Privacy and cookies

Data controller

DGBLEND LTD, Strovolou 77, STROVOLOS CENTER, Flat/Office 301, 2018 Strovolos, Nicosia, Cyprus. For any request: info​ [at] ​dgblend [dot] net.

Data processed and retention

Browsing. IP address and technical request data, processed by Cloudflare to deliver and protect the site (including limiting repeated attempts). Cloudflare keeps security logs for a limited period.

Unlock code. After entering the code given by the technician, a technical cookie ("dl") enables the download for 2 minutes. It contains no identifying data.

Preferences. The language is part of the page address (for example /en/) and is not stored. A manually chosen light/dark theme is stored only in your browser.

Customer devices. When the support program connects to our server, the server records the device ID and IP address. Devices not yet approved appear in the technicians' list for 24 hours; approved devices stay in the list for the duration chosen by the technician (24 hours, 30 days or until removal), with the technician's optional note, and when that expires they return to the pending list for 24 hours. For the IP address the panel also shows the country and the network operator, obtained from Cloudflare's Radar API, which receives only the IP address, and the approximate location (city and region), derived on our server from a local DB-IP database without sending the address to third parties. If a technician emails you the address of the download page, your email address is used only for that message, through Resend (servers in the European Union), and stays in the panel's log for 30 days. The program also sends the server, until acknowledged, the operating system, version, computer name, user name, processor and memory: the server keeps only the operating system, version and computer name, for as long as the device is listed.

Connection events. To help technicians understand why a connection fails, the panel shows for 7 days (at most 300 entries) the device ID, the type of event (registration, call, relayed connection, rejection, device not reachable), the time and the IP address of the device or of the caller.

Support sessions. The server puts the customer's computer in touch with the technician's and, if needed, relays the traffic, which is encrypted between the two computers: the server cannot read its content. Server technical logs (IP, ID, times) are kept for 30 days. The technician sees and uses the customer's computer only during the session, with the customer present and after the customer has given them the code.

Technicians. Name, passkey public key, sign-in dates, invitations created (with the name of who created them, valid for a short time) and the log of actions in the panel, kept for 30 days. Technicians' computers stay approved with no expiry, bound to the technician's passkey together with the device's public key, until the computer is removed or the passkey revoked.

Purposes and legal basis

Provision of the support service requested by the customer (art. 6.1.b GDPR) and service security, prevention of abuse and unauthorised access (legitimate interest, art. 6.1.f GDPR). No profiling, no marketing, no disclosure to third parties.

Where the data is and who processes it

The site and the device list are on Cloudflare, acting as processor, with storage in the European Union jurisdiction. The support server is operated by DGBLEND LTD on infrastructure in the European Union (Italy, Aruba S.p.A.). No transfers outside the European Union take place beyond Cloudflare's contractual safeguards.

The program distributed is the official RustDesk program. Besides our server, at startup it may check for updates on the RustDesk developers' servers (api.rustdesk.com), sending operating system, version and a device identifier, and it uses public STUN servers (Google, Cloudflare, Nextcloud) to find its network address, which therefore receive the IP address. These services are run by their respective owners under their own privacy notices and may be located outside the European Union; the update check can be turned off in RustDesk's settings. The iPhone app (App Store) is also a service of its respective owners.

Cookies

The site uses only technical cookies, strictly necessary or for preferences: "dl" (download unlock, 2 minutes) and, in the technicians' area, "ts" (session, 12 hours), "wa" (passkey verification, 5 minutes) and "tlang" (manually chosen panel language, 1 year). The light/dark theme is stored in the browser (localStorage) and is not sent to the server. The law does not require consent for these tools. There are no third-party, profiling or analytics cookies.

Your rights

You can request access to your data, rectification, erasure, restriction, objection and portability by writing to info​ [at] ​dgblend [dot] net. You have the right to lodge a complaint with the Commissioner for Personal Data Protection of Cyprus or with the authority of your country.