Privacy Policy

1. Controller

The controller responsible for data processing on this website under the GDPR is:

[Company name] [Legal form]
[Street and number], [Postal code] [City], [Country]
Email: contact [at] softify [dot] pro

2. Overview of processing

This website processes personal data in the following cases:

• when the website is accessed (server log files),
• when the contact form is used,
• through strictly necessary cookies (session, language preference),
• when admin/power-user accounts sign in to the protected admin area.

3. Server log files

When you visit this site, our hosting provider automatically collects technical access data (IP address, date/time of access, page requested, browser used) to ensure stable operation and IT security (Art. 6(1)(f) GDPR, legitimate interest). This data is automatically deleted after [e.g. 14 days — adjust to your actual host configuration].

4. Contact form

When you use the contact form, we process the data you enter (name, email address, optional subject, message) as well as your IP address and browser user-agent for spam and abuse prevention. Data is stored in our MySQL database and additionally forwarded by email to contact [at] softify [dot] pro once server-side mail delivery is configured.

Legal basis: Art. 6(1)(b) GDPR (handling your enquiry / pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in preventing automated spam/bot submissions via IP/user-agent logging and timing/arithmetic checks).

You will also automatically receive a short confirmation email at the address you provided.

Form data is deleted once your enquiry has been fully resolved and no statutory retention period applies. [Add a concrete retention period, e.g. "after 12 months of no further contact".]

5. Cookies

This site uses only strictly necessary cookies, which do not require consent:

• PHPSESSID — session cookie, enables the contact form/CAPTCHA flow and admin login; deleted when the browser is closed.
• softify_lang — remembers your chosen language for 12 months so the site doesn't reset to another language on your next visit.

No tracking, marketing or analytics cookies are used.

6. Admin / power-user accounts

For staff with access to the admin area, we store a username, email address, and a securely hashed password (bcrypt) in our database. Legal basis: Art. 6(1)(b)/(f) GDPR (performance of the employment/engagement relationship, or legitimate interest in secure access management).

7. Recipients / processors

Your data is shared with the following recipients where necessary to operate the site: [add hosting provider name], [add SMTP/email provider name, if any]. A data processing agreement under Art. 28 GDPR is in place, or will be, with each before go-live. No transfer to third countries outside the EU/EEA currently takes place. [Update this if that changes, e.g. if a US-based provider is used.]

8. Your rights

You have the right, at any time, to:

• access the data we hold about you (Art. 15 GDPR),
• request correction of inaccurate data (Art. 16 GDPR),
• request erasure of your data (Art. 17 GDPR),
• request restriction of processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR),
• object to processing (Art. 21 GDPR).

Contact contact [at] softify [dot] pro to exercise these rights. You also have the right to lodge a complaint with a data protection supervisory authority, e.g. the one responsible for [your state/region].

9. SSL/TLS encryption

For security reasons, this site uses SSL/TLS encryption. You can recognise an encrypted connection by "https://" and the lock icon in your browser's address bar. [Confirm a valid certificate is installed before go-live — see README_INSTALL.md.]

10. No automated decision-making

No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place. The "COCO" AI server is used exclusively internally for testing and quality-assurance purposes for enterprise clients and does not process any personal data of visitors to this website.

11. Changes to this policy

We will update this privacy policy whenever data processing on this site changes (e.g. new cookies, a newsletter, or analytics software are introduced). Last updated: [insert date].