Privacy policy

1. Controller

Panzerotti OÜ is the controller for personal data collected through this website, email enquiries, commercial communication, billing, and the delivery of the public website audit service unless a separate written data processing agreement says otherwise.

Legal name

Panzerotti OÜ

Registry code

17345602

Registered office

Tööstuse tn 75-71, Põhja-Tallinna linnaosa, Tallinn, Harju maakond, 10416, Estonia

Contact

hello@panzerotti.be

2. Data we process

We process only the data needed to operate the website, respond to enquiries, perform agreed audit work, and meet legal obligations.

• Website access data: IP address, user agent, requested URL, referrer, timestamp, and security logs generated by hosting infrastructure.
• Enquiry data: name, email address, company, message content, requested public URL, and any information you choose to send to us.
• Audit data: public URLs, publicly visible page content, metadata, headings, links, schema, performance readings, screenshots or snippets, tool output, and findings.
• Business data: proposal, contract, invoice, payment, tax, and account records where a client relationship is created.

The first audit is intended for public pages. Please do not send passwords, customer records, analytics exports, or other confidential datasets unless we have agreed the scope and safeguards in writing.

3. Purposes and legal bases

4. Cookies and local storage

The landing page does not use advertising cookies. The theme switcher stores a light or dark theme preference in your browser local storage. This preference stays on your device and is not sent to Panzerotti as a separate tracking identifier.

5. Sharing and processors

We do not sell personal data. We share data only where needed for the purposes above, including with:

• hosting and infrastructure providers, including AWS EMEA SARL for the public website infrastructure;
• email, business operations, accounting, and professional service providers;
• public authorities, courts, or advisers where required by law or necessary to protect legal rights.

Service providers may process data only for the purposes we instruct and must protect it with appropriate contractual and technical safeguards.

6. Retention

• Website logs are kept only as long as needed for security, troubleshooting, and operational records.
• Enquiry data is normally kept for up to 24 months after the last meaningful contact unless a client relationship starts.
• Audit reports and findings are normally kept for the term agreed with the client, then for a reasonable period for support, evidence, and legal record keeping.
• Accounting and tax records are kept for the period required by applicable law.

7. International transfers

We aim to use providers and infrastructure in the European Union or European Economic Area where practical. If personal data is transferred outside the EU or EEA, we use appropriate safeguards such as adequacy decisions, standard contractual clauses, and contractual security commitments.

8. Your rights

Subject to GDPR conditions and limitations, you may request access, rectification, erasure, restriction, portability, or objection to processing. Where processing is based on consent, you may withdraw consent at any time.

To exercise your rights, contact hello@panzerotti.be. You may also contact the Estonian Data Protection Inspectorate if you believe your data protection rights have been infringed.

9. Security

We use technical and organisational measures appropriate to the nature of the data, including access control, encryption in transit, least-privilege access, and secure handling of audit materials. No internet service can guarantee absolute security, but we work to keep the data we handle limited and protected.