Legal

Legal notice and privacy policy

Privacy policy

Last updated: October 2026

Controller

Vonderlo Advisory Group L.L.C., 1209 Mountain Road Pl NE, Ste N, Albuquerque, NM 87110, USA. Email: info@vonderlo.com

Data we process

  • Server logs. This website is hosted by Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA). When you visit it, Cloudflare automatically records technical data such as IP address, date and time, pages requested and browser type. This is needed to deliver the site securely.
  • Email contact. If you write to us, we process the information you send in order to reply and, where relevant, to prepare or carry out an engagement. Our email is provided by Proton AG (Route de la Galaise 32, 1228 Plan-les-Ouates, Switzerland).
  • Fonts. All fonts are stored on our own web server. No connection is made to Google or other font providers.

Cookies and tracking

This website does not use analytics, advertising trackers or cookies of its own. To protect the site against attacks, Cloudflare may set a strictly necessary security cookie (for example __cf_bm), which is deleted after 30 minutes at the latest (Art. 6(1)(f) GDPR; § 25(2) no. 2 TDDDG).

Legal basis (for visitors in the EU/EEA)

We process data on the basis of our legitimate interest in operating a secure website and answering enquiries (Art. 6(1)(f) GDPR), and to take steps before entering into a contract (Art. 6(1)(b) GDPR).

Storage period

We keep enquiries only as long as needed to handle them and to meet legal retention obligations.

International transfers

We are based in the United States, so data is processed in the United States. Cloudflare, Inc. is certified under the EU-U.S. Data Privacy Framework, for which the European Commission has adopted an adequacy decision (Art. 45 GDPR). Proton AG is based in Switzerland, which is also covered by an adequacy decision. We have concluded data processing agreements with both providers.

Your rights

You can request access to, correction or deletion of your data, restrict or object to processing, and request data portability. You can also lodge a complaint with a data protection supervisory authority. To exercise your rights, contact us by email.