Privacy

Contact enquiries

The Contact page asks for your full name, email address, and message so the enquiry can be read, managed, and answered. Please do not include confidential or sensitive personal information.

In direct-email mode, the form opens a draft in your own email application and this website does not store the form contents. When API submission is enabled, an accepted message is stored in Supabase before a notification is attempted through Resend and received through Google Workspace. A notification failure does not erase the stored enquiry.

Purpose and retention

Contact details are used only to assess and respond to an enquiry and to maintain necessary correspondence. The intended legal basis is the legitimate interest in responding to enquiries and, where applicable, taking steps you request before entering an agreement.

Ordinary enquiries are scheduled for automatic deletion 12 months after the last relevant interaction recorded for the enquiry. If correspondence becomes a contractual or other required business record, it moves to the applicable record-keeping process instead of remaining indefinitely in the website inbox.

Verification and abuse prevention

API submissions use Cloudflare Turnstile, a hidden trap field, an elapsed-time signal, a random request identifier, and short-lived rate limits. This application does not store raw IP addresses or browser fingerprints in its database or application logs. It derives keyed, pseudonymous rate-limit signals that expire within 24 hours.

Cloudflare and other infrastructure providers may still process network identifiers and operational telemetry under their own terms. A keyed hash is pseudonymous data, not anonymous data.

Service providers and transfers

Hostinger serves the website. Supabase stores accepted enquiries and provides server functions. Cloudflare provides Turnstile verification. Resend attempts the owner notification, and Google Workspace receives and holds email correspondence. These providers may process content and operational telemetry in the locations and under the safeguards described in their current privacy and data-processing terms, including transfers outside the European Economic Area where applicable.

Optional analytics

Analytics are disabled in the default release package. If the owner configures Google Analytics, it remains off until you explicitly allow it. A consent preference may then be stored in your browser so the site can remember your choice. No advertising consent is requested or granted by this site.

Local preferences and external links

Apart from an optional analytics choice, this site does not use browser storage for public tracking. Links to email, LinkedIn, and the separate AEAS website leave this site and are governed by those services' own privacy practices.

Your choices and questions

You may ask whether your information is held and request access, correction, deletion, restriction, or object to processing where those rights apply. You may also raise a concern with your local data-protection authority.

For a privacy request, email contact@atanasseri.com.