Privacy Policy
Last updated: May 2025
This is a courtesy translation. The German version is the legally binding version of this policy.
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is the person named above. They decide on the purposes and means of processing personal data in connection with this website.
2. Scope and applicability of the GDPR
This website is also directed at prospective clients in the European Union. Even though the controller is based outside the EU, the GDPR applies pursuant to Art. 3(2) GDPR to the processing of personal data of persons in the EU in connection with this offering.
As the data processing carried out through this website only occurs occasionally, does not involve special categories of personal data (Art. 9 GDPR), and — taking into account the nature, scope, circumstances and purposes of the processing — is unlikely to result in a risk to the rights and freedoms of natural persons, the appointment of a representative in the Union is waived pursuant to Art. 27(2)(a) GDPR.
3. Overview of processing activities
This website is a one-pager without a newsletter, without cookies, and without tracking or analytics tools. Personal data is only processed in the following cases:
- as a technical consequence of visiting the website, via the web hosting provider (server log files, see section 5),
- if you use the contact form on this website (see section 6.2), or
- if you contact us directly by email (see section 6.1).
4. Legal bases
Insofar as we require a legal basis for processing personal data, we rely on:
- Art. 6(1)(b) GDPR, where processing is necessary for the performance of a contract or to take pre-contractual steps (e.g. inquiries about our services),
- Art. 6(1)(f) GDPR, where processing is necessary for the purposes of legitimate interests (e.g. IT security, operation of the website).
5. Provision of the website and web hosting (server log files)
When you access this website, our hosting provider automatically collects information in so-called server log files, which your browser automatically transmits. These typically include:
- the IP address of the accessing device (potentially truncated/anonymized)
- date and time of access
- the file or page accessed and the amount of data transferred
- browser and operating system used
- the previously visited page (referrer URL), if transmitted
This data is used exclusively for the technical provision and security of the website's operation (detecting and defending against attacks, error analysis) and is not combined with other data sources. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the secure and functional operation of the website). Log files are automatically deleted after a short, industry-standard period, unless a security-relevant incident requires longer retention.
6. Contacting us
6.1 Contact by email
Some contact options on this website (e.g. "Let's talk", "Email Miguel directly") open a mailto link that launches your own local email application with a pre-filled message. No data transfer to, or storage by, this website occurs in doing so.
If you subsequently send us an actual email, we process the data you provide (including your sender address, name, and message content) exclusively to handle your inquiry. The legal basis is Art. 6(1)(b) GDPR (pre-contractual inquiry) or Art. 6(1)(f) GDPR (legitimate interest in responding to your inquiry).
6.2 Contact form
This website additionally offers a contact form. The data you enter there (name, email address, message text) is processed exclusively for the purpose of handling your inquiry and any follow-up questions. The legal basis is Art. 6(1)(b) GDPR (pre-contractual inquiry) or Art. 6(1)(f) GDPR (legitimate interest in efficient, spam-protected handling of inquiries).
The technical delivery of the form is handled by the email forwarding service FormSubmit (formsubmit.co). Your form input is transmitted to this third-party provider's servers and forwarded from there by email to miguelregoseo@mailfence.com. According to its own statements, FormSubmit does not permanently store submitted form data, but processes it only for immediate forwarding. The service may also process data on servers outside the EU/EEA; insofar as a transfer to a third country takes place, this is based on appropriate safeguards within the meaning of Art. 44 et seq. GDPR, to the extent provided by the vendor. Further information is available directly from the provider at formsubmit.co.
To protect against automated spam submissions, the form contains a hidden "honeypot" field that is not visible to human visitors and does not allow any conclusions to be drawn about your identity.
Data you submit via email or the contact form is deleted once it is no longer required to handle your request and no statutory retention obligations apply.
7. Cookies
This website does not use cookies.
8. Analytics, tracking and font tools
This website does not use any analytics, tracking or marketing tools (e.g. Google Analytics, Meta Pixel, etc.).
To display fonts, this website embeds web fonts from the provider Google Fonts, which are loaded from servers operated by Google Ireland Limited (or Google LLC, USA). This technically requires your device's IP address to be transmitted to Google; we do not store the transmitted data ourselves. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a consistent and performant presentation of the website). Information on Google's data processing can be found in Google's privacy policy.
9. Disclosure of data to third parties
Your personal data is not transferred to third parties for purposes other than those stated in this policy. Recipients of data within the processing activities described are exclusively:
- this website's hosting provider (server log files, section 5),
- Google Ireland Limited / Google LLC in connection with the use of Google Fonts (section 8), and
- FormSubmit (formsubmit.co) for the technical delivery of messages from the contact form (section 6.2).
Any further disclosure only takes place where we are legally obliged to do so or where you have given your prior consent.
10. Your rights as a data subject
Under the GDPR, you have the following rights against the controller:
- the right of access to data stored about you (Art. 15 GDPR)
- the right to rectification of inaccurate data (Art. 16 GDPR)
- the right to erasure of data we hold about you (Art. 17 GDPR)
- the right to restriction of processing, where the statutory requirements are met (Art. 18 GDPR)
- the right to data portability, where you have consented to processing or entered into a contract with us (Art. 20 GDPR)
- the right to object to the processing of your data, where it is based on Art. 6(1)(f) GDPR (Art. 21 GDPR)
- the right to withdraw consent given, with effect for the future (Art. 7(3) GDPR)
An informal email to miguelregoseo@mailfence.com is sufficient to exercise these rights.
11. Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your habitual residence, place of work, or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR (Art. 77 GDPR).
12. Data security
This website is transmitted via an encrypted connection (SSL/TLS), recognizable by "https://" in your browser's address bar, to protect the transmission of confidential content.
13. Changes to this privacy policy
We reserve the right to adapt this privacy policy so that it always complies with current legal requirements, or to reflect changes to our services. The new privacy policy will then apply to your next visit.