Site policies · Effective 6 August 2026
Privacy Notice
This notice explains how personal data is handled when you use the Site, contact Fede Nolasco, or request access to the protected AI Architecture Guidance Library.
1. Purpose and scope
This notice applies to fede.datatunnel.io only. It does not apply to the separate datatunnel.io site or third-party websites and services.
2. Controller and contact
The data controller is Federico Lopez Nolasco, referred to on the Site as Fede Nolasco, of 22 Wilford Court, Cork Abbey Avenue, Bray, County Wicklow, A98 V755, Ireland. For privacy questions or rights requests, email socialnetwork@datatunnel.io.
3. Personal data processed and why
The Site uses a minimal-processing model. It does not currently provide public accounts, payment processing, a newsletter, advertising, affiliate tracking, remarketing, an on-Site contact form, or third-party website analytics. Guidance-access enquiries are directed to LinkedIn or email rather than an on-Site form or database.
| Activity | Data that may be processed | Purpose |
|---|---|---|
| Website delivery and security | IP address, browser/device details, request time, requested resource, and server security or error-log details. | Deliver, secure, diagnose, investigate misuse, and restore the Site. |
| Direct contact | Name, email address, message content, and information voluntarily provided by email. | Respond to enquiries and maintain necessary correspondence. |
| Guidance-access request | Contact details, role, organisation context, intended use, and communications voluntarily shared. | Assess an access request and manage any approved access. |
| Browser-local preferences and tools | Theme, interface, progress, viewed items, consent choices, workflow state, strategy drafts, filters, and ROI estimates. | Remember choices and enable browser-local functionality. |
Proposed legal bases are legitimate interests in operating, securing, and recovering the Site, and steps requested by an individual before a possible access arrangement. Feature-specific consent may apply where required. Retention periods for correspondence and guidance-access records must be set according to the operational process and reviewed when that process changes.
4. Browser-local storage
Some functions retain settings or interactive work on your device. This information is not designed to be sent to Fede Nolasco merely because it is stored in your browser. Strategy templates and ROI calculators may contain visitor-entered answers, assumptions, context, or notes. Do not enter confidential or sensitive information unless you accept the risk that anyone with access to the browser profile or device may view it.
You can remove or block local storage through browser settings. Doing so may reset your theme or remove unsaved interactive inputs. See the Cookie and Local Storage Notice.
5. External services and links
The Site loads Google Fonts, which may receive technical request data such as IP address, browser information, and the requested resource. Tailwind CSS, Font Awesome, Mermaid, and Site audio/video are hosted locally. A static Google Search Console verification file does not execute, set cookies, or track visitors. No Google Analytics or other web-analytics tracker is loaded.
The Site links to LinkedIn, Coursera, eCornell, Microsoft Learn, DOI resolvers, and cited research or vendor websites. Following an outbound link means the third party processes data under its own notice. The Site is hosted by Contabo GmbH in Germany/EU; Namecheap manages domain registration and DNS. Backups may be held locally, through Contabo Auto Backup, and in an encrypted Rclone destination on Microsoft OneDrive. These providers may process infrastructure, account, authentication, metadata, or storage-service information under their own terms.
Observed source and production audits found no first-party cookie write, HTML form, iframe, sessionStorage use, analytics tracker, advertising tag, payment flow, public registration, or public account system. This must be rechecked when the deployed Site or infrastructure changes.
6. Sharing and international transfers
Personal data is not sold. Data may be processed by hosting, backup, DNS, communications, and storage providers as needed to operate the Site, and may be disclosed to authorities where legally required. Where data is transferred outside the EEA, appropriate safeguards must be used where required by law.
7. Security
Reasonable technical and organisational measures are used to protect personal data, including encrypted offsite backup handling. No internet transmission or storage system can be guaranteed completely secure. Avoid sending sensitive personal information unless necessary and appropriate for the chosen channel.
8. Your rights
Subject to applicable law, you may request access to, correction of, deletion of, restriction of, or objection to processing of your personal data. You may also have rights to portability and to withdraw consent where processing relies on consent. Email socialnetwork@datatunnel.io; identity may be verified where reasonably necessary. You may also complain to the Irish Data Protection Commission.
9. Children
The Site is intended for a professional and general audience and is not directed at children. Do not provide personal information on behalf of a child without appropriate authority.
10. Changes
This notice will be updated when processing changes, particularly if accounts, analytics, advertising, embedded media, a contact form, paid access, or identity-aware protected access are introduced. The published notice shows its effective date.