Privacy Policy

Introduction

This Privacy Policy explains how Delaware Digital Application Solutions LLC (“DDAS”, “we”, “us”, “our”) collects, uses, stores, and protects personal data when you visit our website, purchase our software libraries, or interact with our services.

By using our website or purchasing our products, you agree to the practices described in this Privacy Policy.

Data We Collect

We collect only the data necessary to operate our website, process orders, and provide support.

Information You Provide

Name
Company name
Billing address
Email address
Payment information (the bank transfer details received with your payment)
Support requests and communication history
Quote requests and messages sent through our website
Role of contact persons in your company (for example licences or invoices)
Licence details (product, edition, version, licence keys and access codes)

Automatically Collected Data

Our website www.ddas.digital is a static website without user accounts. It is delivered by Cloudflare (Cloudflare Pages). To deliver the pages and protect them against attacks, Cloudflare processes technical data such as your IP address, the page requested, the time of the request and your browser. We receive only aggregated statistics from Cloudflare (for example the number of requests), no IP addresses. The fonts of our website are served from our own website, not from third parties.

Some of our pages are served from our own web space at IONOS: the CRA Wizard (cra-wizard.cloudet.digital), the online documentation and the videos and preview images embedded on our website (ddas.cloudet.digital), and our security advisories (security.cloudet.digital). When you open these pages or load a video or preview image, the server records the IP address, date and time, the page or file requested, the referring page and the browser in a log file. We use these logs only to operate and secure the service; our hosting provider deletes them after 62 days.

We do not use invasive tracking, advertising cookies or third-party analytics.

Quote Requests and Contact Form

You can request a quote at www.ddas.digital/request-quote or send us a message through the contact form at www.ddas.digital/contact. We collect your company, country, name and e-mail address, your selection or message and, where you provide them, details of your environment such as the CODESYS version and the controller. If you register your interest in our online course, we use your details only to inform you about the course. To protect the forms against automated misuse we use Cloudflare Turnstile; Cloudflare processes technical data such as your IP address for this check and does not pass it to us. Requests are stored in Cloudflare R2 with EU data location and in our own system operated by DDAS. We use this data to answer your request and to prepare a quote (Art. 6(1)(b) GDPR, steps prior to entering into a contract, or Art. 6(1)(f) GDPR for other requests).

CRA Compliance Service

If you order our CRA Compliance Service, we also process:

the project data you provide for the analysis (for example your PLC project and the classification documents)
the contact details of the people involved in the order

The CRA Wizard runs entirely in your browser. Your answers and files stay on your computer; the wizard does not send them to DDAS. Once you have created the data package, you can optionally report it to us with a button: the wizard then sends the order number, an identifier of your access code, the file name, the file size and the checksum (SHA-256) of the package to our portal at Cloudflare, never the package itself. Before sending, Cloudflare Turnstile runs a security check in your browser. You can send us the checksum by e-mail instead. Only the files you send us for the analysis reach DDAS. You upload them on an upload page at portal.ddas.digital directly to our storage at Cloudflare with EU data location (see “Software Delivery and Data Exchange”), or, if your IT requires it, we collect them from a platform you provide. We return the handover package the same way.

We treat project data as confidential, use it only to deliver the service and delete it no later than 30 days after delivering the handover package, including backups. We keep an order record (company, contact, order number, product, version, date, package, the hash of the signed manifest and the tool version) so that we can verify follow-up runs, revoke signatures and inform you about security issues that affect a delivered package.

Software Delivery and Data Exchange

We deliver our software through download links on portal.ddas.digital. The portal runs on Cloudflare; the software and the files exchanged for the CRA Compliance Service are stored in Cloudflare R2 with EU data location.

Download links. For each customer the portal holds only what it needs to deliver the software: customer number, company name, licensed products with edition and version, and the identifiers of valid download links. It holds no addresses, licence keys or access codes. The download page asks for your customer number and shows your company name only after the correct number has been entered.

Download records. When a download link is used, we record the link identifier, customer number, product, version, file, time and result (delivered or refused). We do not record your IP address or browser. We use these records to document the delivery of software and security updates (legitimate interest, Art. 6(1)(f) GDPR). Cloudflare processes your IP address technically to deliver the page but does not pass it to us.

Exchange of project data. Upload and return links are valid for at most 7 days. Files go directly from your browser to the storage; the portal itself does not see them. Every file is deleted automatically 30 days after upload, or earlier when the order is completed or declined.

Support requests. You can send us a support request through the form at portal.ddas.digital/helpdesk. We collect your name, company, e-mail address, the product, an optional customer or order number, the subject and your description, and later the messages you add. To protect the form against automated misuse we use Cloudflare Turnstile; Cloudflare processes technical data such as your IP address for this check and does not pass it to us. After sending the form you receive a ticket number and a personal ticket link on which you can read our answers and reply; anyone who has the link can read the ticket, so please keep it to yourself. The ticket page does not show your name or e-mail address. Requests are stored in Cloudflare R2 with EU data location and in our own system operated by DDAS; the ticket page is deleted from the portal 90 days after the request has been resolved. We use this data to answer your request and provide support (Art. 6(1)(b) GDPR, or Art. 6(1)(f) GDPR for requests not related to a contract).

