What this website collects, why, and for how long. We sell data sovereignty, so this site is built the way we would build yours: it loads nothing from anyone else, sets no cookies, and measures nobody.
The controller for data processing on this website, within the meaning of the General Data Protection Regulation (GDPR), is:
We have not appointed a data protection officer, because we are not required to under § 38 BDSG. Data protection questions go to the address above and reach the people who can answer them.
For each request, the web application writes one log line containing the HTTP method, the path requested, the status code, the number of bytes sent, how long the request took and the protocol version. It deliberately records neither your IP address nor your user agent. These lines exist to spot faults and are kept in the system journal for at most 30 days.
The reverse proxy in front of the application, and the server's own network layer, process your IP address in order to deliver the page to you at all; a short-lived access log containing the IP address arises there. That is technically unavoidable for any website. These records are used solely to operate and secure the service, in particular to recognise and stop attacks, and are deleted after 30 days at the latest.
Every font, icon and image on this site is delivered by this server. Nothing is requested from Google Fonts or any other external service, so no third party learns that you visited, and no connection leaves this origin while you read.
This site sets no cookies. It stores exactly one value in your browser's local storage: voicy-lang, holding "en" or "de", so the site opens in the language you last chose. The value never leaves your browser and is never sent to us. Storing it is strictly necessary to provide the language function you asked for and therefore requires no consent under § 25(2) no. 2 TDDDG. You can delete it at any time through your browser settings.
If you send us an enquiry through the form, we process what you enter in order to answer it.
The technical data is kept for one reason: to keep automated spam out. The form carries a field invisible to people, and we measure how long it took to complete; a submission that fills the invisible field, or that is completed faster than a person could type, is discarded unread. The IP address additionally limits how many enquiries one sender can submit. None of this is used to profile or track you, and no automated decision with legal effect is made about you.
Giving us your name and email address is necessary for us to reply; everything else is optional. There is no obligation to use the form at all — you are welcome to write or call instead.
If you write or call, we process the details you give us in order to deal with your request, on the same legal bases as above. We keep that correspondence for as long as the matter requires and as long as statutory retention periods apply.
This website runs on infrastructure we administer ourselves, located in Germany. The operator of the data centre acts as a processor under Art. 28 GDPR and has no reason to look at the content. Beyond that, no third party receives personal data from this website: there is no analytics provider, no advertising network, no customer relationship system and no newsletter service in the path.
Should we ever enable email notification of new enquiries, that mail would be sent through our own mail server to our own address; the enquiry would not leave our control.
None. No personal data from this website is transferred to a country outside the European Union or the European Economic Area, and none is stored with a provider subject to foreign disclosure orders. That is the point of what we build.
This policy covers the website only. Personal data we process while delivering a project — training corpora, recordings, documents, systems inside your data centre — is governed by the contract and the data processing agreement concluded with you under Art. 28 GDPR, not by this page. In the delivery model we sell, that data stays on your own hardware.
Traffic to this site is encrypted with TLS. The server sends a strict content security policy that forbids loading code or styles from anywhere else, and the service runs under its own unprivileged account in a restricted sandbox. The enquiry log is written with file permissions that exclude every other account on the machine.
Under the GDPR you have the following rights in respect of your personal data:
To exercise any of them, write to info@voicy.tech. We answer without undue delay and within one month at the latest. Exercising a right costs you nothing.
Right to object under Art. 21 GDPR. Where we process your data on the basis of a legitimate interest — the server and proxy logs, and the spam prevention around the contact form — you may object at any time on grounds relating to your particular situation. We will then stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
You may lodge a complaint with the data protection authority responsible for us, or with the one where you live or work:
We update this policy when the site changes in a way that affects it — for example if we ever add a service that processes data differently. The date at the top of this page tells you which version you are reading.