1. Data controller
The data controller within the meaning of Article 4(7) of the General Data Protection Regulation (GDPR) is:
Global Marketing Agency
Sacramento, California, United States
Email: info@globalmarketing.agency
A Data Protection Officer is not currently appointed. For privacy questions and data-subject requests, contact info@globalmarketing.agency with the subject line "GDPR request".
2. EU representative (per Art. 27 GDPR)
The firm currently relies on the limited-processing exemption under Art. 27(2) GDPR. EU residents may direct privacy questions to info@globalmarketing.agency.
3. Categories of data processed
The firm processes the following categories of personal data:
- Inquiry-form data: name, company, role, email address, country, business stage, and message text submitted through contact and inquiry forms.
- Email correspondence: contents of emails sent to info@globalmarketing.agency, partnerships@globalmarketing.agency, or any other published address operated by the firm.
- Server-log data: IP address (anonymised after thirty days), user-agent string, referrer, and timestamp, collected by the hosting provider for security and abuse-prevention purposes.
- Analytics data: pseudonymous identifiers, page-view events, device and browser data, and approximate geolocation, collected by analytics providers as described below.
- Cookies and similar technologies: session identifiers, language preference, and analytics identifiers.
4. Purposes and legal bases of processing
Processing is based on the following legal bases under Art. 6(1) GDPR:
- Inquiry handling: Art. 6(1)(b) GDPR (contract performance and pre-contract steps) and Art. 6(1)(f) GDPR (legitimate interest in responding to operator inquiries).
- Server logs: Art. 6(1)(f) GDPR (legitimate interest in security, fraud prevention, and uptime).
- Analytics and pixel measurement: Art. 6(1)(a) GDPR (consent), where consent is required, and Art. 6(1)(f) GDPR for non-personalised aggregate measurement where lawful.
- Email correspondence: Art. 6(1)(b) and Art. 6(1)(f) GDPR depending on the nature of the exchange.
5. Third-party processors and recipients
The firm uses the following third parties to operate the site and the inquiry surface. Each is a processor or independent controller as named:
- Cloudflare, Inc. (United States): hosting, content delivery, DNS, and DDoS protection. Standard Contractual Clauses (SCCs) apply for transfers to the United States. See Cloudflare privacy policy.
- Google LLC (Google Analytics 4, measurement ID G-W355MTHXN3): aggregate site analytics. SCCs and IP-anonymisation apply. See Google privacy policy.
- Meta Platforms, Inc. (Meta Pixel): conversion measurement. SCCs apply. See Meta privacy policy.
- Yandex (verification ID f48a8256bed5a500): site verification only; no Yandex Metrica analytics is currently active on this property. See Yandex privacy policy.
- Web3Forms (Mahir Inc., service provider): processing of form submissions. The firm uses Web3Forms to deliver inquiry-form data to its inbox. See Web3Forms privacy policy.
6. International data transfers
The data controller is based in the United States. Personal data of EU/EEA, UK, or Swiss visitors is transferred to the United States and processed there. Transfers rely on the Standard Contractual Clauses (Commission Decision (EU) 2021/914) and, where applicable, the EU-US Data Privacy Framework adequacy decision (2023). Visitors may request a copy of the relevant safeguards via info@globalmarketing.agency.
7. Retention periods
Inquiry-form data is retained for as long as the inquiry remains commercially relevant, and in any event no longer than thirty-six months from the last meaningful contact, after which it is deleted unless a retention obligation under US or EU law requires longer retention. Server logs are retained for thirty days. Analytics data follows the retention settings of the respective provider (typically fourteen months for GA4 and the provider default for Meta).
8. Data-subject rights
Subjects in the EU/EEA, UK, or Switzerland have the following rights, exercisable by emailing info@globalmarketing.agency with the subject line "GDPR request":
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR), in particular to processing based on legitimate interest
- Right to withdraw consent at any time (Art. 7(3) GDPR), without affecting the lawfulness of processing carried out before withdrawal
- Right to lodge a complaint with a supervisory authority (Art. 77 GDPR), in particular in the EU/EEA member state of residence, place of work, or place of the alleged infringement
9. Cookies and consent
The site uses functional cookies (session, language preference) and, subject to consent where required, analytics and pixel cookies. A consent management surface will be implemented before any paid traffic is routed to this site from the EU/EEA. Until then, EU/EEA visitors who object to analytics processing may use browser-level controls or contact info@globalmarketing.agency to request opt-out.
10. Security
The site is delivered exclusively over HTTPS. Form submissions are transmitted over TLS. Hosting is on Cloudflare Pages with edge-level rate limiting and bot mitigation. Inquiry data is held in the firm's email infrastructure with multi-factor authentication.
11. Automated decision-making
The firm does not engage in automated decision-making within the meaning of Art. 22 GDPR.
12. Changes to this policy
This privacy policy may be updated when site infrastructure, processors, or legal requirements change. The current version is dated above. Material changes affecting EU/EEA subjects will be highlighted on this page for thirty days from publication.
13. Contact for privacy matters
Email: info@globalmarketing.agency (subject line: "GDPR request")
Postal: Global Marketing Agency, Sacramento, California, United States. See the Impressum →