Sogand Nobahar, brand strategist and creative director, VAT number IT10273510965, registered at Corso Roma 19, Monleale, Italy, is the data controller for this website.

Questions about this policy or about your data: sgnobahar@gmail.com

What this website does and does not do

This website is a portfolio and a description of professional services. It has no shop, no checkout, no payment processing and no user accounts. No product is sold here and no payment information is ever collected or stored.

There is no contact form. If you write to me, you do so by email, using your own email client.

What is collected

If you email me. Your email address, your name, and whatever you choose to write. This is collected because you sent it, and it is kept for as long as our correspondence is relevant, then deleted.

If you book a call. Calls are scheduled through Calendly, a third-party service. Calendly collects the name, email address and time you provide. Their privacy policy governs that data: https://calendly.com/privacy

If you visit the site. With your consent, Google Analytics collects anonymised usage data. Which pages you visit, how long you stay, roughly where in the world you are, and what kind of device you use. This is not linked to your name and I cannot identify you from it.

Automatically, by the server. Standard web server logs record IP addresses and request times. These are kept by the hosting provider for security purposes and are not used by me for anything else.

Legal basis

Consent (Article 6(1)(a)) for analytics and any non-essential cookies. You give it through the banner and you can withdraw it at any time.

Legitimate interest (Article 6(1)(f)) for security logging and for protecting the site against attacks.

Contract or pre-contractual steps (Article 6(1)(b)) when you contact me about work.

Legal obligation (Article 6(1)(c)) for invoicing and accounting records, which Italian law requires me to keep for ten years.

Who else processes your data

• Bluehost, website hosting and server logs
• Google Ireland Limited, analytics, with consent
• Calendly, scheduling, only if you book a call
• Hu-manity.co, consent management, records your cookie choice
• Gmail, email correspondence

None of these receive your data for their own marketing. Your data is never sold or rented.

Transfers outside the EU

Google Analytics and Calendly are United States companies and data may be transferred there. These transfers rely on the EU-US Data Privacy Framework and on Standard Contractual Clauses. If you decline analytics cookies, no analytics transfer takes place.

How long data is kept

• Email correspondence: for as long as it is relevant, then deleted
• Analytics: [14 MONTHS BY DEFAULT IN GA4 — CONFIRM YOUR SETTING]
• Server logs: as set by the hosting provider, typically 30 days
• Invoicing records: ten years, as Italian law requires
• Consent records: as retained by the consent management tool

Your rights

Under the GDPR you have the right to:

• Access the personal data held about you
• Have inaccurate data corrected
• Have your data deleted
• Restrict how your data is processed
• Receive your data in a portable format
• Object to processing based on legitimate interest
• Withdraw consent at any time, without affecting what was lawful before

Exercising these rights is free. Write to sgnobahar@gmail.com and I will respond within one month.

If you are not satisfied, you may complain to the Garante per la protezione dei dati personali, the Italian supervisory authority: www.garanteprivacy.it

Children

This site is not directed at children and does not knowingly collect data from anyone under 16.

Security

Data is protected using appropriate technical measures including HTTPS encryption and a website firewall. No transmission over the internet can be guaranteed completely secure, and you send information at your own risk.

Changes

This policy may be updated. The date at the top shows when it last changed.