1. Data Controller

The data controller for this website is:

Giovanni Ambrosio trading as ambronet

Copenhagen, Denmark

Email: gianni@ambronet.dk

Website: www.ambronet.dk

2. Personal Data We Collect

We may collect the following categories of personal data:

Contact data: name, email address, and message content submitted via our contact form
Technical data: IP address, browser type, operating system, device information, pages visited, time on page, and referring URL
Cookie data and analytics data — see Sections 6 and 7

3. Legal Basis for Processing

We process your personal data on the following legal bases under Article 6 GDPR:

Consent (Art. 6(1)(a)): for analytics cookies and any marketing communications
Contract performance (Art. 6(1)(b)): to deliver services and digital products you have purchased
Legitimate interests (Art. 6(1)(f)): to maintain website security, prevent fraud, and improve our services

4. Purposes of Processing

To respond to enquiries submitted via the contact form
To provide and invoice for consulting services and digital products
To analyse website traffic and improve the user experience
To send transactional and service-related communications
To comply with applicable legal obligations

5. Data Processors and Third Parties

We use the following third-party services that may process your personal data on our behalf:

Service / Provider	Purpose	Location	Safeguards
One.com (Oversecured A/S)	Website hosting & server infrastructure	EU / Denmark	EU data — no transfer
Google Analytics (Google LLC)	Website traffic analysis & user behaviour	USA	EU–US Data Privacy Framework + SCCs

Google LLC participates in the EU–US Data Privacy Framework. Transfers to the USA are protected by Standard Contractual Clauses (SCCs) adopted by the European Commission.

6. Cookies

This website uses cookies — small text files stored on your device. Below is an overview of the cookies currently in use.

Cookie name	Provider	Purpose	Retention
wordpress_[hash]	WordPress	Authentication session	Session
wordpress_logged_in_[hash]	WordPress	Logged-in indicator	Session
wp-settings-*	WordPress	Admin UI preferences	1 year
comment_author_*	WordPress	Remember commenter details	1 year
_ga	Google Analytics	Track unique visitors	2 years
_gid	Google Analytics	Distinguish users between sessions	24 hours
_gat	Google Analytics	Throttle Analytics request rate	1 minute

We plan to add third-party embeds (e.g. YouTube, Google Maps, social media buttons) in the future. Any such additions that set additional cookies will be reflected in an updated version of this policy. A cookie consent banner should be used — we recommend installing a plugin such as Complianz or CookieYes on your WordPress site.

7. International Data Transfers

Some service providers are located outside the European Economic Area (EEA). Where personal data is transferred outside the EEA, we ensure that appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission or adherence to the EU–US Data Privacy Framework, as applicable.

8. Data Retention

Contact form enquiries: retained for up to 2 years from the date of the enquiry
Analytics data (Google Analytics): retained for 26 months (Google Analytics default)
Hosting and server logs (One.com): retained in accordance with One.com’s data retention policy
Purchase records: retained for 5 years to comply with Danish bookkeeping requirements (Bogføringsloven)

9. Your Rights

Under the GDPR and the Danish Data Protection Act (Databeskyttelsesloven, Act no. 502 of 23 May 2018), you have the following rights:

Right of access (Art. 15): request a copy of the personal data we hold about you
Right to rectification (Art. 16): request correction of inaccurate or incomplete data
Right to erasure (Art. 17): request deletion of your data where no legal retention obligation applies
Right to restriction (Art. 18): request that we limit how we process your data
Right to data portability (Art. 20): receive your data in a structured, machine-readable format
Right to object (Art. 21): object to processing based on legitimate interests
Right to withdraw consent: withdraw consent at any time without affecting the lawfulness of prior processing

To exercise any of these rights, please contact us at: gianni@ambronet.dk

We will respond within 30 days. In complex cases, this may be extended to 90 days; we will inform you of any extension within the initial 30-day period.

10. Right to Lodge a Complaint

You have the right to lodge a complaint with the Danish Data Protection Authority (Datatilsynet):

Datatilsynet

Carl Jacobsens Vej 35, 2500 Valby, Denmark

Tel: +45 33 19 32 00 | Email: dt@datatilsynet.dk | Website: www.datatilsynet.dk

11. Changes to This Policy

We may update this Privacy Policy periodically. The current version and its date are always displayed on this page. Material changes will be communicated via a notice on this website. We encourage you to review this page regularly.