Privacy policy

Política de privacidade

Who is responsible

The controller for personal data collected through this website is Benjamin Latsko, trading as Benjamin Latsko Studio, NIF 323387284, based in Budens, 8650-067 Portugal. The full postal address is available on request by email. You can reach me at benjamin@latskostudio.com. There is no statutory obligation to appoint a data protection officer for an operation of this size, and none has been appointed.

What this website does not do

No analytics, no tracking pixels, no advertising tags
No cookies are set by this website
No profiling and no automated decision-making
Fonts are served from this website, not from a third-party font service, so no data is sent to Google or any font provider

Data you give me through the application form

The application form is embedded from Tally. When you submit it, the following is collected:

Your name and your role
Your work email address
Your company name, company website and LinkedIn or social profile
Your annual marketing budget range
Your answer to the growth question, and the tier you are applying for

Purpose. To assess your application, to reply to you, and if you are accepted, to run the program and invoice you.

Legal basis. Article 6(1)(b) GDPR, steps taken at your request before entering into a contract, and the performance of that contract if you join. Invoicing and tax records rest on Article 6(1)(c), a legal obligation.

The cohort two waitlist

If you join the waitlist, your email address and company name are collected through a separate Tally form. They are used for one purpose only: to tell you when the next cohort opens.

Legal basis. Article 6(1)(a) GDPR, your consent. You can withdraw it at any time by replying to any message or emailing me, and every message carries an unsubscribe option. Waitlist entries are deleted once the next cohort has opened and you have either applied or asked to be removed, and in any case after twenty-four months.

Data when you email me

If you write to me, your email address and the contents of your message are processed so that I can reply. Legal basis: Article 6(1)(b) or Article 6(1)(f) GDPR, my legitimate interest in responding to enquiries.

Server logs

The hosting provider records standard technical data when a page is requested, including the IP address, the time of the request, the page requested, and the browser and operating system reported. This is used to operate and secure the website and is not combined with any other data or used to identify you. Legal basis: Article 6(1)(f) GDPR, legitimate interest in a secure and functioning service.

Who processes data on my behalf

Tally: Blue Robot BV, Belgium. Hosts the application form and stores submissions. Data is processed within the EU.
domainfactory: domainfactory GmbH, Germany. Website hosting and server logs. Data is processed within the EU.
Google Workspace: Email and document storage, contracted through Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google may process data outside the EEA, including in the United States.

Transfers outside the EEA

Email and any documents held in Google Workspace may be transferred to and processed in countries outside the European Economic Area, including the United States. Google LLC is certified under the EU-US Data Privacy Framework, and Google’s data processing terms include the European Commission’s standard contractual clauses as an additional safeguard. No other personal data is transferred outside the EEA: the website and the application form are hosted within the European Union.

How long data is kept

Applications that are not accepted: deleted within twelve months of the cohort closing
Applications that are accepted: kept for the duration of the program and afterwards where required
Invoices and accounting records: ten years, as required by Portuguese tax law
Email correspondence: deleted when it is no longer needed, and in any case reviewed annually
Server logs: retained by the hosting provider for a short period for security purposes

Your rights

Under the GDPR you have the right to ask for access to your personal data, to have it corrected or deleted, to restrict or object to its processing, and to receive it in a portable format. Where processing rests on legitimate interest, you can object at any time. To exercise any of these, email benjamin@latskostudio.com.

You also have the right to lodge a complaint with the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD), Av. D. Carlos I, 134, 1.º, 1200-651 Lisboa, www.cnpd.pt.

Is providing data required

Providing the information in the application form is voluntary, but without it an application cannot be assessed.

Last updated 16 September 2026.