Introduction
This privacy policy explains how we collect and process personal data when you visit our website (https://smb-studio.com) or contact us through it.
Personal data is any information relating to an identified or identifiable natural person, such as a name, email address or IP address.
Controller and contact details
The controller responsible for the processing of personal data within the meaning of the EU General Data Protection Regulation (GDPR) is SMB Studio.
For any data-protection matter — including to exercise the rights described below — you can contact us by email at info@smb-studio.com.
Legal bases for processing
Depending on the situation, we rely on the following legal bases when we process your personal data:
- Art. 6(1)(a) GDPR — your consent, where you have given it for a specific purpose.
- Art. 6(1)(b) GDPR — performance of a contract with you, or steps taken at your request before entering into one.
- Art. 6(1)(f) GDPR — our legitimate interests, where your interests or fundamental rights do not override them.
Visiting our website (server log files)
When you visit our website, our hosting provider automatically collects and stores information that your browser transmits: your IP address, the date and time of the request, the page or file requested, the referrer URL, and your browser type, version and operating system.
We process this data to deliver the website and to ensure its stability and security. The legal basis is our legitimate interest in a secure and functional website (Art. 6(1)(f) GDPR). Log data is deleted or anonymized as soon as it is no longer needed for these purposes, as a rule within 30 days, unless we need to retain it longer to investigate a specific security incident.
Our hosting provider processes this data on our behalf as a processor, under a data-processing agreement and only on our instructions.
Contact form and email
When you contact us through our contact form, we process the data you provide — your name, email address and message — in order to receive and respond to your enquiry and to take any steps you request before entering into a contract.
The legal basis is Art. 6(1)(b) GDPR (pre-contractual steps and performance of a contract) and, where you give it, your consent under Art. 6(1)(a) GDPR. Providing this data is voluntary, but without your name, email address and message we cannot process your enquiry.
We keep this data for as long as necessary to handle your enquiry and any resulting follow-up, after which it is deleted, unless statutory retention obligations require otherwise.
Booking a consultation (Calendly)
Where you choose to book a consultation, the scheduling is handled by Calendly LLC. When you open the booking page and confirm a time, you provide your name, email address, the selected date and time and any details you add, which are processed to arrange and confirm the call and to remind you of it.
The legal basis is Art. 6(1)(b) GDPR (steps taken at your request before entering into a contract) and, where you give it, your consent under Art. 6(1)(a) GDPR. Calendly acts as our processor. No Calendly script or content is loaded while you browse this website — the booking page opens only after you actively choose to, so no data is sent to Calendly until then.
Calendly is based in the United States, so booking involves a transfer of personal data outside the EEA; this transfer is safeguarded as described in the section on data processing outside the EEA below.
Cookies and analytics
Our website uses only cookies that are strictly necessary for it to function. We do not currently use analytics, advertising or tracking cookies, and we do not create profiles of our visitors.
If we introduce web analytics or other non-essential cookies in the future, we will update this policy and, where the law requires it, ask for your consent before such cookies are set.
Fonts
The fonts used on this website are hosted on our own servers. No data is transmitted to third-party font providers (such as Google Fonts) when you load our pages.
Data processing outside the EEA
Some of the service providers we use (for example our hosting or email provider) may process personal data outside the European Economic Area (EEA). Where this happens, we ensure an adequate level of protection for the transfer.
Transfers rely on an adequacy decision of the EU Commission where one exists (Art. 45 GDPR) — including, for transfers to the USA, where the provider is certified under the EU–US Data Privacy Framework. Otherwise, transfers are safeguarded by the EU Commission's standard contractual clauses (Art. 46(2)(c) GDPR) or another appropriate safeguard.
Your rights
In relation to your personal data, you have the right to:
- request access to your data (Art. 15 GDPR);
- request rectification of inaccurate data (Art. 16 GDPR);
- request erasure of your data (Art. 17 GDPR);
- request restriction of processing (Art. 18 GDPR);
- receive your data in a portable format (Art. 20 GDPR);
- object to processing based on our legitimate interests (Art. 21 GDPR).
Where processing is based on your consent, you may withdraw it at any time with effect for the future (Art. 7(3) GDPR); this does not affect the lawfulness of processing carried out before the withdrawal. To exercise any of these rights, contact us at info@smb-studio.com.
You also have the right to lodge a complaint with a data-protection supervisory authority, in particular in the EEA member state of your residence, place of work, or the place of the alleged infringement (Art. 77 GDPR).
Data retention
Where a specific retention period is stated in the sections above, it applies. Otherwise, we delete or anonymize personal data as soon as it is no longer required for the purpose for which it was collected, unless a statutory obligation requires us to keep it longer (for example, commercial or tax-law retention periods). In that case, processing is restricted rather than deleted — the data is blocked and not used for other purposes.
Changes to this policy
We may update this privacy policy to reflect changes in how we process data or to meet new legal requirements. The current version is always available on this page; the “last updated” date below the title shows when it was last revised.