Privacy Policy
Effective date: July 29, 2026
1. Introduction
This Privacy Policy explains how Platanor Technologies, operating as Platanor ("we", "us", or "our"), collects, uses, and protects personal data when you visit or interact with the Platanor websites:
Platanor currently operates as a business/project brand and not yet as a registered legal entity. Until incorporation, the operator of the Platanor websites acts as the data controller.
Data controller contact: info@platanor.com
A postal address for the controller is available on request by email.
If you have questions regarding this Privacy Policy or your personal data, please contact us at the email above.
2. What Data We Collect
We collect personal data that you voluntarily provide and certain technical data necessary for operating the website.
Information you provide directly
If you contact us or submit a project inquiry, we may collect:
- name
- email address
- company name (optional)
- project description or message
- project stage
- type of help needed (e.g. architecture, firmware, backend)
- project timeline
- budget range
- any other information you choose to provide
If you contact us directly by email, we will collect the information included in your message.
3. Technical Data We Collect
When you visit the website, our hosting infrastructure may automatically process technical information such as:
- IP address
- browser type and version
- operating system
- device type
- date and time of access
- referring website
- requested pages and resources
- basic diagnostic and error log information
This data is used for website operation, security, troubleshooting, and abuse prevention.
4. How We Use Your Data
We use personal data to:
- respond to inquiries
- discuss potential projects or business relationships
- provide requested information
- operate and secure the website
- detect abuse, unauthorized access, or technical issues
- understand aggregate website usage (see Analytics below)
- comply with legal obligations
We do not sell personal data.
5. Legal Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA), our legal basis for processing includes:
Pre-contractual steps
When you contact us regarding potential services or projects.
Examples:
- submitting a project inquiry
- requesting a consultation
- discussing cooperation
Legitimate interests
For operating and securing the website, managing business communications, and understanding how the website is used in aggregate.
Examples:
- server logs
- abuse prevention
- responding to general inquiries
- maintaining website security
- privacy-oriented website analytics (see Section 6)
Where we rely on legitimate interests, you may object to processing as described in Section 12.
Consent
Where legally required for optional technologies that are not strictly necessary for the website to function.
Legal obligations
Where processing is necessary to comply with applicable law.
6. Cookies and Analytics
We use cookies and similar technologies on this website. Some are necessary for website functionality; others — including analytics cookies — are activated only with your consent.
Vercel Web Analytics (no consent required)
We use Vercel Web Analytics to understand aggregate website usage (for example, pages visited and general traffic patterns). Vercel Web Analytics operates without advertising cookies and without cross-site tracking. We rely on our legitimate interests as the legal basis for this processing.
Google Analytics 4 (consent required)
We use Google Analytics 4 to understand website usage and visitor behaviour in more detail. Google Analytics 4 is activated only after you grant consent via our cookie consent banner.
Google Analytics 4 uses first-party cookies, including:
_ga— distinguishes unique users; persists for approximately 2 years_ga_*— tracks session state for the specific property; persists for approximately 2 years
When active (with your consent), Google Analytics 4 may process:
- pages visited and navigation paths
- interaction events (for example, scrolls and link clicks)
- approximate geographic region (derived from IP address, anonymized by default)
- browser and device type
- referral source
Google Ireland Limited acts as data processor for Google Analytics. Data may be transferred to Google LLC in the United States. Google LLC participates in and is certified under the EU–US Data Privacy Framework, which provides a legal basis for such transfers.
You can withdraw consent at any time by updating your preferences via the cookie settings on this website. You may also opt out of Google Analytics across all websites using Google's opt-out browser add-on.
For more information, see Google's privacy terms and Vercel's privacy documentation.
7. Contact Forms and Communications
If you submit a project inquiry or use our contact forms:
- your submission is sent through our email delivery provider (Resend) to our business email inbox
- we use the submitted information solely to respond and manage business communications
- we do not publicly display submitted information
Please avoid sending sensitive personal information unless necessary.
Providing personal data is voluntary, but without certain information we may be unable to respond to your inquiry or discuss a potential engagement.
8. Business Contact Information from Public Sources
In some cases, we may process publicly available business contact information obtained from professional or public sources, such as company websites or professional networking platforms, where relevant for legitimate business communications.
This may include:
- name
- business email address
- company name
- professional role or title
- publicly available business contact details
We process such information only where permitted by applicable law and for legitimate business purposes.
9. Hosting and Service Providers
We use the following categories of service providers that may process personal data on our behalf:
| Provider | Purpose |
|---|---|
| Vercel | Website hosting, infrastructure, and Web Analytics |
| Google Ireland Limited | Google Analytics 4 — website usage analytics (activated only when consent is granted) |
| Resend | Delivering contact and project inquiry emails to our inbox |
These providers process data only as necessary to provide their services. Additional providers (for example DNS or email mailbox hosting) may process limited technical or communication data in support of the services above.
10. International Data Transfers
Some service providers we use may process personal data outside the European Economic Area (EEA), including the United States (for example Vercel, Resend, and Google LLC via Google Analytics).
Where this occurs, we take reasonable steps to ensure appropriate safeguards are in place, such as:
- Standard Contractual Clauses (SCCs) where applicable
- contractual data protection terms offered by the provider
- reliance on other lawful transfer mechanisms under applicable law
For Google Analytics specifically, Google LLC participates in and is certified under the EU–US Data Privacy Framework (DPF), which provides an adequacy-equivalent legal basis for data transfers to the United States.
You can review relevant provider terms via their privacy and data processing documentation.
11. Data Retention
We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including:
- responding to inquiries
- managing business communications
- evaluating potential engagements
- fulfilling contractual obligations
- maintaining business records
- complying with legal obligations
- resolving disputes
- protecting our legitimate business interests
Typical periods:
- Inquiry and correspondence: up to 24 months after the last meaningful communication, unless a longer period is required by law or for an ongoing engagement
- Technical logs: only as long as operationally necessary
- Analytics: Vercel Web Analytics — according to Vercel's configuration and retention settings. Google Analytics 4 — user-level data retained for 14 months (configured in our GA4 property); aggregated reports retained indefinitely
We may retain data longer where necessary for legal, security, or dispute-resolution purposes.
12. Your Rights
If GDPR or similar privacy laws apply, you may have the right to:
- access your personal data
- request correction of inaccurate data
- request deletion of your data
- restrict processing
- object to certain processing based on legitimate interests
- request data portability
- withdraw consent where applicable
- lodge a complaint with a supervisory authority
To exercise your rights, contact:
We will respond within one month, as required by GDPR, unless an extension is permitted in your case. We may need to verify your identity before fulfilling certain requests.
If you are in the EEA, you may lodge a complaint with your local data protection supervisory authority. EU authorities are listed by the European Data Protection Board.
13. Data Security
We implement reasonable technical and organizational measures to protect personal data, including:
- HTTPS encryption
- secure hosting infrastructure
- access controls
- limited access to business communications
- monitoring for technical abuse or security issues
No internet transmission or storage system can be guaranteed completely secure.
14. Children
This website is intended for business and professional audiences.
It is not directed to children under 16, and we do not knowingly collect personal data from children.
15. Third-Party Links
Our website may contain links to third-party websites.
We are not responsible for the privacy practices or content of external websites.
We encourage users to review the privacy policies of those services.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time.
Changes will be published on this page with an updated effective date.
Material changes may be highlighted where appropriate.
17. Contact
For privacy-related questions or requests:
Platanor Technologies (operating as Platanor)
Email: info@platanor.com