Home → Legal → Datenschutz / Privacy

Datenschutz / Privacy Policy

GDPR-compliant privacy policy for visitors from the European Economic Area, the United Kingdom, and Switzerland. Last updated: 2026-05-04.

1. Data controller

The data controller within the meaning of Article 4(7) of the General Data Protection Regulation (GDPR) is:

Global Marketing Agency
Sacramento, California, United States
Email: info@globalmarketing.agency

A Data Protection Officer is not currently appointed. For privacy questions and data-subject requests, contact info@globalmarketing.agency with the subject line "GDPR request".

2. EU representative (per Art. 27 GDPR)

The firm currently relies on the limited-processing exemption under Art. 27(2) GDPR. EU residents may direct privacy questions to info@globalmarketing.agency.

3. Categories of data processed

The firm processes the following categories of personal data:

  • Inquiry-form data: name, company, role, email address, country, business stage, and message text submitted through contact and inquiry forms.
  • Email correspondence: contents of emails sent to info@globalmarketing.agency, partnerships@globalmarketing.agency, or any other published address operated by the firm.
  • Server-log data: IP address (anonymised after thirty days), user-agent string, referrer, and timestamp, collected by the hosting provider for security and abuse-prevention purposes.
  • Analytics data: pseudonymous identifiers, page-view events, device and browser data, and approximate geolocation, collected by analytics providers as described below.
  • Cookies and similar technologies: session identifiers, language preference, and analytics identifiers.

4. Purposes and legal bases of processing

Processing is based on the following legal bases under Art. 6(1) GDPR:

  • Inquiry handling: Art. 6(1)(b) GDPR (contract performance and pre-contract steps) and Art. 6(1)(f) GDPR (legitimate interest in responding to operator inquiries).
  • Server logs: Art. 6(1)(f) GDPR (legitimate interest in security, fraud prevention, and uptime).
  • Analytics and pixel measurement: Art. 6(1)(a) GDPR (consent), where consent is required, and Art. 6(1)(f) GDPR for non-personalised aggregate measurement where lawful.
  • Email correspondence: Art. 6(1)(b) and Art. 6(1)(f) GDPR depending on the nature of the exchange.

5. Third-party processors and recipients

The firm uses the following third parties to operate the site and the inquiry surface. Each is a processor or independent controller as named. Google Analytics 4 loads on page load for aggregate site measurement with Google Signals and ad-personalization signals disabled. Meta Pixel loads only after the visitor accepts the on-site consent banner. A declined or unanswered banner keeps Meta Pixel off.

  • Cloudflare, Inc. (United States): hosting, content delivery, DNS, and DDoS protection. Loads on every page request. Standard Contractual Clauses (SCCs) apply for transfers to the United States. See Cloudflare privacy policy.
  • Google LLC (Google Analytics 4, measurement ID G-W355MTHXN3): aggregate site analytics. Loads on page load with Google Signals and ad-personalization signals disabled. SCCs and IP-anonymisation apply. See Google privacy policy.
  • Meta Platforms, Inc. (Meta Pixel): conversion measurement. Loads only after the visitor accepts the consent banner. SCCs apply. See Meta privacy policy.
  • Yandex (verification ID f48a8256bed5a500): site verification only; no Yandex Metrica analytics is currently active on this property. See Yandex privacy policy.
  • Web3Forms (Mahir Inc., service provider): processing of form submissions. The firm uses Web3Forms to deliver inquiry-form data to its inbox. See Web3Forms privacy policy.

6. International data transfers

The data controller is based in the United States. Personal data of EU/EEA, UK, or Swiss visitors is transferred to the United States and processed there. Transfers rely on the Standard Contractual Clauses (Commission Decision (EU) 2021/914) and, where applicable, the EU-US Data Privacy Framework adequacy decision (2023). Visitors may request a copy of the relevant safeguards via info@globalmarketing.agency.

7. Retention periods

Inquiry-form data is retained for as long as the inquiry remains commercially relevant, and in any event no longer than thirty-six months from the last meaningful contact, after which it is deleted unless a retention obligation under US or EU law requires longer retention. Server logs are retained for thirty days. Analytics data follows the retention settings of the respective provider (typically fourteen months for GA4 and the provider default for Meta).

8. Data-subject rights

Subjects in the EU/EEA, UK, or Switzerland have the following rights, exercisable by emailing info@globalmarketing.agency with the subject line "GDPR request":

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR), in particular to processing based on legitimate interest
  • Right to withdraw consent at any time (Art. 7(3) GDPR), without affecting the lawfulness of processing carried out before withdrawal
  • Right to lodge a complaint with a supervisory authority (Art. 77 GDPR), in particular in the EU/EEA member state of residence, place of work, or place of the alleged infringement

9. Cookies and consent

The site uses functional cookies (session, language preference) without consent because they are technically required to operate the site. Google Analytics 4 runs on page load for aggregate site measurement. Meta Pixel is gated behind an on-site consent banner shown on first visit.

How the banner works. On the first page load, the visitor sees a banner naming Google Analytics and Meta Pixel and offering Accept or Decline for Meta Pixel. The choice is stored in the visitor's browser using localStorage under the key gma_consent_v1. Accept loads Meta Pixel. Decline keeps Meta Pixel off. A small Manage choice toggle remains visible after a choice is made, allowing the visitor to revisit the decision at any time.

Withdrawal. Meta Pixel consent can be withdrawn at any time by clicking the Manage choice toggle and selecting Decline, or by clearing the browser's local storage for this site. Withdrawal does not affect the lawfulness of processing carried out before withdrawal (Art. 7(3) GDPR).

If JavaScript is disabled. The banner does not appear and neither pixel is loaded. Visitors with JavaScript disabled receive only functional cookies.

10. Security

The site is delivered exclusively over HTTPS. Form submissions are transmitted over TLS. Hosting is on Cloudflare Pages with edge-level rate limiting and bot mitigation. Inquiry data is held in the firm's email infrastructure with multi-factor authentication.

11. Automated decision-making

The firm does not engage in automated decision-making within the meaning of Art. 22 GDPR.

12. Changes to this policy

This privacy policy may be updated when site infrastructure, processors, or legal requirements change. The current version is dated above. Material changes affecting EU/EEA subjects will be highlighted on this page for thirty days from publication.

13. Contact for privacy matters

Email: info@globalmarketing.agency (subject line: "GDPR request")
Postal: Global Marketing Agency, Sacramento, California, United States. See the Impressum →