Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

2. Data We Collect

a) Contact Form

When you use the contact form, we collect your name, email address, optional company name, and your message. This data is processed solely to respond to your inquiry and is transmitted via FormSubmit.co, a third-party form processing service. We do not store form submissions ourselves.

b) Website Analytics

This website uses Vercel Analytics to collect anonymised usage data (page views, referrers, country-level location). No personal data or cookies are used. Vercel Analytics is GDPR-compliant and privacy-friendly by design.

c) Server Logs

Like all websites, our hosting provider (Vercel) may automatically log technical data such as IP addresses, browser type, and page requests in server logs for security and operational purposes. These logs are retained for a short period and are not used for tracking.

3. Legal Basis for Processing

We process your data on the following legal bases under the GDPR:

• Art. 6(1)(b) GDPR — Processing necessary to respond to your contact request (contractual performance / pre-contractual steps).
• Art. 6(1)(f) GDPR — Legitimate interest in operating and securing this website (server logs, anonymised analytics).

4. Data Retention

Contact form data (transmitted via FormSubmit.co) is retained only as long as necessary to handle the inquiry. Anonymised analytics data does not contain personal identifiers and is not subject to deletion requests.

5. Third-Party Services

• FormSubmit.co — Processes contact form submissions. See their privacy policy.
• Vercel Inc. — Hosting provider and analytics. See Vercel's privacy policy.
• Google Fonts — Fonts are loaded from Google's servers, which may log your IP address. See Google's privacy policy.
• TidyCal — If you use the "Book a Call" feature, you will be redirected to TidyCal.com. See TidyCal's privacy policy.

6. Your Rights

Under the GDPR, you have the right to:

• Access the personal data we hold about you (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure of your data where no longer necessary (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Object to processing based on legitimate interests (Art. 21 GDPR)
• Lodge a complaint with a supervisory authority

To exercise any of these rights, please contact us at gabriel@marchesan.me.

7. Supervisory Authority

You have the right to lodge a complaint with the relevant data protection supervisory authority. In Germany, the competent authority is the Landesbeauftragte für Datenschutz und Informationsfreiheit Baden-Württemberg (LfDI BW).

8. Changes to this Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date.