Privacy Policy

Effective Date: August 23, 2025

We never sell, share, or trade your personal information with third parties for marketing or any other purposes. All communications remain strictly confidential, and we retain data only as long as necessary for service provision and legal compliance.

1. Controller Information

This website ("we") is the data controller. Contact via the secure contact form on this website.

2. Data Collection

We collect: (a) Contact information: name, email, phone number, message content submitted via forms; (b) Newsletter subscriptions: email address only; (c) Technical data: IP address, browser type, device information via analytics services (PostHog EU, Vercel Analytics).

3. Legal Basis

Processing occurs under: (a) Legitimate interests for responding to inquiries and service provision; (b) Contract performance for agreed services; (c) Consent for analytics cookies and newsletter subscriptions.

4. Data Processing

Form submissions are transmitted via Resend API to ProtonMail. No database storage occurs. Email communications are retained for legal compliance periods. Analytics data is processed by PostHog (EU servers) and Vercel Analytics.

5. Recipients

We never sell, rent, or trade your personal data to third parties. Data is only shared with: (a) Service providers under strict data processing agreements necessary for website operation (Resend, PostHog, Vercel, ProtonMail); (b) A single, permanent technical advisor who built and maintains this website under strict confidentiality agreements; (c) Regulatory authorities only where legally required. All service providers are prohibited from using your data for their own purposes.

6. Retention

Booking inquiries and correspondence: Max 6 years for legal and tax compliance

Verification documents: Processed transiently, retained only as needed for verification, then deleted

Newsletter subscriptions: Until withdrawal of consent

Analytics data: 12 months

Security logs: 30 days

7. Your Rights

You have rights to: access, rectification, erasure, data portability, object to processing, withdraw consent. Contact us to exercise these rights. Complaints may be lodged with your supervisory authority.

8. International Transfers

We prioritize EU data processing. PostHog data remains in EU. Resend (US) and hCaptcha (US) operate under Standard Contractual Clauses. Vercel processes in EU regions where available. ProtonMail operates from Switzerland with equivalent data protection standards.

9. Age Restriction

Services are restricted to individuals aged 18 and over. We do not knowingly collect data from minors.

10. Updates

This policy may be updated periodically. Material changes will be notified via website notice.