Privacy Policy
Privacy Policy of www.leijlafoss.me
This Website collects some Personal Data from its Users.
www.leijlafoss.me(referred to as “the Website,” “we,” or “our”) is committed to protecting your privacy. This policy outlines how we collect, use, and protect your personal data. It applies to all visitors, regardless of location, but includes additional rights and disclosures for residents of the European Economic Area (EEA), the United Kingdom (UK), and California, USA, in accordance with the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
Last Updated: July 2025
Data Controller Contact Information
Data Controller: Leijla Foss
Email: hello@leijlafoss.me
If you have questions about this privacy policy or wish to exercise your data rights, contact via email. Users can expect a response within 30 days.
Your Rights Under GDPR and CCPA
If you are located in the EU/EEA or UK (GDPR), you have the right to:
- Access the personal data we hold about you
- Request correction or deletion of your data
- Withdraw consent at any time (if processing is based on consent)
- Restrict or object to processing in some cases
- Request data portability (receive your data in machine-readable format)
- Lodge a complaint with your local data protection authority
If you are a California resident (CCPA), you have the right to:
- Know what categories of personal information we have collected and shared
- Request access to your personal data
- Request deletion of your data
- Opt out of the sale or sharing of your personal information (we do not sell personal data)
- Not be discriminated against for exercising your privacy rights
To exercise any of these rights, contact the Data Controller. Although we do not sell personal information, California residents may still submit a ‘Do Not Sell My Personal Information’ request by contacting us at hello@leijlafoss.me.
Age Restrictions
This Website is intended only for individuals who are 18 years of age or older. We do not knowingly collect personal data from individuals under 18. If we learn that we have inadvertently collected such data, we will delete it.
Legal Basis for Processing Personal Data (GDPR)
We only process your data when we have a legal basis to do so. This includes:
- Consent: You have given clear permission for us to process your data.
- Contract: The processing is necessary for a contract with you (e.g., payment for services).
- Legal Obligation: We are legally required to process your data.
- Legitimate Interests: We process your data to pursue our legitimate business interests (e.g., site analytics), provided your rights don’t override those interests.
Cookies & Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience, understand usage patterns, and deliver personalized content.
You can manage or disable cookies through your browser settings. EU/UK visitors will be prompted to give or withhold consent for cookies upon first visit via a cookie consent banner.
International Data Transfers
Your personal data may be transferred to and processed in countries outside of your residence, including the United States, where data protection laws may differ. We take steps to ensure appropriate safeguards are in place, such as standard contractual clauses or data processing agreements.
Data Security & Data Breach Notification
We implement reasonable technical and organizational measures to protect your personal data. However, no system is 100% secure, and we cannot guarantee absolute data security.
In the event of a data breach that affects your personal data, we will notify affected users and the relevant authorities as required by applicable law.
Opt-Out Options
You can unsubscribe from marketing emails by clicking the “unsubscribe” link in our emails or by contacting us. You can also opt out of analytics tracking by using tools like Google Analytics Opt-Out Browser Add-On.
Types of Data collected
Among the types of Personal Data that this Website collects, by itself or through third parties, there are: Cookies, Usage Data, first name, last name, phone number, email address and website.
Other Personal Data collected may be described in other sections of this privacy policy or by dedicated explanation text contextually with the Data collection.
The Personal Data may be freely provided by the User, or collected automatically when using this Website.
Any use of Cookies – or of other tracking tools – by this Website or by the owners of third party services used by this Website, unless stated otherwise, serves to identify Users and remember their preferences, for the sole purpose of providing the service required by the User.
Failure to provide certain Personal Data may make it impossible for this Website to provide its services.
Users are responsible for any Personal Data of third parties obtained, published or shared through this Website and confirm that they have the third party’s consent to provide the Data to the Owner.
Mode and place of processing the Data
Methods of processing
The Data Controller processes the Data of Users in a proper manner and shall take appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of the Data.
