Privacy Policy
1. Controller
Anastasiia Soldatenko, sole proprietor, trading as Ysvaro
Strytska St. 59, 79031 Lviv, Ukraine
Email: [email protected]
2. What this website does and does not do
This is an information website with one intake form (section 5). It has no user accounts, no comment function, no advertising and no analytics or tracking tools. We do not set cookies and do not use a cookie banner because none is needed for the functions described here.
3. Server log files
When you open the site, the hosting provider's server automatically processes technical data: IP address, date and time, requested file, referrer URL, browser and operating system. This is needed to deliver the site and keep it secure. Legal basis: Art. 6 (1)(f) GDPR (legitimate interest in a secure and working website). Log files are kept for 7 days and then deleted.
Hosting provider: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. We have concluded a data processing agreement with the host.
4. Fonts
This site uses the fonts Archivo and Inter. They are delivered from our own server, so no data is sent to third parties for this.
5. Intake form
Before a call you can fill in the form on the page. We process the data you enter: name, work email, company or website (optional), the topic you choose, your task description (optional), the time of your consent and the page the form was sent from. We use it to answer your request, prepare the call and, if you become a client, to prepare the contract. Legal basis: Art. 6 (1)(b) GDPR for steps taken at your request before a contract, otherwise Art. 6 (1)(f) GDPR. The form is only sent after you tick the consent box; you can withdraw consent at any time by email, with effect for the future.
The form data is passed to our processors: Make (Celonis s.r.o., Prague, Czech Republic; automation platform, EU data centre) and Notion (Notion Labs, Inc., USA; our customer database). For Notion the data is transferred to the USA; the safeguard is Notion Labs, Inc. is certified under the EU-US Data Privacy Framework, and standard contractual clauses are part of its data processing addendum. We have concluded data processing agreements with both.
Storage: if you become a client, the data is kept for the duration of the contract and the statutory retention periods afterwards. If no contract follows, we delete it after 12 months.
The optional newsletter box is a separate consent. Today we only record whether you ticked it; we will send newsletters only after you confirm your address in a separate confirmation email (double opt-in). You can withdraw this consent at any time.
6. Contacting us by email
If you write to us, we process your email address, your message and any details you send, only to answer your request and, if you become a client, to prepare and run the contract. Legal basis: Art. 6 (1)(b) GDPR for contract-related requests, otherwise Art. 6 (1)(f) GDPR. We delete the data once the request is dealt with, unless statutory retention duties apply (for example 6 to 10 years for business and tax documents under German law).
7. Booking a call (external link)
The "Book a free call" button leads to Calendly (Calendly LLC, 115 E Main St, Buford, GA 30518, USA). Nothing is sent to that provider until you click. Once on its site, its own privacy policy applies. If you book, we receive your name, email and chosen time and use them to hold the call (Art. 6 (1)(b) GDPR). Its privacy policy is at calendly.com/privacy. Data is transferred to the USA on the basis of the EU-US Data Privacy Framework and standard contractual clauses.
8. Links to other sites
The site links to our LinkedIn profile. When you click the link, LinkedIn's own privacy policy applies. We do not embed LinkedIn plug-ins, so no data goes to LinkedIn merely by visiting this site.
9. Your rights
You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interest (Art. 21). You can withdraw any consent at any time with effect for the future. To use these rights, email us at the address above.
You also have the right to complain to a data protection authority, in particular in the EU state where you live or work, or where the alleged violation happened. For our business in Ukraine this is the Ukrainian Parliament Commissioner for Human Rights (ombudsman.gov.ua).
10. Changes
We update this policy when the site or the law changes. The current version is always on this page.