Privacy Policy

INTRODUCTION

This Privacy Notice describes how Vinea Ventures Ltd. ("Vinea", "we", "us", "our") collects, uses, stores, discloses and otherwise processes personal information associated with https://www.fabianweinberger.com and https://www.independencenation.com, including their apex domains and related public pages (the "Websites"). It also addresses enquiries, introductory appointments and client correspondence arising from those Websites.

The legal operator and, where it determines the purposes and means of processing, data controller is Vinea Ventures Ltd., company number C 117259, incorporated in Malta. Registered office: 230, 230 Works Business Centre, Second Floor, Triq il-Kungress Ewkaristiku, Mosta MST 9039, Malta. Privacy contact: privacy@fabianweinberger.com. The Websites are brands, not separate data-controlling companies for these activities.

The Fabian Weinberger Website presents professional experience and potential commercial work in sales, business development, commercial representation and related consulting. Independence Nation presents business consulting for independent professionals and entrepreneurs and links to an external Calendly introductory booking service. Actual paid engagements and future services may require supplementary privacy information and separate contractual terms.

This Notice does not govern data for which another business independently decides the purposes and means of processing, or every activity of unrelated external websites. We explain the respective roles where a third-party booking or hosting provider is involved. If you have a question about a particular record or processing activity, contact the address above.

SUMMARY OF KEY POINTS

Personal information: Depending on your interaction, we handle names and contact/business details submitted through Fabian Weinberger enquiries, appointment information provided on Calendly from Independence Nation, website delivery/security metadata and Vercel Web Analytics information only after analytics opt-in. The Websites do not currently offer public user accounts, newsletter signup or on-site checkout.

Sources: You, an authorized colleague or referrer, booking guests and relevant technical services. We do not claim that no information ever arrives from another person.

Purposes and bases: Responding to enquiries, arranging requested appointments, administering an agreed service, website delivery/security, proportionate measurement where lawful, legal obligations and rights requests. Each purpose needs a valid legal basis; submitting an enquiry is not an unlimited marketing opt-in.

Recipients: Vercel for website hosting and site analytics; Google email for Fabian enquiries; Calendly for Independence Nation's external bookings; personnel and advisers authorized for the relevant task. An external provider can also act independently for some of its own purposes.

International processing: Fabian server functions are configured in a US compute region; Calendly states that invitee data is stored in the United States. Location of every email, analytics, security log or backup cannot be inferred from a server-region label. Transfers are subject to applicable law and safeguards where required.

Rights: Depending on the law applicable to your information, you may seek access, correction, erasure, restriction, portability, objection, withdrawal of consent and additional regional protections. For requests, contact privacy@fabianweinberger.com or write to our registered office marked “Privacy.” No proprietary rights-request portal is necessary.

Cookies and choices: Vercel Web Analytics on both Websites is subject to optional analytics consent; it does not rely on conventional analytics cookies. Fabian Weinberger remembers the visitor's decision using a necessary first-party vinea_consent preference cookie (182 days, revision 1). Independence Nation uses a separate necessary first-party in_privacy_choice cookie (180 days, revision 1). Both choices can be rejected or withdrawn; they do not transfer between domains. The Cookie Policy gives the precise attributes and instructions.

TABLE OF CONTENTS

1. What information do we collect?

2. How do we process your information?

3. What legal bases do we rely on?

4. When and with whom do we share information?

5. Cookies, analytics and similar technologies

6. International processing and transfers

7. Retention and deletion

8. Security and confidentiality

9. Children and minors

10. Your privacy rights

11. Browser Do Not Track and preference signals

12. US residents and state-law rights

13. Other regional privacy rights

14. Updates to this Notice

15. Contact details and supervisory authorities

16. Review, correction, objection and deletion requests

1. WHAT INFORMATION DO WE COLLECT?

Information you provide through Fabian Weinberger

The current enquiry forms at /contact, /high-ticket-sales and /business-development ask for inquiry type, first name, last name, email, country, the product or service you sell, a description of your opportunity and confirmation of the stated contact/disclaimer information. Optional information includes company, business website, international telephone country code and number, typical deal value, primary lead source, approximate monthly lead volume and current sales structure. Telephone country information may be required when a telephone number is supplied.

