Privacy policy
I ask for as little as possible: your email, to send you a resource or tell you about the course, and nothing else. Here's what I keep, where and for how long, with no fine print.
Who is responsible for your data
vhanessamurillo.com is the website of Vhanessa Murillo, Kaminner Str. 27, 10589 Berlin, Germany, the controller under the General Data Protection Regulation (GDPR).
For any question about your data, or to exercise your rights, write to hola@vhanessamurillo.com. There's no data protection officer because, at this size, the law doesn't require one.
If you only visit the site
This site uses no cookies, no analytics, no advertising pixels and no embedded third-party content. The fonts are hosted here.
Like any website, the hosting provider, Cloudflare, receives your IP address and your browser's technical data to deliver the page and protect it from attacks. Technical logs are deleted after a few days.
I count page views, link clicks and downloads as daily totals, with nothing that identifies you.
Legal basis: the legitimate interest in running a secure website that works (Art. 6(1)(f) GDPR).
When you request a free resource or join the waitlist
I store:
- Your email and, if you give it, your first name.
- Which resource you asked for, the language, when you gave your consent and which text you accepted.
- Where you came from, if the link says so (utm_ parameters and the previous page).
- When you confirmed your email (your first click on the link) and how often you downloaded the resource.
I send you the resource by email. The link is personal, works for 7 days, and your first click confirms your email (double opt-in). Only after confirming will you get occasional career emails, as you agreed in the form.
To stop bots, the form uses Cloudflare Turnstile, which checks technical data from your browser and your IP without cookies. Submissions are also limited per IP address; the IP is not stored.
Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw it any time with the "Unsubscribe" link in every email or by writing to me.
Emails
Emails are sent with Resend (USA). Every email has a one-click unsubscribe link.
If you write to hola@vhanessamurillo.com, I use your message only to reply, and it stays in my inbox as long as needed.
Mentoring and paid products
1:1 sessions are booked and paid through a Stripe payment link (Stripe Payments Europe, Ltd., Ireland). Clicking it takes you off this site: your payment details go straight to Stripe, which also processes data to prevent fraud as a controller in its own right (stripe.com/privacy). From Stripe I receive your name, email, the amount and the date.
The full Interview Art is sold on Gumroad (Gumroad, Inc., USA), which is responsible for its store and your payment (gumroad.com/privacy). From Gumroad I receive the name and email of buyers and downloaders.
Legal basis: performing the contract (Art. 6(1)(b) GDPR) and tax and accounting obligations (Art. 6(1)(c) GDPR).
Social networks
The links to Instagram, TikTok, YouTube and LinkedIn are plain links: the site loads nothing from those networks. Once you open them, each network's privacy policy applies.
Who I share your data with
I don't sell your data or share it for advertising. I only work with these providers, who process it on my behalf:
- Cloudflare, Inc. (USA)
- Website hosting, database (your email and requests), bot protection.
- Backblaze, Inc. (USA)
- Private storage of the resources and the site's images, in its EU data centre (Amsterdam).
- Resend (USA)
- Sending the emails.
- Stripe Payments Europe, Ltd. (Ireland)
- Payment for mentoring sessions.
- Gumroad, Inc. (USA)
- Sales of the full Interview Art.
Transfers outside the EU
Several of these providers are US companies. In those cases the transfer relies on the EU-US Data Privacy Framework, where the company is certified, or on the European Commission's standard contractual clauses (Art. 46 GDPR).
How long I keep your data
- Download link
- 7 days.
- Email, name and requests
- Until you unsubscribe or ask me to delete them.
- After you unsubscribe
- Only your email and the date you unsubscribed, to respect your choice and to be able to prove your consent. If you want them deleted completely, write to me.
- Payment records
- As long as German tax and commercial law requires (up to 10 years).
- Technical logs
- A few days.
Your rights
You can ask me at any time to:
- Access your data and get a copy.
- Correct it.
- Delete it.
- Restrict or object to its use.
- Receive it in a standard format (portability).
- Withdraw your consent, without affecting what came before.
Write to hola@vhanessamurillo.com from the email you signed up with and I'll reply within one month at the latest.
You can also lodge a complaint with a data protection authority, for example the one in your country or the one in Berlin (Berliner Beauftragte für Datenschutz und Informationsfreiheit).
Age
The resources and the list are for people aged 16 or over.
Changes
If I change how I process your data, I will update this page and the date above.