Privacy Policy

This policy explains how personal data is processed when you visit pentserv.com or contact PentServ.

Controller

The controller as defined in Article 4(7) GDPR is:

Website delivery and hosting

The website and self-hosted Umami analytics run on infrastructure provided by Scaleway SAS in Amsterdam, Netherlands. Scaleway SAS processes hosting data on behalf of PentServ under a data processing agreement.

Technical request data, including the requested URL or path, timestamp, IP address, user agent, and connection information, must be processed to establish a connection, deliver the website, and protect the service. This processing is based on Article 6(1)(f) GDPR. Our legitimate interest is the reliable and secure provision of the website.

Caddy is not configured to write access logs for ordinary page requests. Technical infrastructure or error logs may nevertheless be generated when required to operate or protect the service. Such records are retained only for the period required for those purposes or by law.

Umami analytics

We use a self-hosted instance of Umami at stats.pentserv.com to understand how the website is used and which browsers and device types need to be supported.

• Cookie-freeNo analytics cookies
• Do Not TrackBrowser preference respected
• No persistent browser IDNo lasting identifier stored in your browser

The tracker is configured to:

• run only on pentserv.com;
• exclude URL query strings and fragments; and
• not use analytics data for cross-site tracking, advertising profiles, or matching visits to customer records.

Umami processes information including the hostname, page path and title, referrer, timestamp, browser language, screen dimensions, IP address, and user agent. Browser, operating system, device type, and approximate location may be derived from this technical information. The IP address is used for processing but is not stored in the analytics database.

Page views may be grouped into visits using pseudonymous information derived from technical request data and regularly changing random values. This does not create a persistent identifier in your browser.

Processing is based on Article 6(1)(f) GDPR. Our legitimate interest is to evaluate aggregate website usage and maintain compatibility with commonly used browsers and devices. Analytics records are retained for no longer than 12 months and are then deleted automatically.

You may object to this analytics processing under Article 21 GDPR by enabling Do Not Track in your browser or contacting office+privacy@pentserv.com.

Cookies and browser storage

This website does not set cookies or use local or session storage for its functionality or analytics.

Contact by email

When you contact us, we process the information you provide to respond to your inquiry and, where applicable, prepare or perform an engagement. The legal basis is Article 6(1)(b) GDPR for pre-contractual or contractual communication and Article 6(1)(f) GDPR for other business communication.

The email service is provided by Heinlein Hosting GmbH in Berlin, Germany, under the mailbox.org brand. Heinlein Hosting processes messages and associated metadata on behalf of PentServ. Messages are retained only as long as required for the inquiry, engagement, legal retention obligations, or the establishment, exercise, or defense of legal claims.

Do not include credentials or other confidential information in your initial email. We can arrange a secure transfer method if needed.

Your rights

Subject to the applicable legal requirements, you have the rights of access, rectification, erasure, restriction of processing, data portability, and objection. You also have the right to lodge a complaint with a data protection supervisory authority.

The supervisory authority responsible for our Berlin establishment is:

Berlin Commissioner for Data Protection and Freedom of Information
datenschutz-berlin.de