The form also records the known public source-page path, enquiry category, the referring website's origin rather than its full URL, submission time and an anti-spam field. Phone numbers may be normalized into international format. The server validates submissions and is configured to hand accepted enquiries to Google email infrastructure. The Website does not create a separate database record of the submitted enquiry or automatically send a visitor confirmation. Successfully delivered enquiries are retained in business correspondence under the criteria in section 7.

Information provided when arranging Independence Nation appointments

Independence Nation provides an ordinary external link to https://calendly.com/fabian-fabianweinberger/30min for a free 30-minute introductory discussion, separate from any paid engagement. Calendly asks for your name and email and permits optional preparation notes and guest addresses; it also processes the chosen appointment time, date, timezone and event details. When you choose to book, Calendly handles the submission under the applicable participant/customer arrangements and makes the information needed to arrange the call available to the organizer. Further information about the actual connected calendar, conference service, reminders or recording options can be requested from our privacy contact. Opening or scrolling the Independence Nation Website does not load Calendly's scheduler or third-party booking technologies.

An ordinary external link does not cause all Calendly booking trackers to run within Independence Nation. Once you enter Calendly's own website, Calendly may process network/device information and operate its own cookie preferences, security, fraud-detection and optional measurement services. Its privacy information is at https://calendly.com/legal/privacy-notice. Please do not place confidential, health or unrelated personal information in booking notes or URL query strings.

Client and business administration

For separately agreed consulting, representation or other services, we may process the client or business contact's identity, engagement scope, meeting and delivery records, correspondence, fees, invoices, payments and complaints. Where a particular engagement entails additional information or recipients, we provide relevant supplementary notice as required by law.

Information collected automatically

When you request a page or use a form, delivery and security systems receive IP address, URL/path, browser and network headers, time and request information. Fabian's inquiry endpoint derives a pseudonymous HMAC from the request IP using a per-process random secret, stores a short-lived in-memory counter, limits requests to five in a ten-minute window and removes expired keys by timer/request sweeps with bounded capacity. The application counter does not intentionally log raw IP addresses. An HMAC-derived key remains potentially personal data; independent hosting/security logs are separate.

We use Vercel Web Analytics to understand aggregated traffic and page views only after affirmative optional-analytics consent. Depending on the provider's current implementation, events can involve time, known public page path or route, a permitted referrer, browser and device characteristics, operating-system details and approximate location inferred from requests. The provider's request-derived visitor hash resets approximately every 24 hours; aggregate report retention is separate. Both Websites allowlist public paths and exclude all query strings and fragments, booking details, personal identifiers, form content, campaign parameters and custom conversion or identity calls from analytics. If an unsafe external referrer cannot be sanitized through the official SDK's beforeSend interface, the affected event is withheld.

We do not use Vercel Speed Insights on either Website. Previously collected performance information, if held by a provider, remains subject to applicable retention and rights requirements.

Approximate location can be inferred from an IP address or network request for traffic measurement and website security. Neither Website asks for device GPS or precise-location permission, and neither currently provides public member profiles, account registration, online checkout or social-media login.

Special-category data and third-party information

The Websites are not intended to solicit sensitive or special-category data, biometric templates or full identification documents. A free-text field can nevertheless receive sensitive information if a visitor volunteers it; please avoid doing so. If we receive such information, we assess the lawful, necessary handling and deletion or restriction rather than treating an accidental disclosure as blanket permission to process it.

We may receive business contact details from an authorized representative, someone introducing a potential client, a booking guest entry, or an external scheduling provider. When personal information is obtained indirectly, any required additional transparency notice will be supplied within the time and manner prescribed by the applicable law.

