GDPR Notice

This notice explains the lawful bases for processing personal data on this site, and the rights you have under the General Data Protection Regulation.

Lawful bases for processing

• Legitimate interests — operating the website, preventing abuse, maintaining security and responding to direct enquiries.
• Contract or pre-contractual steps — where you contact me about professional services.

Categories of data

• Technical request data, such as IP address, browser type and request timestamps
• Communication data, where you contact me directly

This site does not collect payment data, national identifiers, biometric data, or any special category data as defined in Article 9.

Retention periods

• Hosting and security logs — according to the hosting provider's service configuration and policies
• Email correspondence — only while reasonably necessary for the exchange and any resulting professional relationship

Your rights

Under the GDPR you have the following rights over your personal data:

1. 01Access — obtain a copy of the data held about you.
2. 02Rectification — have inaccurate data corrected.
3. 03Erasure — have your data deleted.
4. 04Restriction — limit how your data is processed.
5. 05Portability — receive your data in a machine-readable format.
6. 06Objection — object to processing based on legitimate interests.
7. 07Protection from automated decision-making — not be subject to a decision based solely on automated processing.

International transfers

Infrastructure providers may process data outside your country. Where required, those transfers are governed by the provider's contractual safeguards and applicable data-protection mechanisms.

Making a request

Send GDPR requests to mr@mrva.com. I aim to respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority.