Privacy Policy
Effective Date: August 23, 2025
We never sell, share, or trade your personal information with third parties for marketing or any other purposes. All communications remain strictly confidential, and we retain data only as long as necessary for service provision and legal compliance.
1. Controller Information
This website ("we") is the data controller. Contact via the secure contact form on this website.
2. Data Collection
We collect: (a) Contact information: name, email, phone number, message content submitted via forms; (b) Newsletter subscriptions: email address only; (c) Technical data: IP address, browser type, device information via analytics services (PostHog EU, Vercel Analytics).
3. Legal Basis
Processing occurs under: (a) Legitimate interests for responding to inquiries and service provision; (b) Contract performance for agreed services; (c) Consent for analytics cookies and newsletter subscriptions.
4. Data Processing
Form submissions are transmitted via Resend API to ProtonMail. No database storage occurs. Email communications are retained for legal compliance periods. Analytics data is processed by PostHog (EU servers) and Vercel Analytics.
5. Recipients
We never sell, rent, or trade your personal data to third parties. Data is only shared with: (a) Service providers under strict data processing agreements necessary for website operation (Resend, PostHog, Vercel, ProtonMail); (b) A single, permanent technical advisor who built and maintains this website under strict confidentiality agreements; (c) Regulatory authorities only where legally required. All service providers are prohibited from using your data for their own purposes.
6. Retention
Booking inquiries and correspondence: Max 6 years for legal and tax compliance
Verification documents: Processed transiently, retained only as needed for verification, then deleted
Newsletter subscriptions: Until withdrawal of consent
Analytics data: 12 months
Security logs: 30 days
7. Your Rights
You have rights to: access, rectification, erasure, data portability, object to processing, withdraw consent. Contact us to exercise these rights. Complaints may be lodged with your supervisory authority.
8. International Transfers
We prioritize EU data processing. PostHog data remains in EU. Resend (US) and hCaptcha (US) operate under Standard Contractual Clauses. Vercel processes in EU regions where available. ProtonMail operates from Switzerland with equivalent data protection standards.
9. Age Restriction
Services are restricted to individuals aged 18 and over. We do not knowingly collect data from minors.
10. Updates
This policy may be updated periodically. Material changes will be notified via website notice.