2. HOW DO WE PROCESS YOUR INFORMATION?

We process relevant information for the following distinct purposes: receiving and responding to commercial enquiries; arranging requested introductory conversations; evaluating and, if agreed, delivering consulting or representation; communicating about an existing enquiry or engagement; maintaining the Websites; validating and securing submissions and preventing abuse; obtaining aggregate website traffic and performance insight where legally justified; complying with recordkeeping and other legal obligations; responding to privacy, complaints or legal claims; and administering a lawful business transfer where relevant.

An enquiry or free appointment is not agreement to receive unrelated promotional messages. We do not automatically enrol current Website visitors in a newsletter. Any future optional subscription will identify its sender, brand and subject, use any required separate opt-in and include an unsubscribe route. We will not use a form confirmation as a surrogate cookie-consent mechanism.

We do not use these Website functions to make solely automated decisions that have legal or similarly significant effects on visitors. Technical anti-abuse screening and provider security risk tools are not, by themselves, decisions about your legal rights. Any future material automated-decision use would require separate assessment and notices.

3. WHAT LEGAL BASES DO WE RELY ON?

For individuals protected by the EU GDPR or UK GDPR, the applicable purpose and legal basis are as follows.

Enquiries and requested pre-contractual steps

If you seek a service in your own name and processing is objectively necessary to respond to your pre-contractual request, Article 6(1)(b) GDPR may apply. If you represent a company or another professional, Article 6(1)(f) legitimate interests is generally relevant to our interest in communicating with the representative and evaluating the organization's commercial enquiry, subject to an appropriate necessity/balancing assessment.

Performance of a service

Article 6(1)(b) applies where processing is necessary to perform an actual contract with you. For a company's personnel or representatives, Article 6(1)(f) may cover proportionate contract administration and relationship management with that company, subject to balancing. These bases do not authorize unrelated uses.

Delivery, security and abuse prevention

Article 6(1)(f) may support website security, safe form handling, proportionate security logs, troubleshooting and fraud prevention where the legitimate-interest balance supports it. Some processing may instead be required by a specific legal duty under Article 6(1)(c). An ordinary legitimate-interest basis does not remove a separate requirement for consent to non-exempt storage or access on your device.

Aggregate traffic and performance measurement

We use optional Vercel Web Analytics on the basis of your consent under Article 6(1)(a) GDPR. The analytics script is not loaded before you affirmatively accept it and can be rejected without affecting general browsing, enquiries or booking. You can reopen Consent Preferences using the persistent footer control and withdraw at any time. On Independence Nation, withdrawal immediately denies analytics and reloads the page to remove active SDK listeners. On Fabian Weinberger, withdrawal takes effect without a reload: every potential analytics event rechecks the current consent cookie through the SDK's beforeSend hook and is suppressed after withdrawal. The absence of conventional analytics cookies does not settle the requirements of electronic-communications law. Necessary storage of your privacy choice remembers your instruction and does not itself activate optional measurement.

Marketing, legal obligations and rights

Any optional marketing that relies on consent is based on Article 6(1)(a), and you may withdraw that consent. Other direct marketing, if ever used, must satisfy the applicable lawful basis and electronic-marketing rules and can be objected to at any time. Accounting, tax and statutory reporting where applicable are processed under Article 6(1)(c). Proportionate legal-claim records may be processed under Article 6(1)(f) or another applicable basis.

We do not rely upon an artificial consent checkbox for all processing or treat service terms as unlimited consent. If a different legal basis is required under an applicable regional law, we assess that separately.

4. WHEN AND WITH WHOM DO WE SHARE INFORMATION?

Hosting and website measurement — Vercel

Vercel provides hosting and page delivery for both Websites and processes technical requests. The Fabian Weinberger enquiry endpoint also processes form submissions through that infrastructure. When you opt into analytics, Vercel Web Analytics handles the relevant page-view context. We do not use Speed Insights. Vercel may have different roles for customer-provided data and service-generated information; the Privacy Policy's international-processing section explains the relevant transfer considerations.

Enquiries — Google email

Fabian Weinberger enquiries are processed through a secure SMTP handoff using Google's email infrastructure to the company enquiry address hello@fabianweinberger.com, with your supplied address used as Reply-To. The message includes your submitted information, the public source route, the origin of the referring website (without path, query or fragment), and submission time. This form does not automatically forward enquiries to GoHighLevel or write them to a public Supabase lead database. Contact records and correspondence are subject to our stated retention criteria.

