Tigo Sanchez — practice
Draft — legal text to be reviewed for the applicable jurisdiction before publication. Privacy

Privacy

What this site collects, why, and what happens to it. The short version: no analytics, no cookies set by the site itself, and the only personal data that leaves your browser is what you type into the contact form.

1. Controller

Tigo Sanchez, Berlin, Germany, is the controller for personal data processed through tigosanchez.com.

Legal operator name and business address: [to be completed before publication]

2. Contact details

E-mail: [email protected]. Postal details are on the Impressum.

Data protection officer, if one is required: [to be completed before publication]

3. Data collected

Contact form: your name, e-mail address, the discipline or offer you selected and the message you write. Offer-page request forms also carry the answers you give to their questions, packed into the same message.

Technical data: when you open the site, the hosting provider (Cloudflare) processes the connection data needed to deliver the page, such as IP address, user agent and the time of the request. The site itself does not read or store this data.

If you write to hello@ or [email protected] directly, the e-mail and its content are processed in the Google Workspace mailbox of the domain.

4. Purpose

To answer your request, assess brief, timing and fit, and propose a next step; to send you a confirmation that the request arrived; to keep a record of requests received; and to deliver the site securely.

5. Legal basis

Answering a request you send: steps taken at your request prior to entering into a contract, and performance of a contract where one follows (Art. 6(1)(b) GDPR). Delivering the site securely and keeping a record of correspondence: legitimate interest in running and protecting the site and the practice (Art. 6(1)(f) GDPR).

Legal basis wording to be reviewed for the applicable jurisdiction: [to be completed before publication]

6. Forms and communications

When you submit a form on the site, the content is sent to a Cloudflare Pages Function, which validates it and forwards it through Google Workspace (Apps Script). The request is stored in a Google Sheet in the same Google Workspace, and two e-mails are sent: a confirmation to the address you gave and a notice to [email protected]. Form bodies are plain text only. The form uses a hidden trap field and length limits to filter bots; no other processing happens before delivery.

7. Analytics

None. The site uses no analytics, tracking pixels or visitor measurement of its own.

8. Cookies

The site itself sets no cookies. Embedded third-party players (see next section) may set their own cookies when you interact with them.

9. Embedded media / third-party services

The Work section embeds video players from YouTube and Vimeo. When such a player loads or plays, your browser connects to the provider, which may process connection data and set its own cookies under its own privacy policy. The home page also loads the GSAP animation library from the cdnjs content delivery network (operated by Cloudflare), which processes the connection data needed to serve the file.

Whether the embeds are loaded on click only (two-click solution) and the provider policy links: [to be completed before publication]

10. Payments

No payments are taken on the site. No payment data is collected or stored through tigosanchez.com.

Payment methods and any payment service provider used for invoices and RSVP fees: [to be completed before publication]

11. Booking / calendar data

The Foyer shows the current movement of the practice and availability states of offers. It does not collect visitor data and it is not a booking system. Dates, locations and project details you share to arrange a window are processed as part of your request (sections 3 to 6).

Any external calendar or scheduling tool used to hold windows: [to be completed before publication]

12. Web3 / wallet interactions where applicable

The site displays the identity tigosanchez.eth as text and lets you copy it to the clipboard. It does not connect to, read, or request access to any wallet, and it does not interact with any blockchain. Web3 entry work agreed as an offer happens outside the site and is governed by the specific engagement.

13. Data processors

Cloudflare, Inc. — hosting (Cloudflare Pages), DNS and delivery of the site, including the Pages Function that forwards form submissions.

Google LLC / Google Workspace — mailboxes of the domain, Apps Script that forwards form submissions, and the Google Sheet where requests are stored.

YouTube (Google) and Vimeo — embedded video players in the Work section, only when you load or play a video.

Contracting entities, data processing agreements and any further processor: [to be completed before publication]

14. International transfers

Cloudflare and Google operate globally, and data may be processed outside the European Economic Area.

Transfer safeguards relied on (adequacy decision, EU-US Data Privacy Framework, standard contractual clauses): [to be completed before publication]

15. Retention

Retention periods for requests, correspondence and the request sheet, and statutory retention for invoices: [to be completed before publication]

16. User rights

You have the right to access the personal data held about you, to have it rectified or erased, to restrict or object to its processing, and to receive it in a portable format, within the limits of the applicable law. To exercise these rights, write to [email protected].

17. Complaints

You have the right to lodge a complaint with a data protection supervisory authority.

Competent supervisory authority and its contact details: [to be completed before publication]

18. Security

The site is served over HTTPS. Form submissions travel encrypted to the hosting provider and on to Google Workspace. Form content is handled as plain text, never as HTML, and is filtered for automated submissions before delivery.

19. Policy updates

This policy may be updated when the site or its processing changes. The current version is always the one published at tigosanchez.com/privacy.

Date of the current version: [to be completed before publication]