Privacy Policy

Introduction

This Privacy Policy explains how Vesta Web Agency ("Vesta", "we", "us", or "our") collects, uses, and protects your personal data when you visit vesta-web.com, contact us, or subscribe to our newsletter. For the personal data described here, Vesta Web Agency acts as the data controller.

We only collect the data we need to respond to you, operate our website, and improve our services. We do not sell your personal data.

Data We Collect

We collect the following categories of personal data:

• Information you provide through our contact form: your name, email address, company, phone number, subject, and the content of your message.
• Newsletter details: the email address you give us when you subscribe.
• Technical data collected automatically when you visit the site — such as your IP address, browser type, device information, and the pages you view — through standard server logs.

We do not request special-category (sensitive) data, and we ask that you do not include sensitive personal information in the messages you send us.

How We Use Data

We use the personal data we collect to:

• Respond to your enquiries and provide the information or services you request.
• Send our newsletter and related updates where you have subscribed — you can unsubscribe at any time.
• Operate, secure, maintain, and improve our website.
• Comply with our legal and regulatory obligations.

We rely on your consent for newsletter emails, on the handling necessary to answer you when you contact us, and on our legitimate interest in running and protecting our website for the technical data described above.

Cookies

We keep our use of cookies to a minimum. The only cookie we set is an essential session cookie, used to keep you signed in when you access secure areas such as our dashboard. It is required for those features to work and is not used for advertising or tracking.

We do not currently use third-party advertising or analytics cookies. If this changes, we will update this policy and, where required, ask for your consent first. You can also block or delete cookies through your browser settings.

Third-Party Services

We share personal data with a small number of trusted service providers who process it on our behalf and only under our instructions. These currently include:

• Resend — for sending emails, including contact confirmations and our newsletter.
• Supabase — for database and hosting infrastructure.

These providers may process data outside your country; where that happens, we rely on appropriate safeguards for international transfers. We do not sell or rent your personal data. A current list of our processors is available on request.

Data Storage

Your personal data is stored on infrastructure provided by our hosting and service providers, and is transmitted over encrypted (HTTPS) connections. We apply access controls so that only people who need your data can access it.

We retain personal data only for as long as necessary: contact enquiries are kept for as long as needed to handle your request and maintain reasonable business records, and newsletter data is kept until you unsubscribe. When data is no longer needed, we delete or anonymise it.

Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you and request a copy.
• Ask us to correct inaccurate or incomplete data.
• Ask us to delete your data.
• Restrict or object to how we process your data.
• Receive your data in a portable, machine-readable format.
• Withdraw your consent at any time, without affecting processing carried out before you withdrew it.

To exercise any of these rights, contact us at info@vesta-web.com. You also have the right to lodge a complaint with your local data protection authority.

Contact

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:

• Vesta Web Agency
• Email: info@vesta-web.com
• Phone: +49 711 89989020

We will respond to your request as soon as we reasonably can.