Booking — Calendly

For Independence Nation, an outgoing booking link opens Calendly. If you book, the scheduler receives your details and makes the booking information available to the event organizer or authorized account recipients. Calendly's published data-processing agreement addresses booking-data processing on the customer's instructions and separately identifies certain activities for which Calendly is controller. Its embedded-service cookie allocation is not automatically applicable to a plain external link. Review Calendly's separate notice for its own independent processing.

Other recipients and conditional sharing

Staff, authorized contractors and relevant professional advisers may access information where genuinely needed for an enquiry, service, accounting, compliance or legal matter. We may disclose what lawfully must be disclosed to courts, regulators or competent authorities, or proportionate information to professional advisers or a legitimate successor in a financing, merger, sale of assets or restructuring, with appropriate safeguards and notices.

Information is not automatically shared with every client or property developer Vinea represents. If a particular third-party introduction, compensated referral or transaction entails identifiable information being passed to another controller, we will identify the recipient and purpose at the appropriate stage. We do not claim a payment processor, AI platform, CRM, social-login provider or marketing pixel is active on these Websites merely because such a category exists or software is installed.

Service providers acting on our instructions are subject to the data-protection requirements applicable to that processing; other providers can act as independent controllers for specified purposes and provide separate privacy notices. The purpose, role and applicable contractual safeguards depend on the recipient and processing activity. You may ask our privacy contact about the arrangements relevant to your information.

5. COOKIES, ANALYTICS AND SIMILAR TECHNOLOGIES

We maintain a separate Cookie Policy at /cookie-policy on each Website. It explains cookies, local storage, browser/device APIs, tracking pixels, Vercel analytics and external booking technologies, including why a service can process technical data without creating browser cookies.

Both Websites use locally bundled, open-source CookieConsent controls. Optional Vercel Web Analytics remains unloaded until affirmative consent and does not set analytics cookies. It uses a request-derived visitor hash designed to reset daily. A first-party analytics request can still involve personal-data or device-access legal considerations. A necessary first-party cookie remembers your choice for approximately six months; the precise site-specific inventory and withdrawal instructions are in the Cookie Policy. Neither Website uses Speed Insights, Meta Pixel, Google Analytics or similar advertising trackers.

Independence Nation uses a normal external Calendly booking link and does not load the scheduler's scripts, styles, popups or iframes on its own pages. Calendly's technologies, preferences and independent processing apply when you deliberately follow that link to the provider's website.

Accept and reject controls for optional analytics are offered with equal prominence. No consent is inferred from scrolling, inactivity, submitting an enquiry or merely using the Websites. Legal pages and booking links remain available before a choice and after rejection. You can reopen preferences from the footer and withdraw at any time; changing a choice on one domain does not automatically change it on the other domain.

6. INTERNATIONAL PROCESSING AND TRANSFERS

Our Websites are operated from Malta, while relevant suppliers may process data internationally. Fabian Weinberger's website functions have been configured to run in Vercel's United States region (iad1, Washington, D.C.); website delivery, analytics, security logs and backups can use different locations. Calendly states that it stores customer and invitee information in United States data centres. Google's email-processing locations depend on the account and service. The relevant transfer rules and safeguards are described below; do not assume that all processing stays inside the EEA.

Where GDPR or UK GDPR restricts transfers outside the applicable territory, we must rely on a valid permitted transfer arrangement for the specific recipient and data: an applicable adequacy decision where its conditions are met, approved standard contractual clauses or other legally available safeguards, or a narrow lawful derogation where appropriate. Provider certifications, published addenda and transfer terms require checking for actual applicability to Vinea's account and activities; their general publication does not alone establish that every transfer is covered.

You may contact privacy@fabianweinberger.com to ask about recipients, destinations and applicable safeguards, including how to obtain a copy of relevant transfer arrangements, where available and subject to appropriate redaction. Using either Website or arranging a call does not constitute an unrestricted consent to international transfers.

