Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

2. Data We Collect

a) Contact Form

When you use the contact form, we collect your name, email address, optional company name, and your message. This data is processed solely to respond to your inquiry. Your message is processed on our own server and delivered by email through Resend, an email delivery service. To filter spam, the form is protected by Cloudflare Turnstile, which processes your IP address to run a bot challenge. We do not store form submissions in a database ourselves.

b) Analytics

This website uses Hostinger's server-side analytics (built into the hosting plan) — no third-party analytics, no tracking pixels, no advertising cookies. Hostinger collects server-side request counts, IP addresses (for country-level geographic aggregation only), and HTTP status codes for error monitoring. No cookies are set. No personal data is collected. No cross-site profiling.

c) Server Logs

Like all websites, our hosting provider (Hostinger) may automatically log technical data such as IP addresses, browser type, and page requests in server logs for security and operational purposes. These logs are retained for a short period and are not used for tracking.

3. Legal Basis for Processing

We process your data on the following legal bases under the GDPR:

• Art. 6(1)(b) GDPR — Processing necessary to respond to your contact request (contractual performance / pre-contractual steps).
• Art. 6(1)(f) GDPR — Legitimate interest in operating and securing this website (server logs).

4. Data Retention

Contact form data (delivered via Resend) is retained only as long as necessary to handle the inquiry.

5. Third-Party Services

• Resend — Delivers contact form emails to my inbox. See their privacy policy.
• Cloudflare Turnstile — Protects the contact form from spam and bots, processing your IP address for the bot challenge. See Cloudflare's privacy policy.
• Hostinger — Web hosting provider (server infrastructure and logs). See Hostinger's privacy policy.
• Google Fonts — Fonts are loaded from Google's servers, which may log your IP address. See Google's privacy policy.
• TidyCal — If you use the "Book a Call" feature, you will be redirected to TidyCal.com. See TidyCal's privacy policy.
• WhatsApp — If you click the WhatsApp button, you will be redirected to whatsapp.com (Meta). The pre-filled message is sent to my phone via WhatsApp's servers. See WhatsApp's privacy policy.

6. Your Rights

Under the GDPR, you have the right to:

• Access the personal data we hold about you (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure of your data where no longer necessary (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Object to processing based on legitimate interests (Art. 21 GDPR)
• Lodge a complaint with a supervisory authority

To exercise any of these rights, please contact us at gabriel@marchesan.me.

7. Supervisory Authority

You have the right to lodge a complaint with the relevant data protection supervisory authority. In Germany, the competent authority is the Landesbeauftragte für Datenschutz und Informationsfreiheit Baden-Württemberg (LfDI BW).

8. Changes to this Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date.