Privacy Policy

1. Data Controller

FastSiteLab is operated by Embeddedware IKE, Panachaikou 2, 15344 Gerakas, Greece. Embeddedware IKE is the data controller for personal data collected through fastsitelab.com.

Contact: hello@embeddedware.gr

2. Data We Collect

• Name (optional)
• Email address
• Phone number and preferred call times (optional)
• Business / website (optional)
• Message content, fit-check answers, and audit notes (optional)

3. Legal Basis

• Affirmative consent for optional browser analytics
• Legitimate interest for responding to inquiries
• Pre-contractual measures for service discussions

4. How We Use Data

• Respond to project enquiries and send no more than two project-specific reminders within 30 days
• Provide information about services
• We do not use enquiry contact data for marketing
• Improve the public site using consented analytics
• Comply with legal obligations

5. Cookies & Analytics

Google Analytics 4 and Vercel Web Analytics load only after affirmative consent. Before consent they do not load, send requests, or store provider data. We use manual page views and only package_viewed, package_cta_selected, eligibility_started, eligibility_completed, eligibility_result_viewed, website_quote, and security_review. Vercel Web Analytics uses no analytics cookie. We do not send answers, contact details, raw URLs, raw referrers, User-ID, Google Signals, advertising features, enhanced conversions, or user-provided data. The local browser preference record is named fsl_consent_v1 and is not a cookie. Cookie Policy.

6. Data Sharing & Transfers

Analytics providers are Google and Vercel. Their systems may receive provider-native network metadata, including IP address and user agent, only after consent. Vercel uses a provider-native daily visitor hash. Account custody, provider agreements, subprocessors, transfers, reporting retention, and historical deletion procedures remain external production gates until verified provider evidence and legal review are complete.

7. Retention

• Contact data: up to 24 months after last interaction
• Google Analytics event data: 2 months
• The fsl_consent_v1 local preference record and Google Analytics cookies: 12 months, whether analytics is accepted or declined

8. Your GDPR Rights

You have rights of access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. Withdrawal stops future browser dispatch, removes Google Analytics cookies and local telemetry session data, and reloads the page. It cannot by itself delete provider history already received.

9. Complaints

You may lodge a complaint with the Hellenic Data Protection Authority (HDPA).

10. Security

We apply reasonable technical and organizational measures to protect data, including HTTPS and secure handling.

11. Policy Updates

We may update this policy from time to time. The latest revision date appears at the top of this page.