Privacy Policy

Last Updated: April 6, 2026

1. Controller

SardjIT is the controller for the processing of personal data described in this Privacy Policy within the meaning of the EU General Data Protection Regulation ("GDPR"). SardjIT is based in Germany.

Contact: info@sardjit.com

2. Scope of This Policy

This Privacy Policy explains how we process personal data when you visit this website, contact us, or send an inquiry about our website development, SEO, branding, or IT services. It is written in English, but it is intended to reflect the GDPR and applicable German privacy rules.

3. Server Logs and Website Delivery

When you visit this website, technical data may be processed automatically to deliver the site and maintain its security and stability. This may include:

  • IP address
  • Date and time of the request
  • Requested page or file
  • Browser type and version
  • Operating system
  • Referrer URL
  • HTTP status information

This processing is carried out on the basis of Article 6(1)(f) GDPR. Our legitimate interests are secure website operation, abuse prevention, error analysis, and reliable technical delivery of the website.

4. Contact Form and Business Inquiries

If you contact us through the contact form, we process the data you provide in order to handle your inquiry and communicate with you about your request. This may include:

  • Name
  • Email address
  • Company name, if provided
  • Selected service or project type
  • Message content and any information you include in it
  • Technical anti-spam and security data, such as request metadata and rate-limit related information

The legal basis is Article 6(1)(b) GDPR where your request relates to pre-contractual steps or an existing business relationship, and Article 6(1)(f) GDPR for general business communication, abuse prevention, and secure handling of inquiries.

5. Direct Email Communication

If you contact us directly by email, we process the information you send to respond to your request, continue communication, and, where relevant, prepare or perform a contract. The legal basis is Article 6(1)(b) GDPR and Article 6(1)(f) GDPR.

6. Language Preference Storage

This website stores a language preference in your browser so the site can remember the language you selected. At the moment this is implemented through browser storage rather than for advertising or tracking purposes.

Where storage or access on your device is necessary to provide a digital service you expressly requested, it is permitted under Section 25(2) No. 2 TDDDG. Any associated processing of personal data is based on Article 6(1)(f) GDPR, with our legitimate interest being a functional and user-friendly website experience.

7. Recipients and Processors

We may use carefully selected service providers that process personal data on our behalf or receive data where necessary to provide our services. Depending on the request and technical setup, this may include:

  • Hosting, infrastructure, and serverless function providers
  • Email delivery providers, including Resend, for contact notifications
  • Google services, including Google Sheets, for structured handling of inquiry data
  • Technical service providers involved in website delivery, maintenance, or security

These providers are used only where necessary and under the applicable contractual and data protection safeguards.

8. International Data Transfers

Some service providers we use may process data outside the European Union or European Economic Area, in particular in the United States. Where this happens, we rely on an adequacy decision, standard contractual clauses, or another lawful transfer mechanism under Chapter V GDPR, depending on the provider and transfer scenario.

9. Retention Periods

We retain personal data only for as long as necessary for the relevant purpose. In particular:

  • Server log data is generally kept only as long as necessary for technical security, troubleshooting, and abuse prevention.
  • Inquiry and contact data is kept for as long as needed to process your request, continue related business communication, and document the communication where necessary.
  • If an inquiry leads to a contract, data may be retained for the duration of the contractual relationship and thereafter for statutory retention periods under German commercial and tax law or for the establishment, exercise, or defence of legal claims.
  • Language preference storage remains in your browser until you clear it, overwrite it, or it is otherwise removed by your browser.

10. Legal Bases Overview

Depending on the situation, we process personal data on one or more of the following legal bases:

  • Article 6(1)(b) GDPR for pre-contractual steps and contract-related communication
  • Article 6(1)(f) GDPR for website security, technical operation, business communication, and efficient service delivery
  • Where applicable, Article 6(1)(a) GDPR if consent is requested for a specific processing activity

11. Your Rights Under the GDPR

Subject to the statutory requirements, you have the following rights:

  • Right of access under Article 15 GDPR
  • Right to rectification under Article 16 GDPR
  • Right to erasure under Article 17 GDPR
  • Right to restriction of processing under Article 18 GDPR
  • Right to data portability under Article 20 GDPR
  • Right to object under Article 21 GDPR, in particular where processing is based on legitimate interests
  • Right to withdraw consent at any time with effect for the future, where processing is based on consent
  • Right to lodge a complaint with a supervisory authority under Article 77 GDPR

You may lodge a complaint with the supervisory authority in the Member State of your habitual residence, your place of work, or the place of the alleged infringement. If you want to exercise your rights, please contact us at info@sardjit.com.

12. No Automated Decision-Making

We do not use automated decision-making or profiling within the meaning of Article 22 GDPR in connection with this website.

13. Security Measures

We use appropriate technical and organizational measures to protect personal data against unauthorized access, loss, destruction, or unlawful processing. However, no transmission over the internet or electronic storage system can be guaranteed to be completely secure.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, technical, or business changes. The version published on this page applies from its stated update date.

15. Contact

If you have questions about this Privacy Policy or about the processing of your personal data, please contact us at info@sardjit.com.