PRIVACY NOTICE

1. Controller

2. Hosting and server logs

This website is provided through ChatGPT Sites. Our technical service provider and processor is OpenAI Ireland Limited, 1st Floor, The Liffey Trust Centre, 117–126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland.

When the website is accessed, technically necessary connection and log data may be processed. This may include the IP address, request time and destination, browser and device information, referrer, and diagnostic and security data. Processing is necessary to provide a secure, stable and reliable website and to prevent misuse. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of this online service.

Data is kept only for as long as necessary for these purposes and is then deleted unless legal obligations or security requirements justify longer retention. Safeguards required by the GDPR are used for transfers to third countries. Further information is available in the ChatGPT Sites Data Processing Addendum.

3. Contact and enquiries

If you contact us by email or use the enquiry form, we process the details you provide, including your name, email address, company or occasion and message. When you submit the form, these details are sent securely to our website and delivered to us through the Web3Forms form service.

Data is processed to respond to your enquiry and take steps before entering into a contract under Article 6(1)(b) GDPR. General business correspondence is processed under Article 6(1)(f) GDPR based on our legitimate interest in orderly business communication. Enquiries are deleted when completed unless statutory retention duties or legitimate interests require continued storage.

Our technical service provider and processor is Web3Creative, which operates Web3Forms from India. Data is transmitted securely. Web3Forms uses infrastructure providers including AWS, Cloudflare and Hetzner; the submitter's IP and email address may be shared with the spam prevention providers listed in its Data Processing Agreement. Form submissions are retained for no more than three years unless deleted earlier or a shorter retention period applies. Appropriate safeguards, including the EU Standard Contractual Clauses, apply to international transfers. Further information is available in Web3Forms' privacy policy and Data Processing Addendum.

4. Booking through Calendly

This website contains an external link to our Calendly booking page. No Calendly widget is embedded. Only after you activate the link do you leave this website and Calendly processes data under its own privacy notice. We use appointment details submitted through Calendly to prepare and conduct the requested conversation under Article 6(1)(b) GDPR.

5. External Instagram and LinkedIn links

This website only contains external links to Instagram and LinkedIn. No social-media plugins, feeds or tracking pixels are loaded. Once you click a link, the respective provider's privacy terms apply: Instagram and LinkedIn.

6. Cookies and audience measurement

We currently use no analytics tools, advertising trackers or embedded social-media plugins. The hosting infrastructure may use strictly necessary storage mechanisms where required for security and delivery.

7. Your rights

Subject to the statutory requirements, you have rights of access, rectification, erasure, restriction, data portability and objection. You may withdraw consent at any time with effect for the future. To exercise your rights, email hello@diegoprojects.com.

You also have the right to lodge a complaint with a data protection authority. For private-sector organisations in Bavaria, the relevant authority is in particular the Bavarian State Office for Data Protection Supervision.

8. Security and updates

The website is transmitted using HTTPS encryption. We update this notice when our services, technology or the legal framework change.