Privacy policy
Data controller
The controller of your data is the owner of this website:
- Owner: Olha Pokorna
- NIF (NIE): X7432810S
- Address: Carrer Ginebre 64, 17800 Olot (Girona)
- Email: olgapokorna111@gmail.com
What data I process
I only process the data you send me when you write to me, depending on the channel you choose:
- Instagram direct messages: your username, your profile name and photo, and what you write to me.
- WhatsApp: your phone number, your name and what you write to me.
- Telegram: your username, your name and what you write to me.
- Email: your address, your name and what you write to me.
The questionnaire on this website
The questionnaire only prepares a text in your browser. It sends nothing to this website or to anyone: when you press the button, the text is copied on your device and the messaging app opens. You decide whether to send it.
Purposes and legal bases
- Answering your request and preparing a proposal if you ask for one: steps taken at your request before a contract (article 6.1.b GDPR).
- Providing the service if we work together: performance of the contract (article 6.1.b GDPR).
- Invoicing and meeting tax and accounting duties: legal obligation (article 6.1.c GDPR).
- Counting visits in aggregate to improve the website: legitimate interest (article 6.1.f GDPR).
- Publishing your review: your written consent (article 6.1.a GDPR).
How long I keep data
- Requests that do not lead to a job: until the request is closed.
- Clients: while the work lasts and, afterwards, invoicing data for the periods the law requires.
- Reviews: until you withdraw your consent.
- Visit statistics: Vercel discards the identifier of each visit after 24 hours; the aggregate statistics, which do not identify you, can be viewed for 12 months.
Providers that process data on my behalf
These providers act as processors and only use the data to provide their service to me:
- Vercel Inc.: hosts this website and counts visits (Vercel Web Analytics). It processes data under its data processing agreement (DPA). For data leaving the European Economic Area it is certified under the EU-US Data Privacy Framework, and the DPA also includes the European Commission's standard contractual clauses.
- Email provider: receives the messages sent to olgapokorna111@gmail.com and keeps them in my inbox.
Social networks and messaging
If you write to me through a social network or a messaging app, or visit my profile, that company processes your data as an independent controller under its own privacy policy:
- Instagram and Facebook: Meta Platforms Ireland Limited. For data transferred to Meta Platforms, Inc. (USA), Meta is certified under the EU-US Data Privacy Framework; its entry is listed as active, with re-certification under review.
- WhatsApp: WhatsApp Ireland Limited. For data transferred to WhatsApp LLC (USA), WhatsApp is certified under the EU-US Data Privacy Framework.
- Telegram: Telegram Messenger Inc., based outside the European Economic Area. It is not certified under the EU-US Data Privacy Framework: it uses standard contractual clauses for transfers, and it has a representative in the EU (EDPO, in Brussels).
Visit statistics
To know which pages are visited I use Vercel Web Analytics. It sets no cookies, stores nothing in your browser and builds no profile of you. It tells visits apart with an identifier calculated from each request (a hash), which is discarded after 24 hours, and the statistics are not linked to you or to your IP address. It counts visits in aggregate: page, referring website, country, region and city, device type, browser and operating system. The statistics can be viewed for 12 months, and Vercel may keep them longer.
Cookies and browser storage
This website sets no cookies. The questionnaire keeps your answers in your browser's session storage (sessionStorage), so they are not lost if you go back in the same tab. They stay on your device, are sent nowhere and are deleted when you close the tab.
Reviews
I only publish reviews from clients I have worked with. I ask for them after the work is finished and publish them with each client's written consent. You can withdraw your consent at any time by writing to me, and the review is removed within 7 days.
Your rights
You can ask for access to your data, its rectification or erasure, object to its processing, ask for its restriction or portability, and withdraw any consent you have given at any time, without affecting what was done before. Write to me at olgapokorna111@gmail.com.
You can also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
