Privacy policy

1. Controller

The controller responsible for data processing on this website is:

2. The short version

• This website uses no cookies, no analytics and no tracking or advertising tools.
• Fonts are hosted on this website itself, so no data is sent to Google or other font providers.
• Personal data is only processed when you contact me, and only to respond to you.

3. Hosting and server log files

This website is hosted by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA (Cloudflare Pages). When you visit the site, the hosting provider automatically processes technical data that your browser transmits: IP address, date and time of the request, page requested, referrer URL, browser type and operating system. This data is needed to deliver the website securely and reliably and is not combined with other data sources.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in the secure and stable operation of the website). The provider may process data in the USA. Transfers are based on the EU–US Data Privacy Framework and/or the EU Standard Contractual Clauses.

4. Contact form

If you send a brief through the contact form, the details you enter (name, email address, business or website, the services you are interested in, your preferred start date and your message) are transmitted to the form service FormSubmit (formsubmit.co), which forwards them to me by email. FormSubmit does not use the data for its own purposes.

I use this data only to handle your enquiry and any follow-up questions. Legal basis: Art. 6 (1) (b) GDPR if your enquiry relates to a contract or pre-contractual steps, otherwise Art. 6 (1) (f) GDPR (legitimate interest in responding to enquiries). Your data is deleted once your enquiry has been fully dealt with, unless statutory retention obligations apply (for example for business correspondence).

5. Contact by email or phone

If you contact me by email or phone, your details (name, contact details, content of your message) are processed to handle your enquiry. Emails are received through Google Gmail (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland), which may process data in the USA on the basis of the EU–US Data Privacy Framework. Legal basis and storage period as in section 4.

6. Links to LinkedIn

This website contains plain links to my LinkedIn profile. No data is transmitted to LinkedIn when you visit this website. Only if you click a link are you taken to LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland), whose privacy policy then applies.

7. Your rights

Under the GDPR you have the right to:

• access the personal data I hold about you (Art. 15 GDPR),
• have inaccurate data corrected (Art. 16 GDPR),
• have your data deleted (Art. 17 GDPR),
• restrict processing (Art. 18 GDPR),
• receive your data in a portable format (Art. 20 GDPR),
• object to processing based on legitimate interests (Art. 21 GDPR),
• withdraw any consent you have given at any time, with effect for the future (Art. 7 (3) GDPR).

To exercise these rights, simply email margalzerano@gmail.com.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for me is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany.

8. Security

This website uses SSL/TLS encryption (recognisable by “https://” in the address bar), so data you send, such as through the contact form, cannot be read by third parties in transit.

Last updated: November 2026