7. HOW LONG DO WE KEEP YOUR INFORMATION?

We apply the principle that identifiable personal information should be kept only as long as necessary for a genuine purpose, a contractual obligation or a legal requirement. The criteria below are not a promise that every provider has the same storage period, nor does a browser-cookie lifetime determine record retention.

Commercial enquiries and correspondence are assessed according to whether an enquiry remains live, a reply or agreed follow-up is outstanding, a service is being discussed or delivered, and whether limited records are needed for legal obligations, complaints or reasonably anticipated claims. The Fabian enquiry record is held in email rather than the reviewed public website database; ordinary mailbox retention and backups therefore matter.

Appointment details are needed to arrange, perform, reschedule, confirm or address a requested meeting and any related client matter. Where Calendly or connected calendars/emails retain copies, applicable account settings and lawful recordkeeping purposes determine how they are managed; declining cookies does not erase a booked meeting.

Signed engagement, invoice, accounting and complaint records are retained according to applicable legal duties, the period needed to administer the engagement, and relevant claims periods. Technical and security information follows its own criteria. The Fabian Weinberger server uses short-lived HMAC-derived abuse-counter keys during its ten-minute rate-limit window and clears expired keys through timer- and request-driven sweeps within a bounded in-memory store. Hosting-provider security logs have separate retention arrangements, not determined by this application's counter.

Website analytics aggregates and daily visitor hashes are not interchangeable: Vercel says the request-derived visitor hash resets after about 24 hours, but that alone does not specify how long aggregate reports, logs or other records remain. Providers and our operational records may have different deletion/backup cycles.

When a retention purpose ends, records should be deleted, de-identified irreversibly or restricted as required by law. You can ask which retention criterion applies to a particular record. We do not state a fabricated uniform 30-, 90- or 365-day deletion promise for all records.

8. HOW DO WE KEEP YOUR INFORMATION SAFE?

Both Websites use HTTPS. The Fabian Weinberger enquiry endpoint uses server-side input validation, an anti-spam field and bounded, HMAC-derived IP-based rate limiting. A per-process secret is used to derive the counter key, and raw IP addresses are not intentionally logged in that application counter. These measures reduce some security risks but do not eliminate all risks inherent in electronic communications or third-party services.

We seek to apply appropriate access and security measures to information handled by us and our providers. No website, mailbox or transmission method can be guaranteed completely secure. If you believe information associated with our Websites has been exposed or misused, contact privacy@fabianweinberger.com.

Submitting an enquiry or making a booking does not constitute permission for Vinea to record or transcribe a meeting using AI, publish an identifiable testimonial, or use your information for unrelated advertising. Any additional recording or comparable activity requires suitable notice and a valid legal basis. Calendly may offer security, experimental or recording-capable technology on its own service; see the provider's current notices for its own operations.

9. DO WE COLLECT INFORMATION FROM MINORS?

Our commercial consulting services are directed to adults and are not designed for children under 18. We do not intentionally invite minors to submit personal details through the Websites. If we become aware that a minor has supplied information in circumstances where its processing is not lawful, we will assess appropriate restriction or deletion and any required guardian contact. There are no current Website member accounts to deactivate.

10. WHAT ARE YOUR PRIVACY RIGHTS?

For processing covered by the EU GDPR or, where applicable, the UK GDPR, you may have rights to request access to personal information, obtain a copy, correct inaccurate data, erase information where legal grounds exist, restrict processing, receive applicable portable information, object to relevant legitimate-interest processing and withdraw any consent relied upon. Those rights have conditions and lawful exceptions; not every request entails unconditional deletion of lawful accounting or claims records.

You have an unconditional right to object to direct marketing using your personal information, including related profiling for that purpose. For other processing based on legitimate interests, you may object on grounds relating to your particular situation; we must assess whether compelling lawful grounds or legal claims justify further processing. Consent may be withdrawn at any time where it is relied upon, without retroactively invalidating processing that was lawful before withdrawal.