The Data processing is carried out using computers and/or IT enabled tools, following organizational procedures and modes strictly related to the purposes indicated. In addition to the Data Controller, in some cases, the Data may be accessible to certain types of persons in charge, involved with the operation of the site (administration, sales, marketing, legal, system administration) or external parties (such as third party technical service providers, mail carriers, hosting providers, IT companies, communications agencies) appointed, if necessary, as Data Processors by the Owner. The updated list of these parties may be requested from the Data Controller at any time.
Place
The Data is processed at the Data Controller’s operating offices and in any other places where the parties involved with the processing are located. For further information, please contact the Data Controller.
Retention time
The Data is kept for the time necessary to provide the service requested by the User, or stated by the purposes outlined in this document, and the User can always request that the Data Controller suspend or remove the data.
The use of the collected Data
The Data concerning the User is collected to allow the Owner to provide its services, as well as for the following purposes: Analytics, Displaying content from external platforms and Contacting the User.
The Personal Data used for each purpose is outlined in the specific sections of this document. This Website is not intended for individuals under the age of 18, and we do not knowingly collect data from minors.
Detailed information on the processing of Personal Data
Personal Data is collected for the following purposes and using the following services:
Analytics
The services contained in this section enable the Owner to monitor and analyze web traffic and can be used to keep track of User behavior.
Google Analytics (Google Inc.)
Google Analytics is a web analysis service provided by Google Inc. (“Google”). Google utilizes the Data collected to track and examine the use of this Website, to prepare reports on its activities and share them with other Google services.
Google may use the Data collected to contextualize and personalize the ads of its own advertising network.
Personal Data collected: Cookies and Usage Data.
Place of processing: US – Privacy Policy – Opt Out
Quantcast Measure (Quantcast Corporation)
Quantcast Measure is an analytics service provided by Quantcast Corporation.
Personal Data collected: Cookies and Usage data.
Place of processing: US – Privacy Policy – Opt Out
Display Advertising extension for Google Analytics (Google Inc.)
Google Analytics on this Website might use Google’s Interest-based advertising, 3rd-party audience data and information from the DoubleClick Cookie to extend analytics with demographics, interests and ads interaction data.
Personal Data collected: Cookies and Usage data.
Place of processing: US – Privacy Policy – Opt Out
Contacting the User
Contact form (This Website)
By filling in the contact form with their Data, the User authorizes this Website to use these details to reply to requests for information, quotes or any other kind of request as indicated by the form’s header.
Personal Data collected: email address, first name, last name, phone number, and website.
Mailing list or newsletter (This Website)
By subscribing to the mailing list or newsletter, the User’s email address will be added to the list of contacts who may receive email messages containing information of a commercial or promotional nature related to this Website. Users may also be added to this list automatically as a result of signing up on the Website or making a purchase.
Personal Data collected: First name, last name, email address, IP address, city, state, and country.
You can unsubscribe from promotional emails at any time by clicking the “unsubscribe” link at the bottom of any marketing email sent via EmailOctopus. You may also request removal by contacting us directly at hello@leijlafoss.me.
Please note:
- EmailOctopus automatically processes unsubscribe requests immediately.
- After unsubscribing, you may still receive transactional or service-related messages (e.g. purchase confirmations or client communications, if applicable).
- Your email address may remain stored in our system in an unsubscribed state to prevent future mailings, as required by anti-spam laws.
Displaying content from external platforms
This type of service allows you to view content hosted on external platforms directly from the pages of this Website and interact with them.
This type of service might still collect web traffic data for the pages where the service is installed, even when Users do not use it.
Google Fonts (Google Inc.)
Google Fonts is a typeface visualization service provided by Google Inc. that allows this Website to incorporate content of this kind on its pages.
Personal Data collected: Usage data and various types of Data as specified in the privacy policy of the service.
Place of processing: US – Privacy Policy
Vimeo video (Vimeo, LLC)
Vimeo is a video content visualization service provided by Vimeo, LLC that allows this Website to incorporate content of this kind on its pages.
Personal Data collected: Cookies and Usage Data.
Place of processing: US – Privacy Policy
Handling payments
Payment processing services enable this Website to process payments by credit card, bank transfer or other means. To ensure greater security, this Website shares only the information necessary to execute the transaction with the financial intermediaries handling the transaction.
