Privacy policy

1. Controller

DCL Labs MMC, AZ1010 Baku, Azerbaijan. Represented by the managing director Rafat Aghabayli.

Email: hello@dcl.az · Phone: +994 51 298 10 10

We have not appointed a data protection officer; please send privacy questions to the email address above.

Hosting and server logs

This website and its database run on servers in a data centre in Frankfurt am Main, Germany. The hosting provider is Contabo GmbH, Aschauer Straße 32a, 81549 München, Deutschland; it processes the data solely on our behalf (Art. 28 GDPR).

When you open the website, the web server automatically processes technically necessary data: IP address, date and time, requested address, amount of data transferred, referrer URL and browser identifier. This is needed to deliver the page and detect attacks.

The legal basis is our legitimate interest in secure and stable operation (Art. 6(1)(f) GDPR). Server logs are deleted after 14 days at the latest.

All traffic is encrypted via HTTPS (TLS).

Contact form and email

When you write to us through the contact form, we process what you enter: name and email address (required), and optionally company name, budget range, requested services, project description and whether you would like an initial call. We also store which source referred you (search engine, LinkedIn or direct). Only this category, not the full address of the previous page.

We use this data only to answer your enquiry and discuss a possible collaboration. We do not sell it or pass it on for advertising.

The legal basis is taking steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR); for general enquiries, our legitimate interest in answering them (Art. 6(1)(f) GDPR). The same applies to emails you send us directly.

Providing the data is voluntary, but without a name and email address we cannot reply.

The form contains a field invisible to people to fend off spam. No cookies or third-party services are used for this.

IP address for abuse prevention

To keep the form from being abused, we accept no more than 3 submissions per hour from the same IP address. For this, your IP address is held only in the server's memory, never written to the database and deleted no later than 90 minutes after the submission.

The legal basis is our legitimate interest in preventing abuse (Art. 6(1)(f) GDPR).

Cookies and local storage

We set no cookies for visitors and store nothing in your browser's local storage. The language follows from the address you open.

We use no advertising, tracking or analytics services.

Fonts and all other assets are served from our own server; opening the site transmits no data to third parties such as Google.

Recipients

Only authorised DCL Labs staff can access your enquiry. Our hosting provider processes it technically as a processor. It is not passed to any other third party unless we are legally obliged to do so.

Third-country aspects

DCL Labs MMC is based in Azerbaijan. There is no EU Commission adequacy decision for Azerbaijan. Your data is stored in Frankfurt am Main; authorised staff access it from Azerbaijan to handle your enquiry.

Because we offer goods and services in the EU, the GDPR applies to us directly (Art. 3(2) GDPR) and we comply with it in full. Where this involves a transfer to a third country, we base it on the EU Commission's standard contractual clauses (Art. 46(2)(c) GDPR). You can request a copy.

Retention

• Contact-form enquiries: deleted automatically 12 months after receipt. If a contract follows, we keep contract-related records for as long as statutory retention duties require.
• Server logs: 14 days at most.
• IP address for abuse prevention: 90 minutes at most, in memory only.
• At your request we delete your data sooner, unless a legal duty prevents it.

Your rights

Under the GDPR you have the right at any time to:

• access the data we hold about you (Art. 15),
• rectification of inaccurate data (Art. 16),
• erasure (Art. 17),
• restriction of processing (Art. 18),
• data portability in a common, machine-readable format (Art. 20),
• withdraw consent with effect for the future (Art. 7(3)).

Right to object (Art. 21 GDPR)

Where we process data on the basis of our legitimate interest (Art. 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation. We will then stop processing unless we can demonstrate compelling legitimate grounds.

An email to hello@dcl.az is enough for any request. We reply within one month.

Right to lodge a complaint

You may lodge a complaint with any data protection supervisory authority, in particular in the member state of your habitual residence, place of work or the alleged infringement (Art. 77 GDPR).

No automated decision-making

We make no automated decisions and do not use profiling within the meaning of Art. 22 GDPR.

Changes

We update this notice when our data processing or the law changes. The version published here applies.