Privacy

The short version

This site sets no cookies, runs no analytics, and embeds nothing from a third party. The typeface is served from our own server rather than from Google. Nothing you do here is tracked, nothing is profiled, and there is no consent banner because there is nothing to consent to.

Three things leave this page, and only when you make them: opening the checkout takes you to Stripe, writing to us sends an email, and loading any page produces a server log line at our host. That is the whole list.

Who is responsible

Dosto is the controller for the processing described here. Everything about your data, including any request under the rights listed further down, goes to one address:

Contact

hello@dosto.com

Website

dosto.com

We have not appointed a data protection officer, because the scale and nature of our processing does not require one under Article 37 GDPR. Enquiries go to the address above and are handled by us directly.

Opening a page

The site is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. When your browser requests a page, the server records the technical information it needs to deliver it and to keep the service secure:

• your IP address
• the page requested, with the date and time
• the referring page, if your browser sends one
• your browser and operating system version

The legal basis is Article 6 (1) (f) GDPR, and our legitimate interest is running a website that loads and is not abused. We do not export these logs, do not store a copy of our own, do not combine them with anything else, and never use them to work out who you are. They expire at the host on its own retention schedule.

Vercel processes this on our behalf under a data processing agreement. Because Vercel is based in the United States, data can be transferred there. That transfer rests on the European Commission’s standard contractual clauses.

The typeface

The font used across this site is downloaded when the site is built and served from our own domain. Your browser makes no request to Google or to any other font host, so nothing about you reaches a third party while the page renders.

Taking a seat

Checkout runs on Stripe. Nothing is transmitted before you click, and no Stripe code runs on this site. Clicking a “Claim a seat” button opens a page operated by Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland.

From that point Stripe processes what you enter, including your payment details, as an independent controller under its own notice at stripe.com/privacy. We never see your full card number. Where we process your order and billing data ourselves, the basis is Article 6 (1) (b) GDPR, the performance of a contract, and we keep those records for the periods commercial and tax law require.

Writing to us

If you email hello@dosto.com we receive your address, your message and anything you attach. Our mail runs on Google Workspace, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, under a data processing agreement.

We use what you send only to answer you. The basis is Article 6 (1) (b) GDPR where your message concerns a contract or the steps before one, and otherwise Article 6 (1) (f) GDPR and our interest in replying to people who write to us. We keep correspondence while the matter is open, and afterwards only for as long as statutory retention periods apply.

Your rights

Under the GDPR you can ask us at any time to:

• tell you what data about you we hold and why, Article 15
• correct anything inaccurate, Article 16
• delete it, Article 17
• restrict how we use it, Article 18
• hand it to you or to someone else in a portable format, Article 20
• stop processing that rests on our legitimate interest, Article 21

Write to hello@dosto.com. We answer within one month, as Article 12 (3) requires, and we do not charge for it. Where you gave consent for something, you can withdraw it at any time without affecting what was lawful before.

You can also complain to a data protection supervisory authority, which under Article 77 GDPR may be the one in the country where you live, where you work, or where you believe the problem happened.

Changes

If this site starts doing something that touches your data, this page changes before it does, and the date at the top moves with it. There is no version history to dig through: what stands here is what applies.