Some of these services may also enable the sending of timed messages to the User, such as emails containing invoices or notifications concerning the payment.
Further information about Personal Data
Selling goods and services online
The Personal Data collected are used to provide the User with services or to sell goods, including payment and possible delivery.
The Personal Data collected to complete the payment may include the credit card, the bank account used for the transfer, or any other means of payment envisaged. The kind of Data collected by this Website depends on the payment system used.
Additional information about Data collection and processing
Legal action
The User’s Personal Data may be used for legal purposes by the Data Controller, in Court or in the stages leading to possible legal action arising from improper use of this Website or the related services.
The User declares to be aware that the Data Controller may be required to reveal personal data upon request of public authorities.
Additional information about User’s Personal Data
In addition to the information contained in this privacy policy, this Website may provide the User with additional and contextual information concerning particular services or the collection and processing of Personal Data upon request.
System logs and maintenance
For operation and maintenance purposes, this Website and any third party services may collect files that record interaction with this Website (System logs) or use for this purpose other Personal Data (such as IP Address).
Information not contained in this policy
More details concerning the collection or processing of Personal Data may be requested from the Data Controller at any time. Please see the contact information at the beginning of this document.
The rights of Users
Users have the right, at any time, to know whether their Personal Data has been stored and can consult the Data Controller to learn about their contents and origin, to verify their accuracy or to ask for them to be supplemented, cancelled, updated or corrected, or for their transformation into anonymous format or to block any data held in violation of the law, as well as to oppose their treatment for any and all legitimate reasons. Requests should be sent to the Data Controller at the contact information set out above.
This Website does not support “Do Not Track” requests.
To determine whether any of the third party services it uses honor the “Do Not Track” requests, please read their privacy policies.
Changes to this privacy policy
The Data Controller reserves the right to make changes to this privacy policy at any time by giving notice to its Users on this page. It is strongly recommended to check this page often, referring to the date of the last modification listed at the bottom. If a User objects to any of the changes to the Policy, the User must cease using this Website and can request that the Data Controller remove the Personal Data. Unless stated otherwise, the then-current privacy policy applies to all Personal Data the Data Controller has about Users.
Definitions and legal references
Personal Data (or Data)
Any information regarding a natural person, a legal person, an institution or an association, which is, or can be, identified, even indirectly, by reference to any other information, including a personal identification number.
Usage Data
Information collected automatically from this Website (or third party services employed in this Website), which can include: the IP addresses or domain names of the computers utilized by the Users who use this Website, the URI addresses (Uniform Resource Identifier), the time of the request, the method utilized to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the server’s answer (successful outcome, error, etc.), the country of origin, the features of the browser and the operating system utilized by the User, the various time details per visit (e.g., the time spent on each page within the Website) and the details about the path followed within the Website with special reference to the sequence of pages visited, and other parameters about the device operating system and/or the User’s IT environment.
User
The individual using this Website, which must coincide with or be authorized by the Data Subject, to whom the Personal Data refers.
Data Subject
The legal or natural person to whom the Personal Data refers.
Data Processor (or Data Supervisor)
The natural person, legal person, public administration or any other body, association or organization authorized by the Data Controller to process the Personal Data in compliance with this privacy policy.
Data Controller (or Owner)
The natural person, legal person, public administration or any other body, association or organization with the right, also jointly with another Data Controller, to make decisions regarding the purposes, and the methods of processing of Personal Data and the means used, including the security measures concerning the operation and use of this Website. The Data Controller, unless otherwise specified, is the Owner of this Website.
This Website
The hardware or software tool by which the Personal Data of the User is collected.
Cookies
Small piece of data stored in the User’s device.
Legal information
Notice to European Users: This privacy statement has been prepared in accordance with the General Data Protection Regulation (EU 2016/679) (“GDPR”), and the provisions of Directive 2002/58/EC, as amended by Directive 2009/136/EC (commonly referred to as the “ePrivacy Directive”), particularly regarding the use of cookies and similar tracking technologies.
This privacy policy relates solely to this Website.
Last updated July 2025
