Privacy Policy

General Information

This privacy policy explains which personal data is processed when you visit this website or contact me. Personal data means any information that can directly or indirectly identify a natural person.

Who is responsible?

The controller responsible for this website is Sergiy Shumakov. Full contact details are provided in the section "Controller" and in the legal notice.

Which data is collected?

Data is processed when you actively provide it, for example via a contact form, by email, by phone, or through external communication links.

In addition, the web server processes technical access data required for operation, security and error analysis. This includes IP address, date and time of access, requested URL, HTTP status, referrer and user agent. This website does not use advertising tracking or profiling.

Controller Details

The controller is the natural or legal person who alone or jointly determines the purposes and means of processing personal data.

No data protection officer has been appointed because, according to the current assessment, there is no statutory obligation to appoint one.

4. SSL/TLS Encryption

This website uses HTTPS to protect the transmission of contact and access data against unauthorized reading. You can recognize an encrypted connection by "https://" in the browser address bar and the lock symbol.

Server Log Files

When you visit the website, technical access data is processed in server logs. This may include IP address, browser type and version, operating system, referrer URL, requested page, time of the server request and HTTP status. These data are not combined with other data sources unless this is required to investigate misuse or security incidents.

Contact Form, Email and Project Requests

If you contact me via contact form or email, I process the data you provide, such as name or contact person, company, email address, phone number, message, timestamp, source page and language setting. The purpose is to handle the request, conduct pre-contractual or contractual communication and organize correspondence in a traceable way. The legal basis is Art. 6(1)(b) GDPR where processing is necessary for pre-contractual measures or a contract, and Art. 6(1)(f) GDPR for organizational follow-up and abuse prevention. The technical transmission and processing of emails is carried out through Microsoft services, in particular Microsoft SMTP/Microsoft 365 or Exchange Online. The provider for users in the European Economic Area is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Microsoft processes email content, recipient, sender, timestamp and technical connection data to the extent required for delivery, security, abuse prevention and operation of the email service. Data is not passed on for advertising purposes. Requests are deleted once no longer required; business correspondence may be retained for up to 6 or 10 years due to commercial and tax retention obligations.