Last updated: 12 October 2026
This Privacy Notice explains how personal data are processed when you visit william-hammond.com or contact William Hammond using the contact details provided on the website.
1. Controller
The controller within the meaning of the General Data Protection Regulation (“GDPR”) is:
William Hammond
c/o NZP Nagy Legal
100 Bishopsgate
London
EC2N 4AG
United Kingdom
E-mail: contact@william-hammond.com
No data protection officer has been appointed because there is currently no statutory requirement to appoint one for this website.
2. Website hosting and technical access data
This website is hosted using Cloudflare Pages, a service provided by Cloudflare.
When you access the website, technical information necessary to deliver and secure the website may be processed. Depending on the request and Cloudflare's technical configuration, this may include:
- IP address;
- date and time of access;
- requested page or resource;
- referring page;
- browser and device information;
- operating system;
- HTTP request and response information; and
- information used to detect abuse, attacks or other security incidents.
The purpose of this processing is to deliver the website reliably and securely, maintain technical functionality, prevent misuse and protect the website and its infrastructure.
The legal basis is Article 6(1)(f) GDPR. The legitimate interests are the secure, reliable and efficient operation of this website and the protection of the website against misuse and cyberattack.
Cloudflare acts, where applicable, as a processor in relation to website traffic data. Cloudflare is a global provider and processing may involve locations outside the European Economic Area. Cloudflare maintains mechanisms for international data transfers, including participation in the EU-U.S. Data Privacy Framework where applicable and Standard Contractual Clauses where required.
I do not use website access data to create behavioural profiles of visitors.
Technical data are retained only for as long as necessary for website delivery, security, fault diagnosis and the establishment, exercise or defence of legal claims, subject to the retention periods applied by the relevant infrastructure provider.
3. Contact by e-mail
If you contact me by e-mail, I process the information you provide in order to respond to your communication.
This will generally include:
- your name;
- your e-mail address;
- the contents of your message;
- any files or information you choose to provide; and
- associated communication metadata.
Where your enquiry concerns a possible contract, professional engagement or other requested service, processing may be based on Article 6(1)(b) GDPR.
For other correspondence, processing is generally based on Article 6(1)(f) GDPR, namely my legitimate interest in receiving, administering and responding to professional and other legitimate correspondence.
Where processing is necessary to comply with a legal obligation, Article 6(1)(c) GDPR applies.
E-mail for the william-hammond.com domain is currently provided through Google Workspace. Google may therefore process personal data in connection with the provision, transmission, storage and security of e-mail. Google provides contractual arrangements for the processing of European personal data, including mechanisms governing relevant international transfers.
Please do not send confidential, privileged or highly sensitive information merely because an e-mail address is provided on this website. If your communication concerns a potential professional engagement, you should first establish whether I am able to accept the matter.
4. Contact form
The current version of this website does not require you to submit information through a website contact form.
Contact is provided through ordinary e-mail links.
If a contact form is introduced in the future, this Privacy Notice will be updated to describe the information collected, the relevant service providers and the applicable legal basis.
5. Cookies, analytics and tracking
This website is designed to operate without advertising cookies, behavioural tracking, marketing pixels or comparable tracking technologies.
In particular, the website does not currently use:
- Google Analytics;
- Meta/Facebook Pixel;
- LinkedIn Insight Tag;
- behavioural advertising systems; or
- cross-site user profiling.
No non-essential cookies are intended to be placed on your device.
Technical mechanisms that are strictly necessary for delivery, security or functionality of the website may be used where permitted by applicable law.
If non-essential cookies, analytics or similar technologies are introduced in the future, this Privacy Notice will be updated and an appropriate consent mechanism will be implemented where required.
6. External links
The website may contain links to external websites, for example LinkedIn, professional organisations or project websites.
No personal data are intentionally transmitted to those third-party websites merely because an ordinary external link appears on this website.
If you choose to follow an external link, the relevant third party may process information about your visit in accordance with its own privacy policies. I am not responsible for the privacy practices of external websites.
7. No automated decision-making
Personal data collected through this website are not used for automated decision-making or profiling within the meaning of Article 22 GDPR.
8. Recipients of personal data
Personal data may be made available where necessary to:
- website hosting and infrastructure providers;
- e-mail and communications providers;
- professional advisers;
- IT service providers; and
- public authorities or courts where disclosure is required by law.
Personal data are not sold.
9. International transfers
Some service providers used in connection with this website are international organisations or form part of international corporate groups.
Where personal data are transferred outside the European Economic Area, appropriate transfer mechanisms are used where required, which may include an adequacy decision, the EU-U.S. Data Privacy Framework or Standard Contractual Clauses together with any necessary supplementary safeguards.
10. Retention
Personal data are retained only for as long as necessary for the purpose for which they were collected.
The applicable period depends on the nature of the information and may also be affected by:
- statutory record-retention obligations;
- professional obligations;
- contractual requirements;
- limitation periods; and
- the need to establish, exercise or defend legal claims.
Information will be deleted or anonymised when there is no longer a legitimate or legal reason to retain it.
11. Your rights
Subject to the conditions of applicable data protection law, you may have the right to:
- obtain information about personal data processed about you;
- obtain access to your personal data;
- request correction of inaccurate data;
- request deletion of personal data;
- request restriction of processing;
- object to processing based on legitimate interests;
- receive certain personal data in a portable format; and
- withdraw consent at any time where processing is based on consent.
A withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
Where processing is based on Article 6(1)(f) GDPR, you may object to that processing on grounds relating to your particular situation in accordance with Article 21 GDPR.
Requests concerning these rights may be sent to: contact@william-hammond.com
12. Right to complain to a supervisory authority
You also have the right to lodge a complaint with a competent data protection supervisory authority.
For controllers in the non-public sector based in Bavaria, the competent supervisory authority is generally:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Germany
13. Changes to this Privacy Notice
This Privacy Notice may be updated if the website, its technical infrastructure or the applicable legal requirements change.
The current version will always be made available on this website.
