sassential.
← Back to the portfolio

Privacy

Who is responsible

sassential OÜ is the controller responsible for personal data handled in connection with this portfolio website and enquiries sent to us. The company is registered in Estonia under registry code 17489369 and is represented by René Sass. Its address and company-register link are available on the Legal page.

For privacy questions or to exercise your rights, email hello@sassential.io.

Visiting the website

The website is hosted by Vercel Inc. Your browser sends technical request information to Vercel, including your IP address, requested URL, request time, and browser information. Vercel processes request information to deliver the pages and assets, maintain the service, and protect against abuse. Technical information may be recorded in operational and security logs.

This processing is based on our legitimate interest in providing a reliable, secure website (Article 6(1)(f) GDPR). On our Vercel Hobby plan, Observability data, including CDN request information, is retained for 12 hours; runtime logs, where generated, are retained for one hour. These periods apply to the corresponding Vercel logging features. Vercel may separately retain information for its own security or legal purposes as described in its privacy notice.

See Vercel’s privacy notice for information about processing for which Vercel is independently responsible.

Cookies and website features

The website’s own code does not set cookies or use browser storage. Vercel Web Analytics is disabled. We do not use advertising trackers, contact forms, booking tools, third-party embeds, newsletters, or online payments on this website. Fonts and images are served with the website.

Email enquiries

The contact link opens your email application; no message is submitted through the website. If you email us, we process your email address, name if supplied, message, attachments, and correspondence metadata to respond and handle your enquiry. Our email service is Neo, operated by Titan Solution Ltd SEZC.

For enquiries about entering into a contract with you, the legal basis is taking steps at your request before entering into a contract (Article 6(1)(b) GDPR). For other correspondence, including enquiries on behalf of a company, the legal basis is our legitimate interest in responding to relevant communications (Article 6(1)(f) GDPR).

We keep enquiry emails for a maximum of three months from receipt. Providing information by email is voluntary, but we need a reply address and enough information to respond.

See Neo’s privacy policy for further information about the email service.

Service providers and international processing

Vercel and Neo, together with their infrastructure providers, process information to provide hosting and email services. Information may also be disclosed to authorities where required by law.

These providers operate internationally, so processing may take place outside the European Economic Area. Vercel identifies the United States as its primary processing location. Neo’s operator is established in the Cayman Islands; that registered location does not by itself determine where emails are stored.

The providers’ published data-processing terms describe contractual safeguards for relevant international transfers, including European Commission standard contractual clauses: Vercel’s Data Processing Addendum and Neo’s Data Processing Addendum. Contact us for information about safeguards relevant to your personal data or to request a copy, subject to necessary redactions.

Your rights

Subject to the conditions in the GDPR, you can request access to your personal data, correction, erasure, restriction of processing, and data portability where applicable.

You may object to processing based on legitimate interests on grounds relating to your particular situation. Contact hello@sassential.io to make a request. We generally respond within one month; where the GDPR permits an extension, we will explain it within that period.

You may lodge a complaint with a data-protection supervisory authority, including the authority where you live or work. In Estonia, this is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon).

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

Following an external link takes you to another website. Its operator is responsible for its own processing and privacy information. Linking to a project does not embed that project’s services in this website.