Privacy Policy
This Privacy Policy explains how Em Dangla, trading as Dangla Consulting ("I", "me"), collects and uses personal data when you visit danglaconsulting.com. I take your privacy seriously and comply with the EU General Data Protection Regulation (GDPR) and applicable Spanish data protection law.
1. Data Controller
2. What Data I Collect
Contact form
When you submit the contact form, I collect your name, email address, and message. This data is processed via Web3Forms and sent to my inbox. I do not store form submissions on this website's server.
Booking a consultation session
When you book a paid consultation session on the Consulting page, I collect your name, email address, and your answers to the booking questions (what you want to work on, how you would like the answer, which area it falls under), and, if you provide them, your company name and VAT number for the invoice. Scheduling is handled by Cal.com. Payment is processed by Stripe: your card details go directly to Stripe and never reach me. I receive confirmation of the payment, the amount, and the booking details. If a session is held by video call and you ask for a recording, the recording is stored with the video provider used for the call and shared only with you.
Analytics cookies (only if you consent)
If you accept analytics cookies, Google Analytics 4 collects anonymised usage data: pages visited, time on site, approximate location (country/city), device type, and referral source. No personally identifiable information is collected by analytics. You can withdraw consent at any time using the "Cookie settings" link in the footer.
3. Legal Basis for Processing
- Contact form: Art. 6(1)(b) GDPR, processing necessary for pre-contractual steps at your request.
- Consultation sessions: Art. 6(1)(b) GDPR, processing necessary to perform the contract you enter into when you book, and Art. 6(1)(c) GDPR for invoicing and tax record-keeping.
- Analytics: Art. 6(1)(a) GDPR, your explicit consent.
4. How I Use Your Data
- To respond to your inquiry or consulting request.
- To schedule, prepare, deliver, and invoice a consultation session you have booked.
- To understand how visitors use this site and improve it (analytics, only with consent).
- I do not sell, rent, or share your personal data with third parties for marketing purposes.
5. Third-Party Processors
- Web3Forms - contact form submission handler. Privacy policy.
- Google Analytics (only if you consent) - website analytics. Privacy policy.
- Cal.com, Inc. - scheduling and booking management for consultation sessions. Privacy policy.
- Stripe Payments Europe, Ltd. - payment processing for consultation sessions. Privacy policy.
- Vercel Inc. - website hosting provider. Server logs (IP address, access time, pages requested) may be retained for security purposes in accordance with Vercel's privacy policy.
6. Data Retention
- Contact form enquiries: Retained in email as long as the professional relationship is active or as long as necessary to fulfil legal obligations.
- Booking and payment records: Retained for as long as Spanish tax and commercial law require me to keep invoices and the records behind them, then deleted.
- Session notes and recordings: Retained as long as needed to deliver the written summary and any agreed follow-up, unless you ask me to delete them earlier.
- Analytics data: Retained per Google Analytics' data retention settings (default: 14 months). You can opt out at any time.
- Server logs: Retained for up to 7 days by the hosting provider.
7. Cookies
This site uses two categories of cookies:
- Essential cookies: Required for basic site functionality (e.g. storing your cookie preference). These cannot be disabled.
- Analytics cookies: Google Analytics cookies, loaded only with your consent. You can manage your preferences at any time via the "Cookie settings" link in the footer.
The booking calendar on the Consulting page loads only when you click "Show available times". Once loaded, Cal.com and Stripe may set functional and fraud-prevention cookies inside that widget. They are needed to complete the booking and payment you have requested and are not used for tracking across this site.
8. Your Rights Under GDPR
You have the right to:
- Access - request a copy of personal data I hold about you.
- Rectification - ask me to correct inaccurate data.
- Erasure - request deletion of your data ("right to be forgotten").
- Restriction - ask me to limit how I use your data.
- Data portability - receive your data in a structured, machine-readable format.
- Object - object to processing based on legitimate interest.
- Withdraw consent - withdraw analytics consent at any time without affecting prior processing.
To exercise any of these rights, email me at . I will respond within 30 days.
You also have the right to lodge a complaint with the Spanish data protection authority: Agencia Espanola de Proteccion de Datos (AEPD).
9. International Transfers
Google Analytics may transfer data to servers in the United States. Google participates in the EU-U.S. Data Privacy Framework, providing adequate safeguards under GDPR.
Cal.com, Inc. is based in the United States. Booking data is transferred under safeguards recognised by GDPR, such as the Standard Contractual Clauses, as described in Cal.com's privacy policy. Stripe processes payments for clients in the EU through Stripe Payments Europe, Ltd. (Ireland); any transfer to Stripe entities outside the EU is covered by Stripe's binding corporate rules and standard contractual clauses.
10. Changes to This Policy
I may update this policy from time to time. The date at the top of this page reflects the most recent version. Continued use of the site after changes constitutes acceptance of the updated policy.