Privacy Policy

Last updated: 30. March 2026

1. Data controller and contact details

This website presents content created by Mara San Farino and is technically operated and managed by NsperaNova Ltd. The entity responsible for determining the purposes and means of the processing of your personal data is:

NsperaNova Ltd.
167–169 Great Portland Street
W1W 5PF London
England

Email: privacy@nsperanova.com


2. Personal data we collect, purpose
and legal basis for processing

a) Visiting this website

When you visit this website, our servers automatically records access logs to ensure the stability, security and proper functioning of the website. The following data may be processed:

· the file or page accessed,
· date and time of access,
· IP address,
· volume of data transferred,
· referrer URL (previously visited page),
· information about the browser and operating system used.

The processing of this data is technically necessary and takes place on the basis of our legitimate interests pursuant to Art. 6(1)(f) GDPR, particularly to ensure system security and to optimise our online offering. No direct personal identification of visitors takes place unless legally required (e.g. by law-enforcement authorities).

b) Contact and communication

Using the contact form

If you use our contact form, you will be required to enter your name and email address as well as a subject and message. Depending on the content, this may contain additional personal data. The legal basis for this processing is your consent pursuant to Art. 6(1)(a) GDPR.

Email communication

If you contact us by email, personal data contained in the email will be processed for the purpose of responding to your enquiry. The legal basis for this is Art. 6(1)(b) GDPR (steps prior to entering into a contract) or Art. 6(1)(f) GDPR (legitimate interests in processing and responding to enquiries). Please do not include special categories of personal data according to Art. 9 GDPR (such as data revealing racial or ethnic origin, political or religious beliefs, trade-union membership, biometric or genetic data for identification, health data or data concerning sex life or sexual orientation). If you nevertheless choose to provide such information voluntarily, we will process it only for the purpose of responding to your enquiry.

c) Cookies

This website does not use cookies for analytics, tracking, or marketing purposes. No session or persistent cookies are set.

To technically implement the dismissal of the notice regarding the non-use of cookies, a value is stored in your browser's local storage (LocalStorage). This does not constitute a cookie. The information remains exclusively on your device and is not transmitted to the server.

The legal basis for this processing is Art. 6(1)(f) GDPR (legitimate interests in providing a functional and user-friendly website).

d) Webhosting

This website is hosted and technically operated by NsperaNova Ltd. as part of its own infrastructure. The servers used for hosting are located in Germany. Further information on the processing of personal data can be found in the privacy policy of NsperaNova.

The legal basis for this processing is Art. 6(1)(f) GDPR (legitimate interests in ensuring secure and reliable hosting).

e) External links

This website may contain links to external websites (including, but not limited to, social networks).

No data is transmitted to such third parties when accessing this website. Data will only be transferred if you actively click on a corresponding link.

The respective provider is solely responsible for the processing of personal data on their website.

The legal basis for this processing is Art. 6(1)(f) GDPR (legitimate interests in enabling access to external content and resources).


3. Duration of the storage of personal data

The storage duration depends on the legal basis, purpose of processing and applicable statutory retention periods.

· Access logs according to 3.a) are deleted automatically after 30 days.
· Data processed on the basis of consent (Art. 6(1)(a) GDPR) is stored until you withdraw consent.
· Data necessary for contractual or statutory retention obligations (e.g. tax or commercial law) is stored until the retention period expires.
· Data processed on the basis of legitimate interests (Art. 6(1)(f) GDPR) is stored until you exercise your right to object, unless overriding legitimate grounds exist or the data is required for legal claims.
· For data processed for direct marketing, storage continues until objection under Art. 21(2) GDPR.


4. Disclosure of data to third parties

Your personal data will only be shared with third parties in the following cases:

· you have given explicit consent (Art. 6(1)(a) GDPR);
· disclosure is necessary to establish, exercise or defend legal claims (Art. 6(1)(f) GDPR);
· there is a legal obligation to disclose data (Art. 6(1)(c) GDPR);
· disclosure is necessary for contractual purposes (Art. 6(1)(b) GDPR).


5. Data security

Data transmission on this website is encrypted via TLS (Transport Layer Security, "https://"), visible through the lock symbol in your browser’s address bar. We implement appropriate technical and organisational measures to protect your data from unauthorised access (e.g. secure server configuration, encryption, access control, anti-malware tools).

Data submitted through our contact form is transmitted to us by email via TLS. Data stored on our servers is encrypted. Infrastructure providers have no access to decryption keys and therefore cannot view decrypted content.


6. Rights of data subjects

You have the following rights under the GDPR:

· Right to withdraw consent (Art. 7(3) GDPR)
· Right of access (Art. 15 GDPR)
· Right to rectification (Art. 16 GDPR)
· Right to erasure ("right to be forgotten") (Art. 17 GDPR)
· Right to restriction of processing (Art. 18 GDPR)
· Right to data portability (Art. 20 GDPR)
· Right to object to processing based on legitimate interests or direct marketing (Art. 21 GDPR)
· Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)


7. Objections and complaints

This section provides additional practical guidance on how to exercise your rights and where to direct complaints. If you believe that the processing of your personal data infringes data protection law or want to object to processing based on legitimate interests or direct marketing, please contact us directly under privacy@nsperanova.com. You also have the right to lodge a complaint with a supervisory authority.

For individuals located in the United Kingdom:
The competent authority is the:
Information Commissioner’s Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Email: icocasework@ico.org.uk
Tel: +44 303 123 1113

For individuals located in the European Economic Area (EEA):
You may lodge a complaint with the data protection authority of your place of residence, place of work, or the place of the alleged infringement. A list of supervisory authorities is available at: https://edpb.europa.eu/about-edpb/board/members_en .

For individuals located outside the UK and EEA:
Please contact us directly with any privacy concerns at privacy@nsperanova.com. Local data protection laws may provide additional rights.