Privacy Policy

This policy describes how personal data is processed when you visit this website and use its features. Processing is carried out in accordance with Regulation (EU) 2016/679 (GDPR) and any national data protection law applicable to the operator.

Controller

[Name or company]
[Address]
[Postal code, city]
[Country]
Registration / tax identifier: [if applicable]
Email: [contact email]

Data processed and purposes

Server access logs

When a page is requested, the web server records the IP address, date and time of the request, the URL requested, the HTTP status code, the browser type and the referring page. These records are used to keep the site secure and operational. Legal basis: Article 6(1)(f) GDPR (legitimate interest). Retention period: [for example, 14 to 30 days].

Cookies and third-party services

The site does not use cookies for analytics, advertising or tracking. No requests are made to third-party services while a visitor browses the pages. Technical cookies (session, CSRF token) may be set when the visitor interacts with specific features — submitting a form, logging in to the administration panel — and are required for those features to work.

Embedded videos

Videos embedded from external services are loaded on demand: until the play button is clicked, a locally stored preview image is displayed and no connection is made to the video provider’s server. After the click, the provider’s player is loaded and further data processing is carried out by the provider under its own policy.

Forms

Data entered into forms (name, email address, message text and any other fields) is processed to respond to the enquiry. Legal basis: consent given by submitting the form, Article 6(1)(a) GDPR. The date, time and IP address of the submission are also recorded to prevent abuse, on the basis of legitimate interest. Retention period: until deleted manually.

Newsletter subscriptions

Subscriptions use a double opt-in procedure: after the email address is submitted, a confirmation message with a verification link is sent, and the subscription is activated only after the link is clicked. Unsubscribing is possible at any time via the link included in every message.

Data transfers

Personal data is not disclosed to third parties except where required by law. Data is hosted on the servers of [hosting provider], which acts as a processor under Article 28 GDPR on the basis of a data processing agreement.

International transfers

[If personal data is transferred outside the EU/EEA, identify the recipient country and the appropriate safeguards applied under Articles 44–49 GDPR. Otherwise, remove this section.]

Rights of data subjects

Under Articles 15 to 22 GDPR, data subjects have the right of access, rectification, erasure, restriction of processing, data portability and objection, and the right to withdraw consent at any time without affecting the lawfulness of prior processing. Requests may be sent to [contact email].

Data subjects also have the right to lodge a complaint with the data protection supervisory authority in the country of their residence, place of work or the place of the alleged infringement. Visitors outside the EU/EEA may rely on the data protection law applicable in their own jurisdiction.

Changes

This policy may be updated. The current version is published on this page.

Last updated: [date]