Privacy Policy

1. Data controller

The controller of personal data processed in connection with this website is:

• Ihar Ivaniuk, sole proprietor (jednoosobowa działalność gospodarcza) registered in Poland
• NIP: 5833468126
• Registered address: [TODO: FULL BUSINESS ADDRESS], Gdańsk, Pomorskie, Poland
• Email: [TODO: CONTACT EMAIL]

No Data Protection Officer has been appointed, as there is no legal obligation to do so. You can contact me directly at the address above in any matter concerning your personal data.

2. Scope of this Policy

This Policy covers personal data processed through this website and through the email correspondence that follows from it.

It does not cover the processing of personal data under a separate agreement with a client, which is governed by that agreement and, where applicable, by a separate data processing agreement. It also does not cover websites operated by other entities that you may reach from here — see the section on external links.

3. No contract is concluded through this website

This website has no checkout, ordering system, contact form, account registration or payment functionality. Browsing the website or writing to me does not create a contract or a client–consultant relationship.

Any engagement is agreed separately and in writing after we discuss your project.

4. What personal data is processed

Only a limited amount of personal data is involved:

• Technical data in server logs. When your browser requests a page, the server hosting this website may record standard technical information such as your IP address, the requested address, the date and time of the request, the HTTP status, the referrer and your user-agent (browser and operating system information). This happens automatically and is a normal part of serving a website.
• Data you choose to send me. This website publishes an email address and a link to my public social profile. If you write to me, I receive whatever you include — typically your email address, your name and the content of your message, together with any further details you decide to share, such as your company, your role or a description of your project.

There is no contact form on this website, so no personal data is submitted or stored through the website interface itself. Email that you send travels from your own email provider directly to my mailbox.

5. Purposes and legal bases

Personal data is processed for the following purposes:

• Providing, operating and securing the website, including maintaining technical stability and preventing abuse — Article 6(1)(f) GDPR, my legitimate interest in running a secure and functioning website.
• Replying to your message and discussing possible cooperation — Article 6(1)(f) GDPR, the legitimate interest of both sides in conducting business correspondence. Where you contact me as an individual, including as a sole trader, about a possible contract, Article 6(1)(b) GDPR also applies, because the processing covers steps taken at your request before entering into a contract.
• Complying with legal obligations, in particular accounting and tax obligations where an engagement follows — Article 6(1)(c) GDPR.
• Establishing, exercising or defending legal claims — Article 6(1)(f) GDPR.

Providing your data is voluntary. If you do not provide at least a way of contacting you, I will not be able to reply to your message.

6. Data stored locally in your browser

This website saves a single entry in your browser’s local storage, under the key macos-portfolio:layout. It records how you have arranged the desktop interface — the positions of the folders and the order of the dock icons — so that your layout is preserved when you come back.

This entry is created only as a result of your own interaction with the interface, stays on your device, and is never transmitted to me or to anyone else. It does not identify you and is not used for analytics, profiling or advertising. You can remove it at any time by clearing site data in your browser.

7. Cookies, analytics and tracking

This website sets one strictly necessary cookie named NEXT_LOCALE. It remembers the interface language (English or Russian) — the one you choose, or the one detected from the browser — for up to one year, so the same language can be shown on later visits. It is not used for analytics, advertising, profiling or session tracking.

This website also uses no analytics, tracking or advertising tools. There is no Google Analytics, Google Tag Manager, Meta Pixel, Vercel Analytics, Plausible, Sentry or any comparable service.

No profiling and no automated decision-making within the meaning of Article 22 GDPR takes place.

8. Fonts, media and external resources

All fonts used are standard system fonts already present on your device — no external font service such as Google Fonts is used. All images, icons and audio are served from this website’s own domain.

No content is embedded from YouTube, Vimeo, Google Maps or similar providers, so no third-party content loads in the background and no data is passed to such providers while you browse.

9. Hosting and other recipients

The website runs on infrastructure provided by a hosting provider, which processes technical data on my behalf as a processor: [TODO: VERIFY HOSTING PROVIDER].

Email correspondence is handled by my email provider, also acting as a processor: [TODO: VERIFY EMAIL PROVIDER].

Data may additionally be disclosed to accounting or legal advisers, or to public authorities, where this is necessary and required or permitted by law. Personal data is never sold and is not shared for third-party marketing.

10. Transfers outside the EEA

Depending on the providers indicated above, personal data may be processed on servers located outside the European Economic Area. Where that is the case, the transfer takes place only on the basis of a mechanism permitted by Chapter V GDPR, such as an adequacy decision of the European Commission or Standard Contractual Clauses. [TODO: VERIFY TRANSFER MECHANISM]

You may ask me for information about the safeguards applied.

11. Retention

Personal data is retained for as long as is reasonably necessary for the purpose for which it was collected — in particular to respond to your inquiry, to continue business discussions, to establish or defend legal claims, and to comply with applicable legal obligations, including statutory accounting retention periods where an engagement follows.

Server logs are kept for the period applied by the hosting provider for technical and security purposes. [TODO: CONFIRM RETENTION PERIOD]

Correspondence that does not lead to cooperation is deleted once it is clear that it is no longer needed for any of the purposes above.

12. Your rights

Under the GDPR you have the right to:

• access your personal data and obtain a copy of it (Article 15);
• have inaccurate data rectified and incomplete data completed (Article 16);
• have your data erased (Article 17);
• obtain restriction of processing (Article 18);
• data portability, where processing is based on a contract or on consent and is carried out by automated means (Article 20);
• object at any time, on grounds relating to your particular situation, to processing based on legitimate interests (Article 21);
• withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal — this applies only where processing is based on consent, which is currently not the case.

To exercise any of these rights, write to [TODO: CONTACT EMAIL].

13. Right to lodge a complaint

If you believe that your personal data is processed unlawfully, you have the right to lodge a complaint with the supervisory authority. In Poland this is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych — UODO), ul. Stawki 2, 00-193 Warsaw, Poland, uodo.gov.pl.

14. External links

This website links to third-party websites, including my public social media profile and the websites of projects and organisations referred to in the portfolio. Once you follow such a link you leave this website, and the privacy policy of that website’s operator applies.

I have no control over, and take no responsibility for, how those operators process your data.

15. Security

The website is served over an encrypted HTTPS connection, and I apply measures appropriate to the limited scope of processing described above.

No method of transmission over the internet is entirely secure. Please keep this in mind when sending confidential information by email.

16. Changes and contact

This Policy may be updated, for example if the technical setup of the website changes or new legal requirements apply. The current version is always published on this page.

Ihar Ivaniuk, NIP 5833468126, [TODO: FULL BUSINESS ADDRESS], Gdańsk, Pomorskie, Poland. Email: [TODO: CONTACT EMAIL].