Privacy Policy
Last updated: April 19, 2026
This Privacy Policy describes how Marian Sanjur ("I", "me", or "my") collects, uses, and protects personal information in connection with the website mariansan.io (the "Site"). The Site is my personal portfolio, including a project changelog/feed ("Now").
By using the Site, you agree to the practices described in this Policy. If you do not agree, please do not use the Site.
1. Who I am (Data Controller)
Controller: Marian Sanjur Site: mariansan.io Location: Republic of Panama Contact: hello@mariansan.io
For the purposes of the EU General Data Protection Regulation (GDPR), I am the "data controller" of the personal data processed through the Site. For the purposes of the California Consumer Privacy Act (CCPA/CPRA), I am the "business."
2. What information is collected
The Site is a read-only personal portfolio. There are no forms, accounts, subscriptions, or comments. The only personal data processed falls into two categories:
Information you send me voluntarily: If you click the email link on the Site and send me a message, I will receive your email address and any information you include in the message. This is managed entirely through your own email client and provider.
Information collected automatically via Google Analytics 4 (GA4):
- IP address (anonymized / truncated by GA4)
- Browser type, device type, operating system, screen resolution
- Language and approximate geographic location (country/region level)
- Pages visited, referring URL, time on page, click events, timestamps
- Device identifiers and pseudonymous user/session identifiers stored in cookies
GA4 data is collected only after you provide consent through the cookie banner (see Section 4).
I do not collect special categories of data (e.g., health, biometric, racial, religious, or political data), and I do not knowingly collect personal information from children under 16.
3. How your information is used (Purposes and Legal Bases)
| Purpose | Legal basis (GDPR) |
|---|---|
| Replying to emails you send me | Legitimate interest (Art. 6(1)(f)) |
| Analyzing Site usage via Google Analytics 4 | Consent (Art. 6(1)(a)) |
| Operating, securing, and improving the Site | Legitimate interest (Art. 6(1)(f)) |
| Complying with legal obligations | Legal obligation (Art. 6(1)(c)) |
I do not use your personal data for advertising, profiling, marketing lists, or automated decision-making.
4. Cookies and tracking technologies
The Site uses cookies managed through CookieYes, a consent management platform (CMP). On your first visit, CookieYes displays a banner allowing you to accept, reject, or configure non-essential cookies by category.
Cookie categories used:
| Category | Purpose | Examples |
|---|---|---|
| Strictly necessary | Required for the Site to function and for consent management | CookieYes consent cookies (e.g., cookieyes-consent) |
| Analytics | Google Analytics 4 — measures Site usage and performance | _ga, _ga_<CONTAINER-ID> |
| Functional / Advertising | Not currently used | — |
Google Analytics 4 specifics:
- Provider: Google Ireland Ltd. / Google LLC
- IP anonymization is enabled
- Data is transferred to Google servers, including in the United States, under the EU-U.S. Data Privacy Framework and Standard Contractual Clauses
- Default retention for GA4 event data: 14 months
Non-essential cookies (including GA4) only load after consent. You can change or withdraw your consent at any time by clicking the cookie preferences link in the Site footer, which reopens the CookieYes banner. You can also block or delete cookies through your browser settings.
5. How your information is shared
I do not sell your personal information, and I do not "share" it for cross-context behavioral advertising as defined under the CCPA/CPRA.
Personal data may be processed by the following service providers on my behalf:
- Vercel Inc. (United States) — hosting and edge network
- Namecheap (United States) — domain and DNS
- Google Ireland Ltd. / Google LLC (Ireland / United States) — Google Analytics 4
- CookieYes Limited (Ireland / United Kingdom) — cookie consent management
- Email providers (e.g., Gmail / Google Workspace) — for receiving and replying to messages
Disclosure to legal or regulatory authorities may occur where required by law, subpoena, or to protect my rights.
6. International data transfers
The Site is operated from Panama and relies on providers located primarily in the United States and the European Union. When personal data originating in the European Economic Area (EEA), United Kingdom, or Switzerland is transferred outside those regions, the following safeguards apply:
- Standard Contractual Clauses (SCCs) approved by the European Commission, and/or
- Service providers certified under the EU-U.S. Data Privacy Framework (e.g., Google LLC).
You may request a copy of the applicable safeguards by contacting me.
7. Data retention
- Emails you send me: retained in my email account for as long as reasonably useful for correspondence or record-keeping, and deleted on request.
- GA4 analytics data: up to 14 months (GA4 default), in pseudonymized form.
- Cookie consent records (CookieYes): up to 12 months, as required to evidence your consent.
When data is no longer needed, it is deleted or anonymized.
8. Your rights
8.1 Rights under GDPR (EEA / UK residents)
Subject to applicable conditions, you have the right to:
- Access the personal data I hold about you.
- Rectify inaccurate or incomplete data.
- Erase your data ("right to be forgotten").
- Restrict or object to certain processing.
- Data portability — receive your data in a structured, machine-readable format.
- Withdraw consent at any time, without affecting the lawfulness of prior processing.
- Lodge a complaint with your local supervisory authority.
8.2 Rights under CCPA/CPRA (California residents)
California residents have the right to:
- Know what personal information is collected and used.
- Delete personal information, subject to certain exceptions.
- Correct inaccurate personal information.
- Opt out of the sale or sharing of personal information. I do not sell or share personal information for cross-context behavioral advertising.
- Limit the use of sensitive personal information. I do not collect sensitive personal information as defined under the CPRA.
- Non-discrimination for exercising your rights.
8.3 Rights under Panamanian law
In accordance with Law No. 81 of 2019 on Personal Data Protection of the Republic of Panama, data subjects located in Panama have the rights of access, rectification, cancellation, opposition, and portability (ARCO-P rights), and may file complaints with the National Authority for Transparency and Access to Information (ANTAI).
8.4 How to exercise your rights
To exercise any of these rights, contact me at hello@mariansan.io. I will respond within the timeframes required by applicable law (typically 30 days under GDPR; 45 days under CCPA, extendable once). I may request information to verify your identity before acting on your request.
9. Security
I implement reasonable technical and organizational measures to protect personal information, including encryption in transit (TLS), access controls, and use of reputable infrastructure providers. No method of transmission or storage is 100% secure, and absolute security cannot be guaranteed.
10. Third-party links
The Site contains links to external websites and profiles (e.g., GitHub, LinkedIn, project repositories, referenced articles). I am not responsible for the privacy practices of those third parties. Please review their policies before providing them with any information.
11. Children's privacy
The Site is not directed to children under 16, and I do not knowingly collect personal data from them.
12. Changes to this Policy
I may update this Policy from time to time. The "Last updated" date at the top of this document indicates when it was last revised. Continued use of the Site after an update constitutes acceptance of the revised Policy.
13. Contact
For questions, requests, or complaints regarding this Privacy Policy or your personal data:
Email: hello@mariansan.io Location: Panama City, Republic of Panama