A
Loading…
Loading…
Transparent record of all personal data we process
Last updated: January 2026
This Data Handling Policy provides a transparent record of every category of personal data that Alffy (Alfinega) collects, why we collect it, how it is stored, how long it is kept, and the legal basis under which it is processed. This document supports our commitment to GDPR compliance and user privacy.
Data Collected
Name, email address, phone number (optional), service interest, project description
Purpose
To respond to enquiries and provide requested services
Storage Location
Email inbox + CRM (if applicable)
Retention Period
24 months or until deletion is requested
Legal Basis (GDPR Art. 6)
Legitimate interest / ConsentData Collected
Page views, session duration, referrer URL, browser type, country (anonymised)
Purpose
To understand site usage and improve the user experience
Storage Location
Google Analytics (if enabled) — data stored on Google servers
Retention Period
14 months (Google Analytics default)
Legal Basis (GDPR Art. 6)
Consent (opt-in via cookie banner)Data Collected
IP address, request path, HTTP status code, timestamp
Purpose
Security monitoring and error diagnosis
Storage Location
Vercel infrastructure logs
Retention Period
30 days (Vercel default)
Legal Basis (GDPR Art. 6)
Legitimate interestData Collected
Email address, message content, metadata
Purpose
Project communication and customer support
Storage Location
Gmail (Google Workspace) — encrypted at rest and in transit
Retention Period
Duration of client relationship + 2 years
Legal Basis (GDPR Art. 6)
Contract / Legitimate interestRight to Access
Request a copy of all data we hold about you.
Right to Rectification
Request correction of inaccurate data.
Right to Erasure
Request deletion of your data ('right to be forgotten').
Right to Restriction
Request we limit how we use your data.
Right to Portability
Request your data in a machine-readable format.
Right to Object
Object to processing based on legitimate interest.
To exercise any of these rights, email alffy-alfinega@gmail.com with the subject line "Data Request". We will respond within 30 days.
| Processor | Purpose | Data Location |
|---|---|---|
| Vercel | Website hosting & server infrastructure | USA (EU transfers covered by SCCs) |
| Google (Gmail) | Email communications | USA (EU transfers covered by SCCs) |
| Google Analytics (optional) | Site analytics — only with cookie consent | USA (anonymised) |
| Nodemailer / SMTP | Contact form email delivery | Configured per SMTP provider |