Privacy policy
Last updated:
This policy explains how CoderStein (“we”, “us”) collects and uses personal data when you visit coderstein.dev, contact us, or work with us.
Who we are
CoderStein, headquartered in Lisbon, Portugal, is the data controller for the personal data described in this policy.
Contact for privacy questions: max@coderstein.dev.
What data we collect
- Contact form and email. Your name, work email, company, the service you’re interested in and anything you write in your message.
- Booking a call. Your name, email and the time you choose, collected through our scheduling provider, Calendly.
- Newsletter and downloads. Your work email, if you request a systems audit checklist or subscribe to articles.
- Website usage. Basic request logs and privacy-friendly performance telemetry. We do not use third-party advertising trackers or sell personal data.
- Clients. Contact details of the people we work with, and the information needed to deliver and invoice our services.
Why we use it, and our legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Replying to your enquiry and preparing a proposal | Steps at your request before a contract (Art. 6(1)(b)) |
| Delivering services and invoicing | Contract (Art. 6(1)(b)) and legal obligation (Art. 6(1)(c)) |
| Sending the checklist or articles you asked for | Consent (Art. 6(1)(a)), which you can withdraw at any time |
| Maintaining website security and performance | Legitimate interest (Art. 6(1)(f)) |
Who we share it with
We use trusted infrastructure and business service providers, such as Google Workspace, HubSpot, Calendly and Cloudflare, to operate our website and communications. They process data only under our instructions. We never sell personal data.
Our website loads the Saira typeface from Google Fonts, which means your browser connects to Google’s servers to fetch font files.
International transfers
Some providers may process data outside the European Economic Area. When they do, we rely on safeguards such as the EU Standard Contractual Clauses or an adequacy decision.
How long we keep it
- Enquiries that don’t become projects: 12 months after our last contact.
- Client and invoicing records: as long as applicable tax and corporate law requires (typically 10 years for accounting records in Portugal).
- Newsletter data: until you unsubscribe.
Your rights
You can ask us to access, correct, delete, restrict or transfer your personal data, and you can object to processing or withdraw consent at any time. Email max@coderstein.dev and we’ll reply within one month.
You also have the right to lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD).
Client data in our projects
When we work inside your systems, we act as a data processor on your behalf. That work is governed by our Master Services Agreement and, upon request, a GDPR-compliant Data Processing Agreement. See our security page for how we protect your data.
Changes to this policy
We’ll post any changes on this page and update the date at the top.