GUSTAVOBONANNO

GUSTAVOBONANNO

Privacy policy

Privacy policy

Privacy policy

Privacy policy

Last updated: 17 September 2025

Introduction

This Privacy Policy explains how Gustavo Bonanno (“we,” “us,” or “our”) collects, uses, shares, and protects personal data when you interact with our website gustavobonanno.com (and related domains during development) or when you work with me in the course of freelance design services.

At gustavobonanno.com, your privacy is important. This policy explains how we collect, use, and protect your information when you interact with the site or my freelance services.

This Privacy Policy explains how Gustavo Bonanno (“we,” “us,” or “our”) collects, uses, shares, and protects personal data when you interact with our website gustavobonanno.com (and related domains during development) or when you work with me in the course of freelance design services.

This Privacy Policy explains how Gustavo Bonanno (“we,” “us,” or “our”) collects, uses, shares, and protects personal data when you interact with our website gustavobonanno.com (and related domains during development) or when you work with me in the course of freelance design services.

1. Data Controller

The data controller is:
Name: Gustavo Bonanno
Email: hello@gustavobonanno.com
Location: Prague, Czech Republic

At gustavobonanno.com, your privacy is important. This policy explains how we collect, use, and protect your information when you interact with the site or my freelance services.

The data controller is:
Name: Gustavo Bonanno
Email: hello@gustavobonanno.com
Location: Prague, Czech Republic

The data controller is:
Name: Gustavo Bonanno
Email: hello@gustavobonanno.com
Location: Prague, Czech Republic

2. Information We Collect

We may collect the following categories of data:

  • Personal data you provide: your name, email address, phone number, project information, and other details you choose to share when you contact me or engage my services.

  • Automatically collected data: IP address, device type, browser version, operating system, pages visited, time spent on the site.

  • Cookies & tracking technologies: session cookies, analytics cookies, and functional cookies. See Section 7 below.

We do not knowingly collect data from children under 16.

We may collect the following categories of data:

  • Personal data you provide: your name, email address, phone number, project information, and other details you choose to share when you contact me or engage my services.

  • Automatically collected data: IP address, device type, browser version, operating system, pages visited, time spent on the site.

  • Cookies & tracking technologies: session cookies, analytics cookies, and functional cookies. See Section 7 below.

We do not knowingly collect data from children under 16.

We may collect the following categories of data:

  • Personal data you provide: your name, email address, phone number, project information, and other details you choose to share when you contact me or engage my services.

  • Automatically collected data: IP address, device type, browser version, operating system, pages visited, time spent on the site.

  • Cookies & tracking technologies: session cookies, analytics cookies, and functional cookies. See Section 7 below.

We do not knowingly collect data from children under 16.

3. Legal Basis for Processing (GDPR)

We process personal data under these legal bases:

  • Contract: to provide the freelance design services you request.

  • Consent: for optional activities like newsletters, marketing emails, or non-essential cookies.

  • Legitimate interests: to improve site functionality, prevent fraud, and maintain security.

  • Legal obligation: when required to comply with tax, accounting, or other laws.

We process personal data under these legal bases:

  • Contract: to provide the freelance design services you request.

  • Consent: for optional activities like newsletters, marketing emails, or non-essential cookies.

  • Legitimate interests: to improve site functionality, prevent fraud, and maintain security.

  • Legal obligation: when required to comply with tax, accounting, or other laws.

We process personal data under these legal bases:

  • Contract: to provide the freelance design services you request.

  • Consent: for optional activities like newsletters, marketing emails, or non-essential cookies.

  • Legitimate interests: to improve site functionality, prevent fraud, and maintain security.

  • Legal obligation: when required to comply with tax, accounting, or other laws.

4. How We Use Your Data

  • To provide and manage requested design services.

  • To communicate with you about projects, proposals, and inquiries.

  • To maintain and improve the website.

  • To analyze site usage and improve user experience.

  • To comply with legal and contractual obligations.

  • To provide and manage requested design services.

  • To communicate with you about projects, proposals, and inquiries.

  • To maintain and improve the website.

  • To analyze site usage and improve user experience.

  • To comply with legal and contractual obligations.

  • To provide and manage requested design services.

  • To communicate with you about projects, proposals, and inquiries.

  • To maintain and improve the website.

  • To analyze site usage and improve user experience.

  • To comply with legal and contractual obligations.

5. Sharing of Data

We do not sell or rent your personal data. We may share it only with:

  • Service providers
    Website hosting: Framer
    Analytics: Google Analytics (with IP anonymization enabled)
    Email/communication: Google Workspace

  • Legal authorities
    if required to comply with law.

  • Business transfers
    if there is a merger, sale, or restructuring.

All providers are bound by confidentiality. If providers are located outside the EU/EEA, data transfers take place under EU Standard Contractual Clauses or equivalent safeguards.


We do not sell or rent your personal data. We may share it only with:

  • Service providers:
    Website hosting: Framer
    Analytics: Google Analytics
    (with IP anonymization enabled)
    Email/communication: Google Workspace

  • Legal authorities
    if required to comply with law.

  • Business transfers
    if there is a merger, sale, or restructuring.

All providers are bound by confidentiality. If providers are located outside the EU/EEA, data transfers take place under EU Standard Contractual Clauses or equivalent safeguards.

We do not sell or rent your personal data. We may share it only with:

  • Service providers
    Website hosting: Framer
    Analytics: Google Analytics (with IP anonymization enabled)
    Email/communication: Google Workspace

  • Legal authorities
    if required to comply with law.

