, Frankfurt) and Cloudflare R2 (EU jurisdiction)

What survives an erasure, and for how long

Erasure deletes your account, workspaces you solely own, their scans, screenshots and reports. A short list of records survives it, kept for compliance with legal obligations and for the establishment, exercise or defence of legal claims (Art. 17(3)(b) and (e)). Each is listed here with the point at which it goes:

• A workspace-deletion record - the workspace name and the deleting user's e-mail address - kept twelve months from the deletion, then removed. For those twelve months it is also used, on the basis of our legitimate interest, to stop a new workspace or a new account with the same address from getting a second free trial, and a new workspace of the same account from getting a refilled free scan allowance
• An account-deletion record - a one-way hash of the account's e-mail address, not the address itself - kept twelve months, then removed
• Anonymous scan acceptance records - the authorisation confirmation ticked on the public scan form, with IP and time - kept twelve months, then removed
• Entries you made in the audit log of a workspace you shared with other people - the action, the time, the address you were signed in from and the name you acted under. The link to your account is severed, and the entry recording your removal names no address; the earlier entries stay for as long as that workspace does, and are deleted with it. A workspace you solely own is deleted by the erasure, and its audit log with it
• The record of your accepting the terms of service - the version, the time, your e-mail address and the IP address you accepted from. It is the evidence of the contract, so it is not deleted with your account: it is kept for at least 3 years from the day you accepted and deleted once the account is gone and those 3 years have passed. The IP address is removed from it after twelve months
• Free-trial eligibility records - a keyed one-way hash of the e-mail address and of the IP address a checkout with the free trial was opened from, with the plan and the workspace - kept 24 months from when they were made, then removed, because they exist to stop a trial being claimed again after a deletion
• If you used /opt-out for a domain, our record of the request and its outcome - the domain, the dates, what was blocked and erased, and the IP address the request came from. The IP address is removed after twelve months; the rest of the record stays, because it is the evidence that the block and the erasure were asked for
• Encrypted backups, until their window rolls past (the backup line above states how long that is)
• Payment and invoicing records held by Stripe/Link as merchant of record, under the retention duties tax and accounting law places on them

Complaints, and decisions made about you

You can complain to the Czech supervisory authority - Úřad pro ochranu osobních údajů (ÚOOÚ), Pplk. Sochora 27, 170 00 Praha 7, uoou.gov.cz - or to the supervisory authority of the member state where you live or work. Complaining costs nothing and does not need us to agree.

Scans are scored automatically, but no decision producing legal or similarly significant effects for you is made by automated means - Art. 22 GDPR is not engaged by this product.