We do not use the Websites to make decisions based solely on automated processing that produce legal or similarly significant effects on you. If such processing were introduced, we would provide the notices and safeguards required by applicable law.

Under the GDPR, we normally must respond to rights requests without undue delay and within one month; in justified complex cases, the period can be extended by two further months if explained within the initial month. Requests are generally free, subject to limited statutory exceptions. We may verify identity proportionately to protect your information; do not send a passport copy unless a justified request is made.

You may complain to Malta's Information and Data Protection Commissioner (IDPC), and, where the law permits, another competent EEA supervisory authority. Contact information is at https://idpc.org.mt/. UK residents may have rights to complain to the UK Information Commissioner's Office at https://ico.org.uk/. Swiss residents may have rights before the Federal Data Protection and Information Commissioner, https://www.edoeb.admin.ch/. These rights do not depend on submitting an enquiry to us first.

11. CONTROLS FOR DO-NOT-TRACK FEATURES

Some browsers transmit a legacy “Do Not Track” (DNT) preference, Global Privacy Control (GPC) or comparable privacy signal. Their meaning and mandatory treatment can differ by jurisdiction. We do not currently operate our own cross-context advertising-sales or targeted-advertising pixel programme on the Websites. Where a recognized opt-out preference must legally be honoured for a particular activity, we will implement the relevant treatment rather than relying on a broad statement that all signals are ignored.

Cookies and device controls are described in the Cookie Policy. A preference signal does not automatically erase records processed for a separately lawful enquiry, appointment or statutory duty.

12. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

Scope and categories

Certain US states, including California and others with comprehensive consumer privacy legislation, may grant additional rights where the particular statute applies to our business and the processing involved. Thresholds, exceptions and rights differ by state; a visitor's residence alone does not make every US privacy law applicable to Vinea. This section supplements the processing details, categories and rights described elsewhere in this Notice.

Our current Website-related information categories, corresponding broadly to common US notice classifications, are: (A) identifiers such as name, email, telephone, IP address and online/request identifiers — collected or received where relevant; (B) business contact information and certain customer-record information — potentially collected in enquiries or client administration; (C) protected-classification characteristics — not intentionally solicited; (D) commercial information such as the type of offer, deal value and potential engagement details — collected when provided, although no on-site payment card/checkout operates; (E) biometric information — not requested; (F) internet/network activity such as pages visited, referrer, device/browser information and limited analytics — processed; (G) approximate location inferred from network requests or country chosen in a form — processed, with no precise GPS feature identified; (H) recorded voice, images or video — not collected through the reviewed Website forms, while off-site meetings are subject to separate assessment; (I) professional and business details such as company, job function, lead source or sales arrangements — processed when supplied; (J) student/education records — not solicited; (K) limited inferences relevant to qualifying a business enquiry — potentially derived; and (L) sensitive data — not intentionally requested but could appear in unstructured text.

These categories arise from you, authorized business contacts, an external booking or related provider, and technical request/measurement infrastructure. We process them for the purposes and retain them using the criteria explained in sections 2 and 7, and disclose them to the service-provider categories in section 4. We do not assume that every recipient uses data for a separate advertising purpose merely because a supplier supports that capability.

Sale, sharing, targeted advertising and sensitive information

The first-party Websites do not deploy cross-context behavioral advertising pixels or sell visitor contact lists as a Website business model. A service provider's independent processing on an external site, such as Calendly, is governed by the actual role and applicable law; we do not guarantee how every independent third party characterizes its own activity. Where a state law requires a sale/share/targeted-advertising opt-out because an activity is introduced or found to qualify, we will provide and honour the required mechanism.

We do not intentionally use sensitive personal information for advertising or profiling. If an applicable law requires a special limitation right, an authorized agent procedure, an opt-out preference signal or a specific notice, we will address that right for the relevant processing rather than declaring it universally inapplicable.

Rights and requests

Where applicable, US residents may request confirmation and access, categories or specific pieces of personal information, correction, deletion, a portable copy, information about recipients or categories of recipients, and opt-out of sale, sharing, targeted advertising or certain profiling. Some laws also provide appeal and nondiscrimination protections. Statutory exceptions, verification requirements, appeal timelines and the authorized-agent process vary by state.