  • Business transfers
    if there is a merger, sale, or restructuring.

All providers are bound by confidentiality. If providers are located outside the EU/EEA, data transfers take place under EU Standard Contractual Clauses or equivalent safeguards.


We do not sell or rent your personal data. We may share it only with:

  • Service providers
    Website hosting: Framer
    Analytics: Google Analytics (with IP anonymization enabled)
    Email/communication: Google Workspace

  • Legal authorities
    if required to comply with law.

  • Business transfers
    if there is a merger, sale, or restructuring.

All providers are bound by confidentiality. If providers are located outside the EU/EEA, data transfers take place under EU Standard Contractual Clauses or equivalent safeguards.


6. Data Retention

Project and contact data: kept for up to 5 years after the last communication, to meet legal obligations (tax/accounting) and manage potential disputes.

  • Analytics data: retained for 14 months.

  • Marketing data (with consent): kept until you unsubscribe or withdraw consent.

  • After these periods, data is securely deleted.

Project and contact data: kept for up to 5 years after the last communication, to meet legal obligations (tax/accounting) and manage potential disputes.

  • Analytics data: retained for 14 months.

  • Marketing data (with consent): kept until you unsubscribe or withdraw consent.

  • After these periods, data is securely deleted.

Project and contact data: kept for up to 5 years after the last communication, to meet legal obligations (tax/accounting) and manage potential disputes.

  • Analytics data: retained for 14 months.

  • Marketing data (with consent): kept until you unsubscribe or withdraw consent.

  • After these periods, data is securely deleted.

7. Cookies and Tracking

We use cookies for:

  • Essential functionality: to make the site work correctly.

  • Analytics: aggregated visitor statistics through Google Analytics.

  • Preferences: remembering language or layout choices.

You can disable cookies in your browser settings. Analytics and non-essential cookies are only set with your consent (cookie banner).

We use cookies for:

  • Essential functionality: to make the site work correctly.

  • Analytics: aggregated visitor statistics through Google Analytics.

  • Preferences: remembering language or layout choices.

You can disable cookies in your browser settings. Analytics and non-essential cookies are only set with your consent (cookie banner).

We use cookies for:

  • Essential functionality: to make the site work correctly.

  • Analytics: aggregated visitor statistics through Google Analytics.

  • Preferences: remembering language or layout choices.

You can disable cookies in your browser settings. Analytics and non-essential cookies are only set with your consent (cookie banner).

8. Your Rights (GDPR/CCPA)

You have the right to:

  • Access a copy of your personal data.

  • Request correction of inaccurate data.

  • Request deletion of your personal data.

  • Restrict or object to processing.

  • Request data portability.

  • Withdraw consent at any time.

  • Lodge a complaint with the Czech Data Protection Authority (ÚOOÚ) or your local supervisory authority.

Requests can be made at hello@gustavobonanno.com. We respond within 30 days.

You have the right to:

  • Access a copy of your personal data.

  • Request correction of inaccurate data.

  • Request deletion of your personal data.

  • Restrict or object to processing.

  • Request data portability.

  • Withdraw consent at any time.

  • Lodge a complaint with the Czech Data Protection Authority (ÚOOÚ) or your local supervisory authority.

Requests can be made at hello@gustavobonanno.com. We respond within 30 days.

You have the right to:

  • Access a copy of your personal data.

  • Request correction of inaccurate data.

  • Request deletion of your personal data.

  • Restrict or object to processing.

  • Request data portability.

  • Withdraw consent at any time.

  • Lodge a complaint with the Czech Data Protection Authority (ÚOOÚ) or your local supervisory authority.

Requests can be made at hello@gustavobonanno.com. We respond within 30 days.

9. Security Measures

We use encryption (HTTPS/TLS), restricted access, and secure hosting with trusted providers. Despite these safeguards, no method of transmission or storage is completely secure, so absolute security cannot be guaranteed.

We use encryption (HTTPS/TLS), restricted access, and secure hosting with trusted providers. Despite these safeguards, no method of transmission or storage is completely secure, so absolute security cannot be guaranteed.

We use encryption (HTTPS/TLS), restricted access, and secure hosting with trusted providers. Despite these safeguards, no method of transmission or storage is completely secure, so absolute security cannot be guaranteed.

10. International Data Transfers

If personal data is transferred outside the EU/EEA (for example, to U.S. service providers such as Google), we ensure appropriate safeguards such as the EU Standard Contractual Clauses.

If personal data is transferred outside the EU/EEA (for example, to U.S. service providers such as Google), we ensure appropriate safeguards such as the EU Standard Contractual Clauses.

If personal data is transferred outside the EU/EEA (for example, to U.S. service providers such as Google), we ensure appropriate safeguards such as the EU Standard Contractual Clauses.

11. Changes to this Policy

We may update this policy. Significant changes will be communicated via email (if we have your contact info) or through a notice on our site. The “last updated” date reflects the current version.

We may update this policy. Significant changes will be communicated via email (if we have your contact info) or through a notice on our site. The “last updated” date reflects the current version.

We may update this policy. Significant changes will be communicated via email (if we have your contact info) or through a notice on our site. The “last updated” date reflects the current version.

12. Contact

Questions about this policy or your rights? Contact:
Email: hello@gustavobonanno.com
Address: Prague, Czech Republic

Questions about this policy or your rights? Contact:
Email: hello@gustavobonanno.com
Address: Prague, Czech Republic

Questions about this policy or your rights? Contact:
Email: hello@gustavobonanno.com
Address: Prague, Czech Republic