Privacy policy

1. Data controller

Radko Stoinev, sole proprietorship (impresa individuale) trading as «Spy SEO Tools»

I haven’t appointed a Data Protection Officer (DPO), because the law doesn’t require one for a business like mine. For any question, write to the address above.

2. What data I process

Quote request form (/en/quote/)

• name
• email
• phone (optional)
• website (optional)
• service you’re interested in
• rough budget (optional)
• message
• tool you came from (optional)
• confirmation that you’ve read this policy

If you reach the form from one of my tools and choose to attach your result, the form is pre-filled with the tool’s name and a few calculated numbers, such as a character count or a score. The text you analysed is never passed on. You can edit or delete these details before sending. Nothing reaches me until you press the send button.

Please don’t include sensitive data in your message, such as health information, political opinions or criminal records. I don’t need it.

Email and phone calls. If you contact me directly, I process your email address or phone number and whatever you tell me, under the same rules as the form.

Technical data

• Form spam protection. To limit repeated submissions, I keep an encrypted fingerprint of your IP address. It is a keyed hash, and the plain IP can’t be recovered from it. I keep it for no more than one hour, then it’s deleted automatically.
• Server logs. Like any website, the server automatically records some technical data about each visit: IP address, date and time, page requested, browser and operating system, and the result of the request. The hosting provider manages these logs and keeps them for a limited time, normally no longer than 14 days, unless they’re needed to investigate abuse or an attack.

The free tools. The tools in the Tools section run entirely in your browser. Titles, descriptions, text and any data you enter are not sent to me or to anyone else, and they aren’t stored.

3. Why I process it and on what legal basis

After you send the form, an automatic confirmation email goes to the address you entered. It tells you your request has arrived and falls under the same purpose.

I don’t use your data for newsletters, advertising or profiling. I make no decisions based solely on automated processing (Art. 22 GDPR).

4. Do you have to give me this data?

No, it’s up to you. Without your name, email, service, message and confirmation that you’ve read this policy, though, I can’t receive your request or reply to it. All other fields are optional.

5. Who can see the data

• Hosting provider, with servers in the European Union. It hosts the site and the form and manages the server logs. It acts as a data processor.
• Email service provider. Requests reach me by email, and that’s where I reply from. This provider also acts as a data processor.
• Professionals who help me with tax and accounting, only if you become a client and only for the data needed for invoicing.
• Public authorities, only where the law requires it.

I don’t sell your data or hand it over to anyone. There are no analytics, advertising tools, pixels or third-party embeds on this site. Fonts are served from the site’s own server, so visiting these pages doesn’t contact any outside service.

6. Transfers outside the EU

Your data is not transferred outside the European Union or the European Economic Area.

7. How long I keep it

• Requests that don’t turn into a project: I delete the request and the related correspondence within 12 months of our last contact.
• Requests that turn into a project: I keep the data for as long as we work together. Contracts, accepted quotes, invoices and accounting records are kept for 10 years, as the law requires (Art. 2220 of the Italian Civil Code and tax rules).
• Encrypted IP fingerprint for spam protection: one hour at most.
• Server logs: for the limited period set by the hosting provider, normally no longer than 14 days.

8. Your rights

At any time you can ask me to:

• tell you whether I hold data about you and give you a copy (Art. 15);
• correct or complete it (Art. 16);
• delete it (Art. 17);
• restrict how it’s processed (Art. 18);
• give it to you in a machine-readable format or send it to another controller (Art. 20).

You can also object to processing based on legitimate interest (Art. 21). Where possible, I let anyone who received your data know about a correction or deletion (Art. 19).

How to exercise them: email info@spyseotools.com or send a letter to the business address. It’s free. I’ll reply within one month, which can be extended for complex requests as Art. 12 GDPR allows. If I have reasonable doubts about who you are, I may ask for something to confirm it.

Complaints. If you think I’m handling your data incorrectly, you can complain to the Italian Data Protection Authority (Garante per la protezione dei dati personali), Piazza Venezia 11, 00187 Roma, www.garanteprivacy.it, or to the supervisory authority in the EU country where you live or work.

9. Cookies

This site uses no cookies. I don’t use any other tracking either, such as analytics, pixels or fingerprinting. That’s why you don’t see a cookie banner.

10. Changes

If anything changes in how I handle data, I’ll update this page and the date below.