Legal
Privacy Policy
Last updated: 6 March 2026
1. Data Controller
The data controller for this website is:
Vignesh Ambalam SureshBudapest, Hungary
Email: asvignesh.qae@gmail.com
This site operates as a personal portfolio and is not a registered business. For all data-related requests, please contact the email address above.
2. What Personal Data We Collect
We only collect personal data that you voluntarily provide through the contact form:
- Full name — to address you in correspondence.
- Email address — to send you a reply.
- Message content — the inquiry or message you write.
We do not collect sensitive personal data (as defined in Article 9 GDPR), financial information, or data from minors. We do not build user profiles or engage in automated decision-making.
3. Purpose and Legal Basis for Processing
| Purpose | Legal Basis (GDPR Art. 6) |
|---|---|
| Responding to your contact form inquiry | Art. 6(1)(a) — Consent (given via the consent checkbox) |
| Website performance monitoring & analytics | Art. 6(1)(f) — Legitimate interest (ensuring site reliability) |
| Marketing / behavioural analytics via cookies (GTM) | Art. 6(1)(a) — Consent (cookie banner) |
4. Third-Party Processors
Your contact form data is delivered via the following sub-processors. Each processor handles data only for the purposes stated and under appropriate data-processing agreements or standard contractual clauses.
Google Gmail / SMTP (Nodemailer)
Contact form submissions are forwarded to the data controller's Gmail inbox. Your name, email, and message are included in the email. Google acts as a processor under Google's Workspace Data Processing Amendment.
Provider: Google LLC, USA. Transfer mechanism: EU Standard Contractual Clauses.
Telegram Bot API
A real-time notification containing your name, email, and message is sent to a private Telegram chat. No data is stored by this service beyond the message delivery period.
Provider: Telegram FZ-LLC, UAE / Dubai. Review Telegram's Privacy Policy.
Vercel (Hosting, Analytics & Speed Insights)
This site is hosted on Vercel. Vercel Analytics and Speed Insights collect anonymised, aggregated page-view and performance data. No cookies are set; IP addresses are not stored in identifiable form.
Provider: Vercel Inc., USA. Transfer mechanism: EU Standard Contractual Clauses. Vercel Privacy Policy.
Google Tag Manager & Google Analytics (optional, consent-based)
Google Tag Manager is loaded only if you accept cookies via the cookie consent banner. If accepted, GTM may set cookies and collect usage data. You can withdraw consent at any time by clearing your browser cookies or declining via the banner.
Provider: Google LLC, USA. Transfer mechanism: EU Standard Contractual Clauses. Google Privacy Policy.
Google Fonts (Next.js / self-hosted)
This site uses the Inter typeface loaded via Next.js's font optimisation, which downloads and self-hosts font files at build time. No requests are made to Google's servers at runtime.
5. Data Retention
- Contact form data (name, email, message): retained in the Gmail inbox for a maximum of 90 days after the inquiry is resolved, then permanently deleted.
- Telegram notifications: messages are deleted from the private Telegram chat within 30 days.
- Vercel analytics data: retained per Vercel's own retention policy (aggregated, anonymised — typically 30–90 days of raw events).
- Cookie consent preference: stored in your browser's
localStoragefor 365 days, then re-asked.
6. Cookies and Tracking Technologies
We distinguish between cookies that are strictly necessary for the site to function and optional analytics/marketing cookies.
| Category | Examples | Consent required? |
|---|---|---|
| Strictly necessary | None (this site has no login / session cookies) | No |
| Performance / Analytics | Vercel Analytics (cookie-free, anonymised) | No (legitimate interest) |
| Marketing / Tracking | Google Tag Manager, GA4 | Yes — cookie banner required |
You can manage or withdraw your cookie consent at any time through the cookie banner at the bottom of this page, or by clearing your browser's local storage for this domain.
7. Your Rights Under GDPR
As a data subject in the EEA, you have the following rights under the General Data Protection Regulation (EU) 2016/679:
- →Right of access (Art. 15) — you may request a copy of any personal data held about you.
- →Right to rectification (Art. 16) — you may request correction of inaccurate data.
- →Right to erasure (Art. 17) — you may request deletion of your data at any time.
- →Right to restriction of processing (Art. 18) — you may request that processing be limited.
- →Right to data portability (Art. 20) — you may request your data in a machine-readable format.
- →Right to object (Art. 21) — you may object to processing based on legitimate interest.
- →Right to withdraw consent (Art. 7(3)) — you may withdraw any previously given consent at any time without affecting the lawfulness of processing before withdrawal.
To exercise any of these rights, email asvignesh.qae@gmail.com with the subject line "GDPR Data Request". We will respond within 30 days in accordance with Article 12 GDPR.
8. Right to Lodge a Complaint
If you believe your data is being processed unlawfully, you have the right to lodge a complaint with your local data protection supervisory authority. As the data controller is based in Hungary, the competent authority is:
Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH)National Authority for Data Protection and Freedom of Information
1055 Budapest, Falk Miksa utca 9–11, Hungary
naih.hu
9. Changes to This Policy
This Privacy Policy may be updated to reflect changes in processing activities or applicable law. The "Last updated" date at the top of the page will always reflect the most recent revision. Where changes are material, we will make reasonable efforts to bring them to your attention (e.g., via an updated notice on the contact form).