Privacy notice

Controller and privacy contact

DigiFix S.à.r.l.-S, trading as DigiFix.Ninja, is the controller. Its registered office is at 53 Route de Wasserbillig, L-6686 Mertert, Luxembourg.

For privacy questions or to exercise your rights, email dojo@digifix.ninja or telephone +352 661 89 89 53.

Data processed

The form processes your name, email address, optional telephone number, message and selected response language. The hosting and security process may also handle your IP address, request time, method, path, status, content type and length, and relevant origin or security headers. Invisible abuse controls process whether the honeypot is filled and a short-lived HMAC-derived rate key and counter; the application does not store the raw IP in its rate files. Email delivery involves envelope, header and delivery metadata plus ordinary hosting and mail logs.

Purposes and legal bases

• I use enquiry details to understand and answer your message and, where you request it, take steps before a possible contract. The basis is Article 6(1)(b) GDPR for requested pre-contractual steps and Article 6(1)(f) GDPR for the legitimate interest in receiving and answering other genuine messages.
• Technical request data, short-lived rate controls and coarse result events are used to deliver and protect the site and mail service, reject malformed or abusive traffic and diagnose failures. The basis is Article 6(1)(f) GDPR, the legitimate interest in maintaining proportionate security and availability.
• The form is not used for newsletter enrolment, advertising profiles or automated decisions with legal or similarly significant effects. It does not create a booking, order or contract.

Required and optional information

Name, email address and message are required to process the form; without them I cannot answer through this route. A telephone number is optional and is used only in connection with your enquiry. Please do not send passwords, access or recovery codes, payment-card details, health data, or unnecessary sensitive or confidential information. You can instead use direct email or telephone if the local abuse controls reject the form.

Recipients, hosting and international transfer

Access is limited to Andrei Stefan and any confirmed authorised DigiFix mailbox user. The planned web-hosting and email service provider is established in Switzerland, subject to verification of the actual account, data-processing terms, subprocessors and locations. Switzerland currently benefits from an EU adequacy decision. Authorities or professional advisers may receive data only where lawfully required or necessary. The project-owned PHP code is not a recipient, and no external form, CAPTCHA, analytics or mail-library provider receives the form data.

How long data are kept

Rejected form content is not retained by the application. For rate limiting, the application stores only short-lived HMAC-derived keys, counters and expiry times, not raw IP addresses or message content. Each entry expires no later than 20 minutes after creation. A private server cleanup runs at least every 15 minutes, so an entry is ordinarily deleted within 35 minutes of creation. If storage or cleanup fails, the form fails safely and the state is removed by the next successful cleanup. Ordinary enquiries are kept only while needed to answer and follow up on the enquiry, then deleted under DigiFix’s approved mailbox schedule unless the enquiry leads to work, a legal record, a claim or a dispute requiring a different documented period. The current terms of the planned email service state that daily mail backups are retained for seven days. Exact ordinary-enquiry and other security-event periods must match the deployed configuration and approved operating schedule before publication.

Your rights

Subject to the GDPR, you may request access to your personal data and its rectification or erasure, restriction of processing and data portability where applicable. You may object to processing based on legitimate interests. Identity verification may be requested only where proportionate. Send a request to dojo@digifix.ninja.

Complaint to the CNPD

You have the right to lodge a complaint with Luxembourg’s National Commission for Data Protection (CNPD).

Visit the official CNPD website (Opens the official CNPD website)

Cookies, storage, tracking and automated decisions

The website does not use cookies, browser storage, analytics, advertising, tracking, profiling or legally significant automated decision-making. The neutral root address / always leads to the Luxembourgish version at /lb/; browser language preferences are neither inspected nor stored. An explicitly requested address under /lb/, /de/, /fr/ or /en/ is not overridden. The form uses no PHP session, external CAPTCHA or database. Necessary host logs and short-lived local security records are separate from browser tracking and must match the actual hosting configuration.

Security and form delivery

The contact endpoint validates requests server-side, uses invisible local anti-abuse checks and sends accepted enquiries through authenticated TLS-protected SMTP. The visitor’s address is used only as Reply-To, never as the authenticated sender. No password or SMTP secret belongs in the public website files. These measures reduce risk but cannot guarantee absolute security or delivery.

Changes to this notice

Material changes to the processing or deployed configuration will be reflected here with an updated date and any further notice required.