01
Coralis is a fractional marketing consultancy operated by Montserrat Zarama, based in Amsterdam, the Netherlands. Coralis is the data controller for all personal data collected through this website.
Data controller
Coralis — Montserrat Zarama
Amsterdam, the Netherlands
02
We collect two categories of personal data, depending on how you interact with this website.
| Data | Source | Required? |
|---|---|---|
| Full name | Resource request form | Yes |
| Email address | Resource request form | Yes |
| Company name | Resource request form | Yes |
| Marketing consent preference | Resource request form | No — your choice |
| IP address (anonymised) | Google Analytics (GA4) | Automatic |
| Device type, browser, country | Google Analytics (GA4) | Automatic |
| Pages visited, session duration | Google Analytics (GA4) | Automatic |
We do not collect sensitive personal data (such as health information, political views, or financial data), and we do not collect data from children under 16.
03
We use the data we collect for the following purposes:
| Purpose | Data used |
|---|---|
| Delivering requested resources Sending the framework, playbook, or guide you requested. |
Name, email |
| Internal marketing research Understanding our audience, which topics resonate, and how to improve our content and services. |
Name, email, company |
| Marketing communications (opt-in only) Sending thought leadership content, new resources, service announcements, and event invitations — only if you explicitly opted in. |
Name, email |
| Website analytics Understanding how visitors use this website so we can improve it. |
Anonymised usage data via GA4 |
We do not sell your data to third parties. We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.
04
Under GDPR, every processing activity must have a lawful basis. Here is ours:
| Purpose | Legal basis |
|---|---|
| Delivering requested resources | Consent — you explicitly agreed when submitting the form |
| Internal marketing research | Legitimate interest — understanding our audience to improve our services, balanced against your interests |
| Marketing communications | Consent — only if you ticked the optional marketing opt-in box. This consent is separate from and independent of the resource delivery consent |
| Website analytics | Legitimate interest — improving website performance and content; data is anonymised by GA4 |
Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.
05
We use a small number of trusted third-party services to operate this website. These act as data processors on our behalf and are contractually bound to handle your data securely and only for the purposes we specify.
| Service | Purpose | Data shared |
|---|---|---|
| Formspree formspree.io |
Receives and forwards form submissions to our inbox | Name, email, company, resource selection, consent status |
| Google Analytics (GA4) analytics.google.com |
Website usage analytics | Anonymised usage data (IP anonymised by Google) |
| Netlify netlify.com |
Website hosting and delivery | Standard server logs (IP address, request data) |
All three services are subject to their own privacy policies and GDPR compliance programmes. Formspree and Netlify are US-based companies; data transfers to the US are covered by standard contractual clauses (SCCs) or adequacy decisions where applicable.
06
We retain personal data only for as long as necessary for the purposes for which it was collected:
| Data | Retention period |
|---|---|
| Form submissions (name, email, company) | Up to 3 years from date of submission, unless you request earlier deletion |
| Marketing communications list | Until you unsubscribe or request deletion |
| GA4 analytics data | 14 months (Google's default retention period) |
| Netlify server logs | Managed by Netlify per their data retention policy |
You may request deletion of your data at any time — see Section 8.
07
Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:
08
To exercise any of the rights listed above, please contact us by email. We will respond within 30 days, in line with GDPR requirements.
To unsubscribe from marketing communications, you can use the unsubscribe link in any marketing email, or send an email to montserrat@thisiscoralis.com with the subject line Unsubscribe.
To lodge a complaint with the Dutch Data Protection Authority:
Autoriteit Persoonsgegevens
autoriteitpersoonsgegevens.nl
Tel: +31 (0)70 888 85 00
09
This website uses Google Analytics 4 (GA4) to understand how visitors interact with our content. GA4 uses cookies — small text files stored in your browser — to collect anonymised usage data such as pages visited, session duration, device type, and approximate location (country level).
IP addresses are anonymised by Google before any data is stored. We do not use GA4 data to identify individual visitors or to target advertising.
GA4 data is retained for 14 months. You can opt out of Google Analytics tracking using the Google Analytics Opt-out Browser Add-on.
We do not use any other tracking cookies, advertising cookies, or third-party cookies beyond those set by Google Analytics and Netlify's hosting infrastructure.
10
We may update this Privacy Policy from time to time as our practices change or as required by law. When we do, we will update the "Last updated" date at the top of this page.
If we make significant changes that affect how we use your data, we will notify affected individuals by email where we hold a valid email address.
We encourage you to review this page periodically to stay informed about how we protect your data.
11
If you have any questions about this Privacy Policy or how we handle your personal data, please get in touch.
Montserrat Zarama — Coralis
Amsterdam, the Netherlands