Privacy policy

Who processes the data

The controller is Mariia Deinega, eenmanszaak, registered in the Netherlands.

KvK 96410868, VAT NL005208846B74, address: Dalsteindreef, 1112 XJ Diemen, the Netherlands.

For anything about your data, write to mariiadeinega@gmail.com.

What is collected

Through the request form: your name, the contact you give, the format you selected, your message if you write one, plus a referral tag, the version of this policy and the time you ticked the consent box.

Automatically, as on any site: IP address, date and time of the request, the page address, browser and device type — written to the web server log.

The site sets no cookies. The visit counter is our own: it runs on this server and sends nothing to third parties. It records the page address, the language, the site you came from and a campaign tag if the link had one. IP addresses and browser strings are not stored in it: to count visitors for a day, an irreversible fingerprint is derived from them with a key that changes daily. There are no advertising pixels and no social widgets.

Why, and on what basis

Form data is used to answer you and discuss the work. The basis is your consent, given by the checkbox. If we agree to work together, further correspondence is processed to perform that agreement.

The server log is kept for security and availability. The basis is legitimate interest: without a log, a fault or an attack cannot be noticed.

Your data is not used for advertising, not sold, and not passed to third parties for their own purposes.

Who else sees it

Hetzner Online GmbH — the server in Nuremberg, Germany, which runs the site and keeps the log.

Cloudflare — runs the domain records. Site traffic does not pass through Cloudflare.

Google — the mailbox that receives requests. It is a consumer Google account, so no data processing agreement with Google is in place; the owner is aware of this and has decided so knowingly.

A mail delivery service in France — delivers the request to that mailbox.

Telegram — receives only a notice that a request has arrived: an internal number and the chosen format. No name, contact or message text is sent to Telegram.

How long it is kept

Requests and related correspondence — 12 months, then deleted.

Web server log — 14 days, then overwritten automatically.

Visit counter records — 12 months. They are anonymised and cannot identify a person.

Records of paid work — 7 years. This is required by Dutch tax law and overrides a deletion request.

What you can ask for

A copy of your data, correction, deletion, restriction, objection, and withdrawal of consent.

Write to mariiadeinega@gmail.com from the address you used to send the request — that is enough to identify you. No identity documents are asked for: that would mean collecting new data in order to delete old data.

You get an answer within one month. If it does not satisfy you, you may complain to the Dutch supervisory authority, Autoriteit Persoonsgegevens.

Age

This site is not intended for people under 16. If you are younger, send a request only with the consent of a parent or guardian.

Changes

If this policy changes, a new date appears here. The version you agreed to is stored together with your request.