Privacy policy

Fastlayer Networks, 21 Rue du Puits Romain, L-8070 Bertrange, Luxembourg, is responsible for the processing described here (the controller under the GDPR).

For any question about your data, write to our data protection officer at dpo@xspctr.com.

• This website uses only strictly necessary cookies and does not track you.
• There are no analytics and no advertising.
• We process only what we need to answer you and to work with you.
• We do not sell personal data or use it for advertising.

The website is delivered through Cloudflare, which also protects it against attacks. To deliver pages and block abuse, Cloudflare processes your IP address and the details of each request, such as the page, the time and your browser, and may ask you to complete a verification check. See Cloudflare’s privacy policy.

Our web server records each request with your IP address, the time, the page, the referring page and the browser type. These records serve operation and security only, and are kept no longer than that requires.

Fonts and images come from this website.

Legal basis: our legitimate interest in running a secure website (Article 6(1)(f) GDPR).

This website uses only strictly necessary cookies, which do not require consent. Cloudflare may set __cf_bm (bot detection, 30 minutes), cf_clearance (a passed security check, 30 minutes) and _cfuvid (rate limiting, end of session). If we ever use anything optional, we will ask for your consent first.

When you close the cookie notice with OK, your browser remembers this for six months in its local storage (xs-cookies, no personal data), so the notice does not appear on every page. Cookies at the bottom of every page shows it again.

When you use the contact form, we receive your name, email address, company (optional), the topic and your message; the access form also asks for your company size and main domain (both optional). Name and email address are needed to answer you. The form passes the details to an email delivery service, which delivers them to our mailbox; the website stores nothing.

To limit abuse, the form uses a hidden trap field, a minimum time on the page and limits per visitor. Your message reaches us by email through Cloudflare.

We use your message only to answer it and, if we work together, to prepare that work. Legal basis: steps you ask for before a contract (Article 6(1)(b) GDPR) and our legitimate interest in answering you (Article 6(1)(f)).

We keep the correspondence as long as the conversation, or the work that follows, needs it, and delete it afterwards unless the law requires us to keep it.

For our services we process the business contact details of the people we work with, and the data the work requires, as agreed in the contract.

Legal basis: the contract (Article 6(1)(b) GDPR) and legal obligations (Article 6(1)(c)), such as keeping accounting records for ten years under Luxembourg law.

Where the work means processing personal data on your behalf, we do so under a data processing agreement (Article 28 GDPR).

This website presents xSpctr, a platform operated by Fastlayer Networks. The platform has its own privacy notice and terms of use, available in the platform.

Only service providers who work for us and are bound by a data processing agreement:

• a hosting provider, with servers in the European Union;
• Cloudflare, for delivering and protecting the website;
• an email delivery provider, for messages from the contact form;
• our email provider, for our mailbox.

Beyond that, we share personal data only where the law obliges us to.

Some of these providers are based in the United States. Transfers to them rely on the EU–US Data Privacy Framework or on the EU standard contractual clauses.

You may ask for access to your data, its correction or deletion, a restriction of its use, or a copy in a portable format. You may object to processing based on our legitimate interest.

Write to dpo@xspctr.com. We answer within one month, as the GDPR requires.

You may also complain to the Luxembourg data protection authority: Commission nationale pour la protection des données (CNPD), 15, Boulevard du Jazz, L-4370 Belvaux, cnpd.public.lu.

We make no decisions about people by automated means and build no profiles of them.

We update this page when our processing changes. The date at the top shows the current version.