PRIVACY Policy

2. Data Controller

The data controller responsible for processing your personal data is:

[COMPANY_NAME]
[COMPANY_ADDRESS]
Registration number: [COMPANY_REGISTRATION_NUMBER]
Email: hello@atama.agency

3. Data We Collect

3.1 Information You Provide

When you contact us, submit a project inquiry, or use our contact form, we may collect:

• Your name
• Email address
• Phone number (if provided)
• Company or organisation name
• Project details and any other information you choose to share in your message

3.2 Automatically Collected Data

When you visit our website, we may automatically collect certain technical information, including:

• Pages visited and referring pages
• Browser type and version
• Operating system
• Device type (desktop, mobile, tablet)
• Country of origin (derived from anonymised IP)
• Visit duration and page views

We use Plausible Analytics, a privacy-friendly analytics service that does not use cookies, does not collect personal data, and does not track individual users across websites. All data collected by Plausible is aggregated and anonymous. Plausible is hosted in the EU and is fully GDPR compliant. For more information, visit Plausible's data policy.

4. How We Use Your Data

We use personal data for the following purposes:

• To respond to inquiries: When you contact us via email or a contact form, we use your data to reply and discuss your project.
• To provide our services: To deliver web design and development services as agreed with you.
• To improve our website: Aggregated, anonymous analytics help us understand which pages are most useful and how to improve user experience.
• To comply with legal obligations: Where required by applicable law, such as tax and accounting requirements.

5. Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR Article 6:

• Consent (Art. 6(1)(a)): When you voluntarily submit a contact form or send us an email.
• Contract performance (Art. 6(1)(b)): When processing is necessary to deliver services you have requested or to take pre-contractual steps at your request.
• Legitimate interest (Art. 6(1)(f)): To operate and improve our website and services, provided this does not override your rights and freedoms.
• Legal obligation (Art. 6(1)(c)): Where we are required to process data to comply with applicable laws.

6. Cookies

Our website uses minimal cookies. Because we use Plausible Analytics, which is cookie-free, no analytics cookies are set. We may use essential functional cookies required for the website to operate correctly (e.g., remembering your cookie consent preference).

For full details, please see our Cookie Policy.

7. Third-Party Services

We may share or process your data through the following third-party services:

• Plausible Analytics — Privacy-friendly website analytics (no personal data collected). Hosted in the EU.
• Google Fonts — Fonts are loaded from Google's servers. Google may receive your IP address when fonts are loaded. See Google's Privacy Policy.
• Email provider — When you email us, your message is processed by our email service provider.

We do not sell, rent, or trade your personal data to any third parties.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Contact form and email inquiries: Retained for up to 12 months after the last communication, unless a business relationship is established.
• Client project data: Retained for the duration of the client relationship and up to 5 years thereafter for legal and accounting purposes.
• Analytics data: Plausible retains only aggregated, anonymous data. No personal data is stored.

9. Your Rights Under GDPR

As a data subject, you have the following rights under the GDPR:

• Right of access (Art. 15): Request a copy of the personal data we hold about you.
• Right to rectification (Art. 16): Request correction of inaccurate or incomplete data.
• Right to erasure (Art. 17): Request deletion of your personal data ("right to be forgotten").
• Right to restrict processing (Art. 18): Request that we limit how we use your data.
• Right to data portability (Art. 20): Request a machine-readable copy of your data.
• Right to object (Art. 21): Object to processing based on legitimate interest.
• Right to withdraw consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at hello@atama.agency. We will respond to your request within 30 days.

You also have the right to lodge a complaint with your local data protection supervisory authority.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encrypted connections (HTTPS/TLS), secure hosting infrastructure, and access controls.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee its absolute security.

11. International Data Transfers

Where your data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or an adequacy decision by the European Commission, in accordance with GDPR Chapter V.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically.

13. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us:

[COMPANY_NAME]
[COMPANY_ADDRESS]
Email: hello@atama.agency