Privacy policy

Last updated: [date]. Applies to supvisor.ai.

1. Controller

Supvisor OÜ, registry code 14303595, Narva mnt 4, Office 505-FXFX, 10117 Tallinn, Estonia. Email: contact@supvisor.ai.

We have not appointed a data protection officer, as we are not required to under Article 37 GDPR. Data protection questions go to the address above.

2. What this website collects

Cookies and analytics

None. We set no cookies, use no analytics or tracking scripts, and build no profiles of visitors. This is why you are not being asked to accept anything.

The exposure check

The selections you make in the exposure check are processed in your browser and are never transmitted to us or to anyone else. We do not learn that you used it, or what you selected.

Server logs

Our hosting provider, [hosting provider and country], records standard access logs when a page is requested. These may include your IP address, the time of the request, the page requested, and your browser's user agent. The legal basis is our legitimate interest in operating and securing the site (Article 6(1)(f) GDPR). Logs are retained for [retention period] and are not used to identify visitors.

Fonts

This site currently loads typefaces from Google Fonts. When a page loads, your browser requests those files from Google servers, which necessarily discloses your IP address to Google. If you prefer this not to happen, the fonts can be served from our own domain instead — see the note in the project README.

Photographs

The photographs on the home page are currently served from Unsplash's content delivery network, which means your browser requests them from that network and discloses your IP address to it. As with the fonts, these files can be moved onto our own domain — see the note in the project README.

3. If you contact us

When you email us, we process your address, your message and anything you choose to include, in order to answer you and, where relevant, to discuss a possible engagement. The legal basis is our legitimate interest in responding to enquiries, or the steps taken prior to entering a contract (Article 6(1)(b) and (f) GDPR). We keep correspondence for as long as it is relevant to our relationship with you, and then delete it.

4. Client engagements

During a review or implementation we may see personal data belonging to your organisation — for example in documents, systems or interviews. In that context we act as a processor on your instructions under a separate data processing agreement, not as a controller, and we do not use that data for any purpose of our own.

5. Recipients and transfers

We do not sell personal data and we do not share it for advertising. Data may be processed by our hosting provider and our email provider, each acting under a data processing agreement. Where a provider processes data outside the EEA, that transfer relies on the European Commission's standard contractual clauses or an adequacy decision.

6. Your rights

Under the GDPR you have the right to request access to your personal data, correction, erasure, restriction of processing, and portability, and to object to processing based on legitimate interest. Write to contact@supvisor.ai and we will respond within one month.

You may also lodge a complaint with a supervisory authority. Ours is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), aki.ee. You may instead complain to the authority in your own country of residence.

7. Security

The site is served over HTTPS. We apply access control, encryption in transit and the data minimisation described above. No system is perfectly secure, but we do not hold visitor data that would be attractive to take.

8. Changes

If this policy changes we update the date at the top of this page. Material changes affecting people we already correspond with are communicated directly.

← Back to the site