Privacy Policy

This policy explains what happens to personal data when you visit this website. It is written under Article 13 of the General Data Protection Regulation (GDPR).

1. Controller

Email: contact@diyi0t.com

2. Summary

This is a static information page. It sets no cookies, performs no tracking or profiling, runs no analytics, and loads no fonts, scripts or other resources from third-party servers. Text is displayed using fonts already installed on your device. The only personal data processed when you visit is contained in the web server's log files, described below.

3. Hosting and server log files

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA, acting as a processor on our behalf under Vercel's Data Processing Addendum, which is incorporated into its terms of service and meets the requirements of Art. 28 GDPR. Vercel operates a global edge network, so personal data may be transferred to and processed in the United States and in other countries in which Vercel or its own service providers operate. Where Vercel's certification under the EU–U.S. Data Privacy Framework covers the transfer, it takes place on the basis of the European Commission's adequacy decision of 10 July 2023 (Art. 45 GDPR). Otherwise it takes place on the basis of the European Commission's Standard Contractual Clauses (Implementing Decision (EU) 2021/914, Art. 46 (2) (c) GDPR), which form Schedule 3 to Vercel's Data Processing Addendum. Both documents are published at vercel.com/legal/dpa, and we will send you a copy on request to contact@diyi0t.com.

Each time a page is requested, the server automatically records:

• the IP address of the requesting device
• the date and time of the request
• the URL requested and the HTTP status code returned
• the amount of data transferred
• the referring URL, where the browser sends one
• the browser user agent string

Purpose and legal basis: this data is processed to deliver the website reliably and to detect and defend against attacks and abuse. The legal basis is Art. 6 (1) (f) GDPR, our legitimate interest in operating a secure and functioning website. This data is not merged with any other source, and it is not used to identify individual visitors.

Retention: log data is held by our host for a short, fixed period and then deleted automatically. On our current hosting plan that period is one hour. We do not export, copy or otherwise retain this data beyond that period ourselves.

4. Contacting us by email

If you write to contact@diyi0t.com, your email address, your message and any details you choose to include are processed for the sole purpose of handling your enquiry. The legal basis is Art. 6 (1) (b) GDPR where your message concerns a contract or steps taken prior to entering one, and otherwise Art. 6 (1) (f) GDPR, our legitimate interest in responding to enquiries addressed to us.

Email sent to this address is received and stored on servers operated by our email hosting provider, which acts as a processor on our behalf under a data processing agreement pursuant to Art. 28 GDPR. No other recipient receives your correspondence.

Correspondence is kept for as long as needed to deal with the matter, and thereafter for as long as statutory commercial and tax retention periods require.

5. Your rights

Under the GDPR you have the right to:

• obtain confirmation and a copy of your personal data (Art. 15)
• have inaccurate data corrected (Art. 16)
• have your data erased (Art. 17)
• obtain restriction of processing (Art. 18)
• receive your data in a portable format (Art. 20)
• object to processing based on legitimate interests, on grounds relating to your particular situation (Art. 21)

To exercise any of these rights, write to contact@diyi0t.com.

6. Right to object

You have the right to object at any time, on grounds relating to your particular situation, to processing of your personal data that is based on our legitimate interests under Art. 6 (1) (f) GDPR — that is, the server log data described in section 3 and, where applicable, correspondence handled under section 4. If you object, we will no longer process that data unless we can demonstrate compelling legitimate grounds which override your interests, rights and freedoms, or the processing is needed to establish, exercise or defend legal claims. To object, write to contact@diyi0t.com.

7. Right to lodge a complaint

You may lodge a complaint with a data protection supervisory authority. The authority competent for us is:

8. No automated decision-making

We do not use your data for automated decision-making or profiling within the meaning of Art. 22 GDPR.

9. Changes to this policy

We may update this policy to reflect changes to the website or to legal requirements. The current version always applies.

Last updated: 7 September 2026

← Back to diyi0t.com