Privacy notice

Who is responsible

The controller for the data described here is 1212 Capital, [TO BE COMPLETED: legal entity name as registered], registered at [TO BE COMPLETED: registered address], under registration number [TO BE COMPLETED: company registration number].

For any question about this notice or about your data, write to [TO BE COMPLETED: contact point for data requests, and whether a data protection officer has been appointed]. The published address for the firm is contact@1212.capital.

What this site collects

The contact form collects your name, your e-mail address, your telephone number if you choose to give one, and the message you write. Only the name, the e-mail address and the message are required.

When you submit the form, our server also reads the IP address the request arrives from. It is used to limit how many submissions one address can send in a short window, which is what keeps the form from being used to send bulk mail, and it is included in the notification we receive so that abuse can be traced.

That is the whole of it. This site has no account, no login, no advertising, no profiling and no automated decision-making, and it does not sell or share personal data with anyone for their own purposes.

Why, and on what legal basis

We use what the form collects to read your message and answer it. The basis is your request itself: steps taken at your request before entering into a relationship, and our legitimate interest in responding to people who approach the firm.

We use the IP address to rate limit the form and to trace abuse. The basis is our legitimate interest in keeping the service available and not being used to send mail on someone else's behalf.

Who else sees it

The form does not write to a database. Your message is delivered to us as an e-mail through Resend, our e-mail delivery provider, which processes it on our instructions in order to deliver it. Where an alternative delivery endpoint is configured instead, the same content is sent to it and to no one else.

The message then sits in the firm's mailbox, like any e-mail you might have written to us directly.

[TO BE COMPLETED: where Resend and the mailbox provider process and store this data, whether any of it leaves the EEA, and the safeguard relied on if it does.]

How long it is kept

The IP addresses used for rate limiting are held in memory for ten minutes and are not written anywhere. They do not survive a restart of the server.

Your message is kept for as long as the enquiry is live and then for [TO BE COMPLETED: retention period for contact enquiries]. The copy included in the notification e-mail follows the retention of the mailbox it was delivered to.

Cookies and local storage

This site sets one cookie, named lang, and only if you use the language switcher. It records the language you chose so that the site does not override it on your next visit. A preference you asked for is exempt from consent.

If you answer the cookie banner, your answer is stored in your browser's local storage, not in a cookie, so that we do not have to ask again. It records the choice, the version of the notice it was given under, and the date. We ask again after six months, or sooner if what we are asking about changes.

There are no analytics and no third-party trackers on this site today. If that changes, nothing will load before you have accepted it, and you can withdraw at any time from the Cookies link in the footer.

Where the site is hosted

[TO BE COMPLETED: hosting provider, the region the site is served from, and any logging the host performs on its own account.]

Your rights

You can ask us for a copy of your data, to correct it, to erase it, to restrict what we do with it, or to receive it in a portable form. You can object to processing we base on legitimate interest. Where we rely on consent, you can withdraw it at any time, and withdrawing is as easy as giving it.

Write to [TO BE COMPLETED: contact point for data requests] and we will answer within one month.

If you are not satisfied with our answer, you can complain to a data protection supervisory authority: [TO BE COMPLETED: competent supervisory authority for the firm's establishment]. You may also complain to the authority where you live.