Privacy Policy

1. Data Controller

The data controller responsible for personal data collected via this website is:

2. What Personal Data We Collect

Through the contact form on this website, we may collect the following information:

• Name
• Email address
• Phone number (optional)
• Message/inquiry
• Attached files (documents you submit via the form)
• Type of service you are interested in

3. Purpose of Processing

Your personal data is used solely to respond to your inquiry and, where applicable, to deliver the services you have requested. We do not use your information for marketing or any other purposes.

4. Legal Basis

The processing of personal data is based on:

• Consent (GDPR Art. 6(1)(a)) - by submitting the contact form, you consent to the processing of your data for responding to your inquiry.
• Legitimate interest (GDPR Art. 6(1)(f)) - to provide and deliver our services.

5. Data Retention

Inquiries and associated personal data are retained for as long as necessary to respond to your request and, if applicable, to complete an assignment. Data that is no longer needed is deleted within 12 months of the last contact, unless legal obligations require longer retention.

6. Third Parties and Data Processors

To operate this website and process inquiries, we use the following third-party services:

• Resend - for sending emails from the contact form. Data is processed in accordance with Resend's privacy policy.
• Cloudflare Pages - for website hosting. Cloudflare may process technical data (IP addresses, browser data) in accordance with its privacy policy.

We never sell or share your personal data with third parties for marketing purposes.

7. Cookies

This website uses only technically necessary cookies for the site to function correctly. We do not use any tracking or analytics cookies. No personal data is stored in cookies.

8. Your Rights

Under the General Data Protection Regulation (GDPR), you have the right to:

• Access - find out what data we hold about you
• Rectification - have incorrect data corrected
• Erasure - request deletion of your data
• Data portability - receive your data in a structured format
• Objection - object to the processing of your data
• Withdraw consent - when processing is based on consent

To exercise your rights, please contact us at: post@mariawandavaiarello.com.

9. Right to Complain

If you believe that the processing of your personal data violates data protection regulations, you may file a complaint with the Norwegian Data Protection Authority (Datatilsynet): www.datatilsynet.no.