Legal
Imprint
Company information
| Field | Value |
|---|---|
| Legal name | Gordian Labs S.R.L. |
| CUI | 54942279 |
| LEI | 8945002A2C0FACER9472 |
| Registered office | 42-44 Sold. Ștefan Constantin, 3rd District, Bucharest 032309, RO |
| Trade register | J2026039792004 |
| Governing law | Romanian law, and directly applicable European Union law |
| Contact | privacy@gordianlabs.io |
Privacy
Controller
| Field | Value |
|---|---|
| Legal name | Gordian Labs S.R.L. |
| Registered office | Address above |
| Contact | privacy@gordianlabs.io |
| Data Protection Officer | We have not appointed one, because none of the Article 37 triggers apply to us. The address above reaches the person responsible. |
What we collect, and why
| Source | Data | Why | Legal basis * |
|---|---|---|---|
| Contact form | Work email, one line on the problem, optionally what brought you here | Business enquiry | Art. 6(1)(b), steps before a contract |
| Calendar booking, on the provider's page | Name, email, chosen time, any note you add | To hold the call | Art. 6(1)(b), steps before a contract |
| Server logs | IP address, user agent, timestamp | Security and abuse prevention | Art. 6(1)(f), legitimate interest |
* Each legal basis is an article of the GDPR, Regulation (EU) 2016/679.
What we do not do
| Field | Value |
|---|---|
| Analytics | None that identify you |
| Tracking pixels | None |
| Advertising identifiers | None |
| Profiling | None |
| Automated decision-making | None |
| Sale or sharing of your data | None with anyone who is not a processor listed below |
Processors
| Processor | What it does for us | What it sees | Transfer basis | Established in |
|---|---|---|---|---|
| Vercel Inc. | Hosts the site and runs the contact form's route | Server logs, and the form on its way through | EU standard contractual clauses | USA |
| Kasada Pty Ltd, through Vercel BotID | Checks that a form submission came from a person | Browser signals taken when the form is submitted | Vercel's EU standard contractual clauses, which bind it as a sub-processor | Australia |
| Plus Five Five, Inc., trading as Resend | Delivers the form's message to our mailbox | What you wrote in the form, and your email | EU standard contractual clauses | USA |
| Google Ireland Ltd | The booking page, and the mailbox the form writes to | What you send us, and what you enter to book | EU standard contractual clauses for its onward transfers to Google LLC | Ireland |
Your rights
| Article * | Right |
|---|---|
| Art. 15 | Access |
| Art. 16 | Rectification |
| Art. 17 | Erasure |
| Art. 18 | Restriction |
| Art. 21 | Object to processing based on legitimate interest |
* The GDPR gives you these. For any privacy-related enquiry, contact us at privacy@gordianlabs.io. We answer within one month.
Terms of use
The content of this site is provided for information.
Nothing here is an offer, and nothing here is legal, financial or investment advice.
Engagements run on the signed proposal, and the proposal governs where it and this site disagree.
Text and drawings on the site are ours; the open-source repositories are governed by their own licences.
Links to other sites are not endorsements of them.
Security
Reporting a vulnerability
- Write to security@gordianlabs.io. We acknowledge a report within one business day.
- Tell us what you found, where, and how to reproduce it. A proof of concept helps.
- We do not run a paid bounty. We will credit you in the fix if you want that.
In scope
gordianlabs.io and its subdomains.
Out of scope
Our clients' systems, and the code we wrote for them, which are theirs to run and theirs to disclose. Our open-source repositories, which take reports through their own issue trackers.
While you test
Do not degrade the service for anyone else, and do not access, change or keep data that is not yours. If you reach data that is not yours, stop there and say so in the report.
Safe harbour
Research done in good faith and within this policy is authorised. We will not pursue legal action over it, and we will not refer it to law enforcement.
The machine-readable version of this policy is at /.well-known/security.txt.