Skip to main content
§ PRIVACY

Privacy Policy

Last updated

1. Who we are

Marathon Variety is the operator-studio of Mark Laursen and Amber Sutera. References to "we", "us", and "our" in this policy mean Marathon Variety acting as the data controller for personal data collected through this site.

Registered correspondence address: Campus da Penteada, 9020-105 Funchal, Madeira, Portugal.
Contact: hello@marathonvariety.com.

2. What this policy covers

This policy applies to marathonvariety.com and any subdomains we operate. It does not cover third-party sites we link to, or the products of companies we work with, advise, or hold an ownership stake in (for example, Brainjuice Labs).

3. Personal data we collect

We collect personal data only when you actively give it to us.

3.1 Contact form

When you submit the contact form on /contact, we collect the fields you fill in: name, company, engagement type, a short project description, an optional budget bracket, and the message body. Your IP address and submission timestamp are also recorded by our form processor for spam protection.

3.2 Direct email

When you email hello@marathonvariety.com, your name, email address, and the content of your message are stored in our mailbox.

3.3 Intro call booking

The "Book a 30-min intro" link routes to Google Calendar. If you book a slot, Google collects the data needed to schedule the meeting and shares the booking details with us. Google's processing is governed by its own privacy policy.

3.4 Server logs

Our hosting provider (Netlify) records standard request logs: IP address, user agent, request URL, timestamp, and response status. These logs are used for security, debugging, and abuse prevention.

4. Why we use your data (lawful bases)

  • Responding to inquiries. Lawful basis: pre-contractual steps under Article 6(1)(b) GDPR, and our legitimate interest in running our business under Article 6(1)(f).
  • Operating the site. Lawful basis: legitimate interest in maintaining a working, secure website.
  • Preventing abuse. Lawful basis: legitimate interest in protecting our infrastructure and users from spam, fraud, and attack.

5. Cookies and tracking

As of the date above, this site does not run analytics, advertising, or behavioral-tracking cookies. We do not use Google Analytics, Facebook Pixel, or comparable services.

The following cookies or storage may be set:

  • Hosting / security cookies set by Netlify when access controls are active. These are strictly necessary and not used for tracking.

If we add analytics in future, we will update this policy and ask for consent where required.

6. Third-party processors

We use a small set of trusted services to operate the site. Each is bound by its own data-processing terms.

  • Netlify, Inc. — site hosting and form submission handling. Data may be processed on servers in the United States under standard contractual clauses.
  • Google LLC — Calendar booking, fonts (self-hosted via @fontsource so no Google Fonts request is made from your browser), and YouTube trailer embed.
  • LinkedIn (Microsoft Ireland Operations Ltd.) — when you click our LinkedIn link.

7. International transfers

Where personal data is transferred outside the European Economic Area, the transfer is protected by Standard Contractual Clauses or another legally recognized mechanism under Chapter V GDPR.

8. How long we keep your data

  • Contact form submissions and email correspondence: up to 24 months from your last contact, then deleted unless we have an active engagement or a legal obligation to retain longer.
  • Server logs: up to 30 days, after which they are aggregated or deleted.

You can ask us to delete your data sooner. See section 9.

9. Your rights under GDPR

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Restrict or object to our processing
  • Data portability where applicable
  • Withdraw consent at any time, where consent is the basis

To exercise any of these rights, email hello@marathonvariety.com. We respond within 30 days.

You also have the right to lodge a complaint with the Portuguese data protection authority (Comissão Nacional de Proteção de Dados, CNPD) at www.cnpd.pt.

10. Security

We use HTTPS sitewide, modern TLS, and reputable hosting. No system is perfectly secure. If we become aware of a breach affecting your personal data, we will notify the relevant authority within 72 hours and contact you directly where the breach is likely to result in a high risk to your rights and freedoms.

11. Children

This site is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time. The current version always lives at this URL with a "Last updated" date at the top. Material changes will be summarized at the top of the page for at least 30 days.

13. Contact

Questions, requests, or concerns about this policy or our handling of your data:

Marathon Variety
Campus da Penteada
9020-105 Funchal
Madeira, Portugal
hello@marathonvariety.com