Who is responsible
This website is operated under Sören Müller's personal brand by Strategic Lead Agency EOOD, San Stefano Str. 23a, 1504 Sofia, Bulgaria. The company is the controller of the personal data described here.
For privacy questions or requests, email soren@sorenmuller.com.
Discovery calls and enquiries
When you complete a discovery form or contact me, I process the details you provide, such as your name, email address, company, website, revenue range, advertising spend range, and your message. I also keep the submission time, page and referral information, and campaign parameters where available. A one-way hash of the submitting IP address helps limit spam; the form does not store the raw IP address in its lead record.
I use this information to respond, prepare for a call, assess whether and how we might work together, and keep a record of the conversation. The legal basis is Article 6(1)(b) GDPR when taking steps at your request before a possible contract, and Article 6(1)(f) GDPR for ordinary business communication and protection against misuse.
Required form fields are marked on the form. Without them, I cannot process the request or send you to the booking step. Your discovery details do not subscribe you to the newsletter.
Calendar bookings
The booking page embeds Cal.com. When you open it, your browser connects to Cal.com. If you choose a time, Cal.com processes the details needed to arrange and confirm the meeting, including the name and email address carried over from the form. Cal.com may also collect technical information according to its privacy policy. The legal basis for arranging the call is Article 6(1)(b) GDPR.
Newsletter
If you separately subscribe to my newsletter, I use your email address and any details you choose to provide to send it to you. The newsletter is managed with Kit. The legal basis is your consent under Article 6(1)(a) GDPR. You can unsubscribe through the link in any newsletter or by emailing me. Unsubscribing does not affect an earlier lawful use of your data.
Website operation and service providers
Hosting providers process technical access data, such as IP address, time, requested page, browser information, and server response, to serve the site, keep it secure, and diagnose errors. The legal basis is Article 6(1)(f) GDPR. Providers involved in these activities include ALL-INKL.COM for website hosting, Supabase for storing discovery details, Cal.com for scheduling, and Kit for the newsletter. The application pages on apply.sorenmuller.com also use Sites hosting.
These providers receive only the information needed for their role. Some processing may take place outside the European Economic Area. Where required, transfers rely on an applicable adequacy decision or appropriate safeguards, such as standard contractual clauses. I do not sell your personal data.
How long information is kept
Enquiry and booking records are kept while a conversation or potential engagement is active and then for as long as reasonably needed for follow-up, business records, or legal claims. If we work together, contractual, accounting, and tax records may be kept for the periods required by law. Newsletter details are kept until you unsubscribe, subject to any limited records needed to respect that choice. Technical logs are kept according to the relevant provider's retention settings and operational needs.
Your choices and rights
Subject to the GDPR's conditions, you may request access, correction, deletion, restriction, or portability of your data. You may object to processing based on legitimate interests and withdraw consent where consent is the basis. Contact soren@sorenmuller.com to make a request.
You can also complain to a data protection authority. In Bulgaria, this is the Commission for Personal Data Protection.
Updates
I may update this notice when the site, services, or legal requirements change. The date at the top shows the latest version.