Privacy Policy
This privacy policy explains how GDPR SiteFix processes personal data on gdprsitefix.com and, where applicable, dashboard.gdprsitefix.com. Last updated: 14 October 2026.
Controller
GDPR SiteFix, operated by Armin M.
Alije Izetbegovića bb, 75270 Živinice, Bosnia and Herzegovina
Email: [email protected]
Support: [email protected]
Data processed when visiting the website
When you visit this website, technical server log data may be processed for security, troubleshooting and delivery of the website. This may include IP address, date and time of access, requested URL, referrer URL, browser/user-agent, operating system, HTTP status code and transferred data volume.
Legal basis: operation and security of the website, including legitimate interests in providing a secure and functional website. Where EU GDPR applies, the legal basis is Article 6(1)(f) GDPR.
Contact by email
If you contact us by email, we process your email address, message content and any information you provide in order to respond to your request. The legal basis may be pre-contractual communication, contract performance or legitimate interest, depending on the request.
Cookies and analytics
The public marketing website is designed as a lightweight static website and does not intentionally use analytics or marketing cookies. If this changes, this privacy policy should be updated before such tools are enabled.
Dashboard and service data
If you create an account or use the GDPR SiteFix dashboard, we may process account data, login/security data, project names, website URLs submitted for scanning, scan results, detected resources, detected cookies/storage patterns, generated policy sections, installation-package metadata and support communication.
This data is processed to provide the service, perform requested website scans, generate results and maintain account security. Where EU GDPR applies, the legal bases may include Article 6(1)(b) GDPR for service performance, Article 6(1)(f) GDPR for security and fraud prevention, and Article 6(1)(c) GDPR where legal obligations apply.
Payments
If paid scan packages are enabled, payment processing may be handled by an external payment provider such as Paddle. Payment data is processed by the payment provider according to its own terms and privacy information. GDPR SiteFix receives only the information required to activate purchased scan packages and keep billing records.
Hosting and processors
Technical service providers may process data on behalf of GDPR SiteFix for hosting, security, email delivery, logging, support and payment handling. These providers are used only as needed to operate the website and service.
International context
GDPR SiteFix is operated from Bosnia and Herzegovina. If you access the website or contact us from the European Union or European Economic Area, personal data may be processed outside the EU/EEA. Appropriate legal and technical safeguards should be reviewed as the service expands in the EU market.
Retention
Personal data is kept only as long as necessary for the purpose for which it was collected, for service delivery, security, accounting, dispute handling or legal obligations. Scan and project data may be kept while the account is active or until deletion is requested, unless retention is legally required.
Your rights
Depending on the applicable law, you may have rights to access, rectification, deletion, restriction, objection, portability and withdrawal of consent. You may contact us at [email protected]. EU/EEA users may also contact a competent supervisory authority.
Deutsch: Kurzfassung
Verantwortlicher ist GDPR SiteFix, betrieben von Armin M., Alije Izetbegovića bb, 75270 Živinice, Bosnia and Herzegovina. Kontakt: [email protected]. Beim Besuch der Website können technische Server-Logdaten verarbeitet werden. Bei Nutzung des Dashboards können Konto-, Projekt-, Scan- und Supportdaten verarbeitet werden. Die Verarbeitung erfolgt zur Bereitstellung und Sicherheit des Dienstes, zur Bearbeitung von Anfragen und, falls zutreffend, zur Vertragserfüllung. GDPR SiteFix wird aus Bosnien und Herzegowina betrieben; bei Nutzung aus der EU/EWR kann eine Verarbeitung außerhalb der EU/EWR stattfinden.