Contact privacy@fabianweinberger.com with your state of residence and the right you wish to exercise. We will ask only for information reasonably necessary to verify identity or an agent's authority and will give the response or appeal mechanism required where the particular law applies. If an appeal is denied, applicable law may permit a complaint to a state attorney general or another designated regulator.

California Civil Code section 1798.83 (“Shine the Light”) may provide a qualifying California resident with information about certain disclosures for third-party direct marketing, if any. Requests may be sent to the same privacy contact. We do not claim a statutory exemption solely because a provider's analytics is described as anonymous.

13. DO OTHER REGIONS HAVE SPECIFIC PRIVACY RIGHTS?

United Kingdom and Switzerland

Where UK GDPR or Swiss data-protection law applies, individuals may have comparable but not identical access, correction, erasure, objection and complaint rights. UK international-transfer restrictions and Swiss requirements are evaluated separately where relevant. The appropriate national supervisory authority is identified in section 10.

Canada

Where federal or provincial Canadian privacy laws apply, individuals may have rights to know what is collected, obtain access or correction, withdraw consent subject to lawful limits, challenge compliance, or complain to the relevant privacy commissioner. We assess the relevant jurisdiction, applicable exceptions and the lawful basis before responding; the inclusion of Canadian website visitors does not establish that every provincial statute applies to the company.

Australia and New Zealand

Individuals protected by Australia's Privacy Act 1988 or New Zealand's Privacy Act 2020 may have rights concerning notice, access and correction and may complain to the Office of the Australian Information Commissioner or the Office of the Privacy Commissioner of New Zealand respectively. Whether a particular business or activity falls within these laws requires separate assessment. We do not assert that a generic Website notice automatically satisfies every local requirement.

South Africa and other jurisdictions

Where South Africa's Protection of Personal Information Act (POPIA) or another jurisdiction's privacy law applies, additional notice, access, correction, deletion, objection and complaint rights may exist. Residents may contact their competent regulator, such as South Africa's Information Regulator, and can contact us through the privacy address below. Nothing in this Notice removes protections that law grants to you.

14. DO WE MAKE UPDATES TO THIS NOTICE?

We update this Notice when our processing, providers, services, retention arrangements, legal requirements or website domains materially change. The current version displays its revision date. Where a new use requires fresh consent or additional notice, publication of modified text alone does not establish the lawful basis for processing.

Material changes may be announced on the relevant Website or by direct communication when required. Both Websites display this shared Notice locally at /privacy-policy, with site-specific facts in the relevant sections.

15. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

Data controller: Vinea Ventures Ltd., company number C 117259.

Registered office: 230, 230 Works Business Centre, Second Floor, Triq il-Kungress Ewkaristiku, Mosta MST 9039, Malta.

Privacy and data-rights email: privacy@fabianweinberger.com.

General enquiries: hello@fabianweinberger.com.

Legal correspondence: legal@fabianweinberger.com.

For an EEA complaint, see Malta's Information and Data Protection Commissioner at https://idpc.org.mt/. You may also contact another competent authority where applicable law permits.

16. HOW CAN YOU REVIEW, UPDATE, OBJECT TO OR DELETE YOUR INFORMATION?

Email privacy@fabianweinberger.com or write to the registered office, marked “Privacy Request.” Explain the Website or enquiry/booking involved and the right you wish to exercise. A request does not require a Termly account, a paid subscription or a proprietary data-subject request form.

We may request proportionate evidence of identity or authority to avoid disclosing someone else's records. We consider requests under the applicable law and explain any lawful refusal or exception. We will also address records held by our processors to the extent we are responsible for them and the provider's role permits, but cannot promise automatic deletion of independent-controller records held on another service merely because a browser cookie was cleared.

You may withdraw a consent where one was genuinely relied upon and object to direct marketing without explaining your reasons. If an internal response does not resolve your concern, the relevant legal complaint and judicial remedies remain available.