Privacy Policy

Last updated: October 25, 2026

This policy explains what personal data is collected when you visit agrestasolutions.com, why, and what rights you have.

1. Who is responsible

The controller responsible for data processing on this website is:

Cameron Agresta
Liebfrauenstraße 28
61440 Oberursel
Germany
Email: cam@agrestasolutions.com

Agresta Solutions is the name I work under as a freelancer. I am not required to appoint a data protection officer.

2. Hosting

This website is hosted by Squarespace. For customers in the EU, Squarespace’s contracting company is Squarespace Ireland Limited, Le Pole House, Ship Street Great, Dublin 8, Ireland.

When you visit the site, Squarespace automatically processes technical data your browser sends: IP address, date and time of access, pages viewed, referring website, browser type and operating system. This is needed to deliver the website and keep it secure.

Legal basis: Art. 6(1)(f) GDPR. I have a legitimate interest in a secure, working website.

I have a data processing agreement with Squarespace. Data may be transferred to Squarespace, Inc. in the United States (see section 11).

3. Cookies and consent

The site uses cookies that are strictly necessary for it to work, such as remembering your cookie choice. These are allowed without consent under §25(2) TDDDG.
Any cookies for analytics are only set if you agree through the cookie banner (§25(1) TDDDG, Art. 6(1)(a) GDPR).

You can change or withdraw your choice at any time using the cookie preferences button at the bottom of the screen, or by clearing your browser’s cookies for this site.

4. Website analytics

With your consent, I use Squarespace’s built-in analytics to see how visitors use the site, for example which pages are visited and how people arrive. This helps me improve the site. The data is shown to me in summary form.

Legal basis: your consent, Art. 6(1)(a) GDPR. You can withdraw it at any time with effect for the future.

5. Contacting me by email

My email runs on Google Workspace, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. If you email me, I process your email address, your name and whatever you include in your message, in order to reply.

Legal basis: Art. 6(1)(b) GDPR if your message relates to a possible project, otherwise Art. 6(1)(f) GDPR (my interest in answering enquiries).

I delete enquiries once they are dealt with, unless they lead to a business relationship or the law requires me to keep them.

I have a data processing agreement with Google. Data may be transferred to Google LLC in the United States (see section 11).

6. Contact form

If you send a message through the contact form, I process your name, email address and message in order to reply. The form is provided by Squarespace, which stores your message and forwards it to my email account.

Legal basis: Art. 6(1)(b) GDPR if your message relates to a possible project, otherwise Art. 6(1)(f) GDPR (my interest in answering enquiries).

I delete messages once they are dealt with, unless they lead to a business relationship or the law requires me to keep them.

7. Booking a call

The “Choose a time” button takes you to my booking page on Notion Calendar, provided by Notion Labs, Inc., USA. When you book, Notion processes your name, email address and anything you add to the booking. I use this to schedule the call and send you the details.

Legal basis: Art. 6(1)(b) GDPR, steps you have asked for before a possible contract.

8. Video calls

Calls take place on Zoom, provided by Zoom Communications, Inc., USA. When you join a call, Zoom processes data such as your name, email address, IP address, device information, and the audio and video of the call. Calls are not recorded unless we agree on it in advance.

Legal basis: Art. 6(1)(b) GDPR.

9. Free guide download and emails

To download the guide, you enter your email address. It is stored by Squarespace.

Legal basis for providing the guide: Art. 6(1)(b) GDPR.

If you also agree to receive occasional emails from me, I send them from my Google Workspace account and use your email address only for that purpose.

Legal basis: your consent, Art. 6(1)(a) GDPR, together with §7(2) UWG.

You can unsubscribe at any time by replying to any email or writing to cam@agrestasolutions.com. I then delete your address from my list. Apart from that, I keep it until you unsubscribe.

10. Links to other websites

The site links to my LinkedIn profile. This is a plain link: no data is sent to LinkedIn unless you click it. After that, LinkedIn’s own privacy policy applies.

11. Transfers outside the EU

Squarespace, Google, Notion and Zoom may process data in the United States. These transfers are based on the EU-US Data Privacy Framework, for which the European Commission has issued an adequacy decision, and on the EU’s Standard Contractual Clauses.

12. How long data is kept

I keep personal data only as long as needed for the purpose it was collected for. If a business relationship follows, records are kept for the periods required by German commercial and tax law, usually 6 to 10 years.

13. Your rights

You have the right to:

• access the data I hold about you (Art. 15 GDPR)

• have incorrect data corrected (Art. 16)

• have your data deleted (Art. 17)

• restrict how it is processed (Art. 18)

• receive your data in a portable format (Art. 20)

• object to processing based on legitimate interests (Art. 21)

• withdraw any consent at any time, with effect for the future (Art. 7(3))

To use any of these rights, email cam@agrestasolutions.com or use the contact form above.

You also have the right to complain to a data protection authority (Art. 77 GDPR). The authority responsible for me is the Hessian Commissioner for Data Protection and Freedom of Information (Der Hessische Beauftragte für Datenschutz und Informationsfreiheit), datenschutz.hessen.de.

14. Changes to this policy

I update this policy when the website or the law changes. The current version is always on this page.