Legal

Privacy Policy

This policy explains what personal data I collect, why, on what legal basis, and the rights you have under the GDPR and ePrivacy rules.

Last updated: 1 July 2026

Data controller

This website is run by a freelance (sole trader) web developer trading under their own name. There is no public business address; the country and a contact email are given below, and a full postal address is available on request by email. Given the small scale of processing, no Data Protection Officer is required or appointed.

What data I collect and why

I only collect data that is needed to run the site and respond to you:

  • Contact form data — the name, email, Telegram username or phone number and the message you send, used solely to reply to your enquiry.
  • Technical data — IP address and basic request information, processed briefly to keep the site secure and prevent abuse.
  • Analytics data — anonymised statistics about how the site is used, only if you allow analytics cookies.
  • Marketing data — advertising and retargeting measurement, only if you allow marketing cookies.

Providing your data through the contact form is voluntary; without it I simply cannot reply to your enquiry.

All the personal data I process comes directly from you or from your device when you use the site — I do not buy or obtain it from data brokers or other third parties.

Legal basis for processing

  • Consent (Art. 6(1)(a) GDPR) — for analytics and marketing cookies, which load only after you opt in.
  • Steps prior to a contract (Art. 6(1)(b) GDPR) — to reply to your enquiry through the contact form.
  • Legitimate interest (Art. 6(1)(f) GDPR) — to keep the website secure and functioning.
  • Legal obligation (Art. 6(1)(c) GDPR) — to keep a record of your cookie-consent choice.

Cookies

Necessary cookies are always active because the site cannot work without them. Analytics and marketing cookies are off by default and load only with your consent.

  • Necessary cookies keep the site working — security and form protection, your language choice, session handling and remembering your cookie preferences. They last from the current session up to 12 months and cannot be turned off.

Analytics and marketing cookies are set only after you enable the matching category. If you never consent, they are never placed. Your consent choice is also recorded on the server — the choice, the date and time, the policy version and your browser type, tied to a random id rather than your name or IP address — so that consent can be demonstrated as the law requires.

Who I share data with

I do not sell your data. It is shared only with the service providers needed to run the site and reply to you, who act as processors on my behalf:

  • Hosting provider (VPS) — stores the website and your enquiry.
  • Cloudflare — content delivery and security in front of the site; processes technical request data, including your IP address, to deliver and protect the pages.
  • Email provider — delivers your enquiry from the contact form to my inbox.
  • Google (Google Analytics) — anonymised usage statistics, only with analytics consent.
  • Meta (Meta Pixel) — advertising measurement, only with marketing consent.

I do not share your data with third parties for their own purposes, and I never sell it; the providers listed act only on my instructions. Services that act as their own controllers (for example Google or Meta, if you enable them) and external sites this page links to (such as social networks) follow their own privacy policies, which I do not control and for which I am not responsible.

To the fullest extent permitted by law, I am not liable for loss or damage arising from third-party services, external websites, or events beyond my reasonable control. This does not limit my obligations or your rights under the GDPR, which always apply.

International transfers

Some providers (in particular Google and Meta) may process data outside the EU/EEA, mainly in the USA, and only if you enable the related cookies. Such transfers rely on the EU-US Data Privacy Framework where the provider is certified, and otherwise on the European Commission's Standard Contractual Clauses. You may request a copy of the safeguards in place by emailing me. Hosting and email for your enquiries are kept within the EU or under equivalent safeguards.

Automated decisions and profiling

I do not make decisions about you by solely automated means that produce legal or similarly significant effects (Art. 22 GDPR). If you allow marketing cookies, Meta Pixel may build an advertising profile of your activity for retargeting. You can refuse this by leaving marketing cookies off, or withdraw your consent at any time.

How long I keep data

  • Contact enquiries — up to 12 months after our last correspondence, then deleted.
  • Consent records — for as long as your consent is relied on and up to 12 months afterwards, to demonstrate compliance.
  • Cookie consent choice — stored for up to 6 months, after which you are asked again.
  • Security logs — up to 90 days, then removed.

How I keep your data safe

I use appropriate technical and organisational measures to protect your data: the site is served only over encrypted HTTPS, cookies are marked Secure and HttpOnly where applicable, access to your enquiries is limited to me, and the server is kept updated and monitored for suspicious activity. No transmission over the internet can be guaranteed fully secure, but I take reasonable steps to protect your information.

Your rights under the GDPR

As a data subject you have the right to:

  • access the personal data I hold about you;
  • have inaccurate data corrected (rectification);
  • have your data erased ('right to be forgotten');
  • restrict or object to processing;
  • object to direct marketing at any time — this is an absolute right;
  • data portability — receive your data in a portable format;
  • withdraw consent at any time, without affecting past processing;
  • lodge a complaint with a supervisory authority.

In Ireland the supervisory authority is the Data Protection Commission (dataprotection.ie). You may also contact the authority in your own EU country.

Withdrawing consent and changing cookie settings

You can change or withdraw your cookie consent at any time using the "Cookie settings" link in the footer, which reopens the consent window. Disabling a category stops the related cookies from loading and clears the ones already set for that category; you can also clear existing cookies in your browser.

Children

This site is aimed at businesses and adults. It is not directed at children, and I do not knowingly collect personal data from anyone under 16.

Contact, changes and updates

To exercise any of your rights or ask a question about this policy, email me and I will respond within the time limits set by the GDPR:

nazarsturanec@gmail.com

I may update this policy as the site or legal requirements change. The current version and its date are always shown here.

Last updated: 1 July 2026