← RM Advisory

Privacy Notice

Last updated 30 July 2026

This notice explains how RM Advisory collects and uses personal data through rmadvisory.io. It is written to meet the transparency requirements of Articles 13 and 14 of the GDPR.

Who is responsible

RM Advisory is the data controller. RM Advisory is operated by Rodrigo Medgenberg, based in Dublin, Ireland.

For any question about this notice or your personal data, contact rodrigo.medgenberg@gmail.com.

What is collected

• Contact form. Your name, email address, the engagement type you select, and anything you write in the message field.
• Scheduling. If you book a session, the booking provider collects your name, email address and chosen time.
• Server logs. The hosting provider records standard technical data such as IP address, browser type and page requested.

This site sets no analytics, advertising or tracking cookies.

Why it is collected, and the lawful basis

Purpose	Lawful basis
Responding to your enquiry and corresponding about possible work	Legitimate interests, and steps taken at your request prior to entering a contract
Arranging and holding a meeting you have requested	Steps taken at your request prior to entering a contract
Keeping the site secure and available	Legitimate interests

Your details are not used for marketing, are not added to any mailing list, and are never sold or shared for advertising.

Processors

A small number of service providers process data on RM Advisory's behalf:

• Formspree processes contact form submissions.
• Calendly processes meeting bookings.
• Vercel hosts the site and processes server logs.
• Google (Gmail) processes email correspondence.

Some of these providers are based in the United States. Where personal data is transferred outside the European Economic Area, transfers rely on the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework.

How long it is kept

Enquiries that do not lead to a conversation are deleted within 12 months. Correspondence relating to an actual or prospective engagement is kept for the duration of that engagement and for six years afterwards, in line with normal business and tax record-keeping. Server logs are retained by the hosting provider on a short rolling basis.

Please do not send confidential information

The contact form is not a secure channel. Please do not submit confidential, price-sensitive or commercially sensitive material through it. If a conversation reaches the point where such information is relevant, it will be handled under a mutual non-disclosure agreement.

Your rights

You have the right to request access to your personal data, to have inaccurate data corrected, to request erasure, to request restriction of processing, to data portability, and to object to processing carried out on the basis of legitimate interests. To exercise any of these, email the address above. There is no charge, and a response will be provided within one month.

Complaints

If you are not satisfied with how your data has been handled, you may lodge a complaint with the Irish Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28, or at dataprotection.ie.

Changes

Any change to this notice will be published here with a revised date.