Controller and contact
The controller for personal data collected through this website is THINKSMART. If you want to exercise a privacy right or ask a question about this notice, use the contact form on the home page and clearly mark your message as a privacy request.
If THINKSMART publishes a dedicated privacy email address or registered business address later, that contact point will supplement this notice.
What data we collect
- Your name, email address, and the contents of your message when you submit the contact form.
- Technical metadata that is normally generated when a request is sent to the site or the form processor, such as IP address, user agent, request time, and delivery logs.
- Security and anti-abuse signals used by infrastructure or form-processing providers when needed to protect the service.
Why we process it
Respond to inquiries
We process your contact details and message to answer your request and, where relevant, take steps before entering into a contract.
Protect the site
We process limited technical and security data to prevent spam, abuse, fraud, and service disruption.
Run the website
Infrastructure data may be processed to host the website, deliver static assets, and maintain availability and security.
Meet legal duties
We may retain or disclose information where required to comply with law, defend legal claims, or enforce our rights.
Legal bases
- Article 6(1)(b) GDPR: processing that is necessary to respond to your request or take steps at your request before a contract.
- Article 6(1)(f) GDPR: processing that is necessary for our legitimate interests in securing the site, preventing abuse, and managing communications.
- Article 6(1)(c) GDPR: processing that is necessary to comply with legal obligations where applicable.
Service providers and external services
- Cloudflare: website hosting, content delivery, transport security, and related infrastructure protection.
- Formspree: contact-form relay. Submission archiving is turned off, so Formspree forwards messages to our inbox and does not retain a copy.
- Self-hosted fonts: the site uses locally served font files and does not request Google Fonts or another third-party font CDN.
- Spam protection: if abuse-prevention tooling is enabled through Formspree or infrastructure settings, it is used only for necessary security purposes and should be reflected in the current Cookie Notice.
International transfers
Some service providers used to host the site or process contact-form submissions may process data outside the European Economic Area, including in the United States. Where that happens, THINKSMART relies on the contractual, organizational, and technical safeguards made available by those providers for international data transfers.
How long we keep data
Formspree submission archiving is disabled, so form data is not stored on Formspree's servers. Contact-form inquiries delivered to our inbox are retained for up to 12 months after the last substantive contact, unless a longer period is needed to negotiate or perform a contract, comply with legal obligations, or establish, exercise, or defend legal claims.
Your rights
- Access the personal data we hold about you.
- Request correction of inaccurate or incomplete data.
- Request deletion where the legal conditions are met.
- Request restriction of processing in certain cases.
- Object to processing based on legitimate interests.
- Receive a portable copy of data you provided where the legal conditions are met.
- Lodge a complaint with your local supervisory authority.
Automated decision-making
This website is not intended to make solely automated decisions that produce legal or similarly significant effects about you.
Related notice
For information about cookies, local storage, and infrastructure-level technologies used by this site, see the Cookie Notice.