This is the privacy policy for jonathanfreire.com. I take your privacy seriously and want to be clear about what happens with any information you share when you visit the site, book a call, or get in touch with me.

Who I am

I am Jonathan Freire, a sole trader (Einzelunternehmer) based in Germany. I work as a Digital Product Architect, helping ambitious companies with strategy, software engineering, and AI integration. I run the business on my own, with no team and no employees.

The "data controller" for this website is me. You can reach me about anything in this policy at jonathan.freireespinoza@gmail.com.

What I collect

I keep this short because I do not collect much, and there is no user account, no comment section, and no payment processing on this site.

Contact form. When you use the contact form, I receive your name, your email address, and the message you write.

Booking a call. When you book an intro call through the scheduling widget on the Contact page, I receive your name, your email address, the date and time you select, and any notes you choose to add. If you add other people as guests to the meeting, their email addresses are also submitted, so please make sure they are aware their contact details will be shared with the tools listed below for the purpose of holding the meeting.

Technical data. When you visit the site, my hosting provider (Vercel) automatically processes some technical data so the website can work. This typically includes your IP address, browser type, device type, the page you requested, and the time of the request. Vercel uses this data to deliver the site and keep it secure, acting as a processor on my behalf.

I do not knowingly collect any special categories of personal data (such as health information, political opinions, or religious beliefs).

How I use it

I use the information you give me through the contact form or the booking widget for one purpose: to read your message, or to schedule and hold the call you requested. The legal basis is Article 6(1)(b) of the GDPR (steps taken at your request before entering into a contract) or, where no project follows, Article 6(1)(f) (my legitimate interest in responding to enquiries you have initiated).

I keep contact form submissions and booking details in my email and calendar while we are in conversation, and for up to 12 months afterwards in case you come back with a follow-up. If we end up working together, the project records are kept for as long as German tax law requires, typically 10 years.

I use the technical data processed by Vercel to operate the website, prevent abuse, and troubleshoot problems. The legal basis is Article 6(1)(f) of the GDPR, my legitimate interest in running a secure and functional website. Vercel retains this data only as long as needed for this purpose, in line with their own policy.

I do not sell your data. I do not share it for marketing. I do not use it to build advertising profiles about you.

Who else receives your data

To run the site and deliver the services above, I rely on a small number of third-party tools. Each of them processes a limited set of data on my behalf, under their own security and privacy terms:

• Cal.eu (booking widget): processes your name, email, and meeting details to let you schedule a call with me. Hosted on EU servers. See their Terms and Privacy Policy.
• Google (Google Meet and Gmail): Cal.eu automatically generates a Google Meet link for the call, and I use Gmail to send and receive contact form emails. This means your email address, and the meeting time, are also processed by Google. See Google's Privacy Policy.
• Vercel (hosting): processes technical visitor data as described above. Vercel is certified under the EU–U.S. Data Privacy Framework and relies on Standard Contractual Clauses for any transfers outside the EEA. See Vercel's Privacy Notice.
• CookieYes (cookie consent management): records your cookie preferences so the site can remember your choice. See CookieYes's Privacy Policy.

I do not use any web analytics tool at this time.

Cookies

This site uses a cookie consent banner (provided by CookieYes) so you can choose which categories of cookies to allow. You can change your choice at any time through the "cookie preferences" link in the banner or footer.

A small number of cookies are strictly necessary and cannot be switched off, because the site or the booking widget cannot function without them — for example, session cookies set by Cal.eu's login system to protect the booking form from tampering, or the cookie CookieYes itself uses to remember your consent choice.

For the exact list of cookies currently in use, their duration, and their purpose, please open the cookie preferences panel rather than relying on this page — third-party tools can add or change cookies at any time without notice, so the banner is kept automatically up to date while this text is not.

I do not currently use any cookies for advertising or analytics. If that changes in the future, I will update this section and the cookie banner, and no new non-essential cookie will be set without your consent first.

Your rights

Under the GDPR you have a number of rights when it comes to your personal data. In short, you can:

• ask me what I hold about you and get a copy (Article 15)
• have me correct anything that is wrong (Article 16)
• ask me to delete your data (Article 17)
• ask me to pause processing in certain situations (Article 18)
• receive your data in a portable format (Article 20)
• object to processing based on legitimate interest (Article 21)
• withdraw consent at any time, if processing is based on consent (Article 7(3))

To use any of these rights, just email me at jonathan.freireespinoza@gmail.com. I will respond within 30 days, as required by law.

You also have the right to lodge a complaint with the data protection authority responsible for your region. In Germany, the Federal Commissioner for Data Protection (BfDI) maintains a directory of regional authorities at bfd.bund.de, where you can find the one that applies to you.

Data security

Your data is processed on Vercel's infrastructure and Cal.eu's booking platform, both of which apply industry standard security measures including encryption in transit and access controls on their side.

On my side, I keep contact form submissions and booking details in a private email and calendar account and only access them to reply to you or prepare for the call. I do not share access with anyone.

No system is completely secure, and I cannot guarantee absolute protection. If something does go wrong, I will tell you and notify the relevant authority as required by law.

Changes to this policy

I may update this policy from time to time, for example if I add a new feature, change a tool, or respond to new legal requirements. The current version is always the one on this page, with the "last updated" date at the top. If a change is significant, I will make a reasonable effort to flag it.

Contact

The easiest way to reach me about anything in this policy, including any of your rights, is by email: jonathan.freireespinoza@gmail.com.

I read every message myself and will get back to you as soon as I can.