How We Use Your Data

We use your personal data for the following purposes:

Processing and delivering digital software purchases
Answering quote requests and messages
Providing access to downloads, documentation, and license keys
Delivering the CRA Compliance Service
Managing customer records and support requests
Sending important service or security notifications
Improving website performance and user experience
Meeting legal and tax obligations

We do not sell or rent your personal data.

For customers in the EU/EEA, we process personal data based on:

Contractual necessity (processing your order, and steps prior to a contract such as a quote)
Legitimate interest (website security, fraud prevention, server log files, the CRA order record, download records)
Legal obligation (tax and accounting requirements)
Consent (where we ask for it).

How We Store and Protect Your Data

Our website is a static website without user accounts or a database. Support requests, quote requests and contact messages are stored in our own system and at Cloudflare with EU data location, e-mail with our e-mail provider. Quotes, orders, invoices and licences are managed in our own system, operated by DDAS; we do not use an external CRM provider. Licence keys and access codes are stored encrypted. Software and exchanged CRA project data are stored at Cloudflare with EU data location, project data only for the period described above. All data is protected by:

Encrypted connections (HTTPS)
Access controls
Regular security updates

We retain customer data only as long as necessary for legal, accounting, and operational purposes.

We share data only with trusted service providers necessary to operate our business:

Zoho (e-mail, data centre in the EU)
IONOS SE (hosting of our pages under cloudet.digital, Germany)
Dialpad, Inc. (business telephone)
Cloudflare, Inc. (domain name and DNS services, delivery of our website www.ddas.digital, redirects, our public key service keys.ddas.digital, our software delivery portal portal.ddas.digital, and our support, quote and contact forms and the checksum report from the CRA Wizard, including the Turnstile security check, with storage in the EU)
Mercury (business bank account; payments by bank transfer)

These providers process data on our behalf and follow strict security standards.

We do not share data with advertisers, data brokers, or unrelated third parties.

Cookies

Our website www.ddas.digital does not set its own cookies. Cloudflare may set a strictly necessary security cookie when it checks traffic for attacks, and Cloudflare Turnstile on our forms may use its own technical data for the security check.

The download page on portal.ddas.digital sets one essential cookie after you enter your customer number. It is valid for 8 hours and only for that download link. The CRA Wizard and the upload and return pages use no cookies; if you use the checksum report in the CRA Wizard, Cloudflare Turnstile may use its own technical data for the security check.

We do not use advertising or tracking cookies. See our Cookie Policy for details.

Your Rights

Depending on your location, you may have the right to:

Access your personal data
Correct inaccurate data
Request deletion of your data
Object to processing
Request data portability
Withdraw consent

To exercise these rights, contact us at: [email protected]

Data Retention

We retain:

Order and billing data: 7 years (legal requirement)
Support communication: as long as needed to provide service
Quote requests and messages: as long as needed to answer them
Contact persons of prospects without an order: deleted two years after the last contact; company data remain
CRA project data: deleted no later than 30 days after delivery of the handover package, including backups
CRA order record: as long as follow-up runs, signature revocation or security notifications for the delivered package may be needed, and no longer than ten years after the order
Server log files of our pages under cloudet.digital: 62 days
Licence records: as long as the licence can be used and security updates are provided for it
Download records: as long as licence records
Files exchanged via portal.ddas.digital: deleted automatically 30 days after upload, earlier when the order is completed or declined
Checksum reports from the CRA Wizard: on Cloudflare until we retrieve them (usually within an hour); assigned reports are kept with the order record, unassigned reports until we have checked them, at most 90 days

If you request deletion, we will remove all non‑essential data while retaining legally required records.

International Data Transfers

DDAS is a U.S. company, and some of our service providers are located outside the European Economic Area. Our e-mail provider stores data in the EU, and our web space at IONOS is located in Germany. Our software, the project data exchanged for the CRA Compliance Service, support requests, quote requests and contact messages are stored at Cloudflare with EU data location; our website is delivered through Cloudflare’s global network.

We process customer data and CRA project data on workstations operated by DDAS outside the EEA, in a country without an adequacy decision of the European Commission. Where data is transferred to the United States (for example to Cloudflare), we rely on the EU-U.S. Data Privacy Framework where the provider is certified; for all other transfers outside the EEA we rely on the EU Standard Contractual Clauses. You can request a copy of the safeguards from [email protected].

Third‑Party Links

Our website may contain links to external documentation or resources. We are not responsible for the privacy practices of external websites.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website.

Contact Information

For questions about this Privacy Policy or your personal data, contact us at:

Delaware Digital Application Solutions LLC, 8 The Green #21635, Dover, Delaware 19901, USA, Email: [email protected]