Privacy Policy

Last updated: 12 October 2026

This policy explains what personal data dasterit.tech collects through this website, why, where it is stored and what rights you have. We keep it short and only collect what we need to answer you and provide our services.

1. Who we are

dasterit.tech is a remote IT services team (“we”, “us”). We are the controller of the personal data described here. Contact for all privacy questions: info@dasterit.tech.

2. What we collect and why

Request form (free IT audit, plan orders, questions)

• Data: your name, email address, company website or domain, your message and the plan or price calculation you chose.
• Purpose: to answer your request, prepare the audit and send an offer.
• Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).

Automatic IT audit

• What happens: when you request the free IT audit, our server automatically checks the domain you entered using only public information: DNS records, the domain registry (RDAP), your public website, the public Shodan InternetDB index (no scanning), spam blacklists and Google PageSpeed Insights. To look for leaked credentials, your email address (if it is on the audited domain) and common company addresses such as info@ are checked against public breach databases (XposedOrNot or Have I Been Pwned). For 7 days we then open your home page once an hour to measure availability.
• Result: the report is emailed to you and kept with your request; our team sees a summary in Telegram.
• Legal basis: your request (Art. 6(1)(b) GDPR).

Website chat

• Data: the messages you write, the page you write from and, if you choose to leave them, your email address and name.
• Purpose: to answer you in the chat or, if you have left the page, by email.
• Legal basis: your request (Art. 6(1)(b) GDPR) and our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).

Please do not send passwords or other sensitive data through the form or the chat.

Emails you send us

If you write to info@dasterit.tech, we process your email address and the content of your message to reply (Art. 6(1)(b) or (f) GDPR).

Website analytics

We count visits with Umami, a privacy-friendly analytics tool that runs on our own server. It uses no cookies, does not build profiles and does not store full IP addresses. We only see aggregate figures such as page views, countries, devices and referring sites (legitimate interest, Art. 6(1)(f) GDPR).

Server logs

Our web server briefly records technical data of each request (IP address, time, requested page, browser) to keep the site secure and working (Art. 6(1)(f) GDPR).

3. Cookies and browser storage

The public website does not use tracking or advertising cookies. The chat stores a random conversation ID and your recent messages in your browser’s local storage so the conversation survives a page reload. You can delete it at any time by clearing your browser data. No cookie banner is needed for this.

4. Who processes the data

• Hosting: Amazon Web Services (Lightsail), servers in Sydney, Australia. The website, form requests, chats and analytics are stored there.
• Email: Spacemail (Spaceship, Inc.) hosts our mailbox info@dasterit.tech.
• Notifications: new requests and chat messages are forwarded to our team’s private chat in Telegram (Telegram Messenger) so we can answer quickly.
• IT audit data sources: RDAP registries, Shodan InternetDB, XposedOrNot or Have I Been Pwned, Google PageSpeed Insights and public DNS blacklists receive the audited domain, its IP addresses or the checked email addresses, as described above.
• Images: some photos on the website are loaded from the Pexels image service, which receives your IP address when the image loads.

We do not sell or share your data with anyone for marketing.

5. Transfers outside the EEA

Our team works outside the European Economic Area and our server is in Australia, so your data is processed outside the EEA in countries without an EU adequacy decision. The transfer is necessary to answer your request and to take the steps you asked for before a contract (Art. 49(1)(b) GDPR). When we provide services to your company, we sign a data processing agreement on request.

6. How long we keep data

• Requests and email correspondence that do not lead to a contract: up to 24 months after the last contact.
• Chat conversations: up to 12 months.
• Client correspondence and invoices: as long as required for the contract and by tax and accounting law.
• Server logs: limited in size and deleted automatically on rotation, usually within a few weeks. Backups: up to 14 days.

7. Your rights

You have the right to access your data, to have it corrected or deleted, to restrict or object to its processing and to receive it in a portable format. Write to info@dasterit.tech and we will reply within one month. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU country where you live or work.

8. Security

The website uses HTTPS only. Access to our systems is protected with individual accounts, strong passwords and two-factor authentication where available.

9. Changes

We may update this policy when our services or tools change. The date at the top shows the latest version.