Privacy Policy
Privacy Policy
Data protection notice pursuant to Art. 13 GDPR (General Data Protection Regulation).
Controller
Marco Casanova
TODO: full postal address (street, house number, postal code) for the Impressum
Munich, Germany
E-Mail: marco.casanova.de@outlook.com
This site, in plain terms
This is a static website with no analytics, no tracking scripts, no advertising, and no cookies beyond a single essential, non-tracking preference (your light/dark theme choice, stored only in your own browser and never transmitted anywhere).
Legal basis
Where you contact me about a potential project, processing your details is based on Art. 6(1)(b) GDPR (steps taken at your request prior to entering into a contract). For any other correspondence, it is based on Art. 6(1)(f) GDPR (my legitimate interest in responding to you).
Hosting
This site is hosted on GitHub Pages (GitHub, Inc., a subsidiary of Microsoft Corporation). Visiting any page causes your browser to send standard connection data (e.g. IP address, browser type, timestamp) to GitHub’s servers, which GitHub processes as the hosting provider to operate its infrastructure and for security purposes. I do not receive or store this data myself. See GitHub’s own privacy statement for details: https://docs.github.com/site-policy/privacy-policies/github-general-privacy-statement
Processing outside the EU/EEA
GitHub (hosting) and Calendly (scheduling) are both US-based providers. Where either processes personal data outside the EU/EEA, they rely on their own safeguards, such as the EU-US Data Privacy Framework or standard contractual clauses, as described in the privacy policies linked in this notice.
If you contact me by email
The "Email me" links on this site open your own email client with a pre-filled draft; nothing is sent until you choose to send it, and it goes directly to my inbox, not through this website or any third-party form service. Any personal data you include (name, company, message) is used solely to respond to your inquiry.
If you book a call
The "Book a call" links go to Calendly, a third-party scheduling service. If you book a call, Calendly processes the details you provide (e.g. name, email, the information you enter) under its own privacy policy: https://calendly.com/privacy. I only see the booking details you submit.
Retention
Email correspondence and Calendly booking details are kept only for as long as needed to handle your inquiry or the engagement that follows from it, plus any statutory retention period that applies to business correspondence under German commercial and tax law (typically up to 6 or 10 years for records tied to a contract).
Your rights
Under the GDPR you have the right to access, rectify, or erase your personal data, to restrict or object to its processing, to data portability, and to lodge a complaint with a supervisory authority. Since this site does not collect or store personal data on its own systems, most requests will concern email correspondence or a Calendly booking. Contact me directly for either.
Supervisory authority
The competent data protection authority for Bavaria is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA).