.open_for_work_october
Privacy Policy
Last updated: 19 October 2026
This policy explains how personal data is handled when youvisit gyabrova.space or contact me, why it is used, and how to get in touchabout your privacy.
1. Who is responsible for your data
The data controlleris [Galina Yabrova’s full legal name], an independent web designer and developer.
Contact address: [postal address for legal correspondence, country].
Email: yabrova6@gmail.com.
In thispolicy, “I” refers to the data controller and “the website” means gyabrova.space.
Contact address: [postal address for legal correspondence, country].
Email: yabrova6@gmail.com.
In thispolicy, “I” refers to the data controller and “the website” means gyabrova.space.
2. What data I receive
When yousubmit the contact form, I receive your name, email address, and theinformation you include in your message.
If you contact me by email or through a messaging service, I also receive the profile information and correspondence available through that service.
The servers and services that deliver and protect the website may process technical information, including your IP address, request date and time, requested page,browser and device information, and the results of checks for automated requests.
Please do not submit identity documents, health information, payment details, or other sensitive information that is unnecessary for discussing your project.
If you contact me by email or through a messaging service, I also receive the profile information and correspondence available through that service.
The servers and services that deliver and protect the website may process technical information, including your IP address, request date and time, requested page,browser and device information, and the results of checks for automated requests.
Please do not submit identity documents, health information, payment details, or other sensitive information that is unnecessary for discussing your project.
3. Why I use your data
I use personal data to:
• respond to your enquiry and discuss your project;
• prepare a proposal and agree on working arrangements;
• enter into and perform a contract if we work together;
• keep the website working, resolve errors, and prevent spam;
• meet applicable legal obligations and protect my legal rights.
Depending on the circumstances and applicable law, the legal basis may be steps taken at your request before entering into a contract, performance of a contract,compliance with a legal obligation, or your separately obtained consent.
Where the GDPR applies, technical processing for website security may also rely on my legitimate interest in maintaining a functioning website and preventing abuse.
I do not sell personal data or use project enquiries for marketing emails without a separate lawful basis.
• respond to your enquiry and discuss your project;
• prepare a proposal and agree on working arrangements;
• enter into and perform a contract if we work together;
• keep the website working, resolve errors, and prevent spam;
• meet applicable legal obligations and protect my legal rights.
Depending on the circumstances and applicable law, the legal basis may be steps taken at your request before entering into a contract, performance of a contract,compliance with a legal obligation, or your separately obtained consent.
Where the GDPR applies, technical processing for website security may also rely on my legitimate interest in maintaining a functioning website and preventing abuse.
I do not sell personal data or use project enquiries for marketing emails without a separate lawful basis.
4. Services involved in processing
The website and communication tools include:
• Webflow — website hosting and contact form processing;
• HostVDS — the server used to relay website pages and files;
• Cloudflare Turnstile — protection against automated form submissions;
• Google / Gmail — email notifications and correspondence.
If you follow a link to a messaging platform or social network, that service also handles your data under its own privacy policy.
Data may be disclosed to public authorities when required by applicable law, or to professional advisers where necessary to meet legal obligations or protectl egal rights.
• Webflow — website hosting and contact form processing;
• HostVDS — the server used to relay website pages and files;
• Cloudflare Turnstile — protection against automated form submissions;
• Google / Gmail — email notifications and correspondence.
If you follow a link to a messaging platform or social network, that service also handles your data under its own privacy policy.
Data may be disclosed to public authorities when required by applicable law, or to professional advisers where necessary to meet legal obligations or protectl egal rights.
5. International processing
These providers may process data outside your country of residence. The website’s proxy server is located in Finland. Webflow and Google may process data in the United States and other countries where their infrastructure operates.
[Specifythe applicable international transfer mechanisms and safeguards after reviewing provider agreements and the actual processing arrangements.]
You can request information about the relevant safeguards by emailing yabrova6@gmail.com.
[Specifythe applicable international transfer mechanisms and safeguards after reviewing provider agreements and the actual processing arrangements.]
You can request information about the relevant safeguards by emailing yabrova6@gmail.com.
6. How long data is kept
If an enquiry does not lead to a project, I retain the enquiry and related correspondence for no longer than 12 months after our last communication.
If we work together, relevant information is retained during the engagement and afterwards for the periods required by applicable contract, tax, and accounting rules, and for handling potential legal claims.
Website technical logs are retained for [insert the actual retention period]. External providers’ retention periods also depend on their terms and settings.
When the relevant retention period ends, data is deleted or anonymised unless continued retention is legally required.
If we work together, relevant information is retained during the engagement and afterwards for the periods required by applicable contract, tax, and accounting rules, and for handling potential legal claims.
Website technical logs are retained for [insert the actual retention period]. External providers’ retention periods also depend on their terms and settings.
When the relevant retention period ends, data is deleted or anonymised unless continued retention is legally required.
7. Cookies and similar technologies
The website and its security services may use technical cookies and similar technologies to provide certain functions and prevent abuse.
I do not use advertising pixels. If optional cookies or analytics tools requiring consent are introduced, they will only be enabled after that consent is obtained.
Details of the cookies actually used: [add their names, purposes, and lifetimes afterbrowser testing].
I do not use advertising pixels. If optional cookies or analytics tools requiring consent are introduced, they will only be enabled after that consent is obtained.
Details of the cookies actually used: [add their names, purposes, and lifetimes afterbrowser testing].
8. Your rights
Depending on applicable law, you may request access to your personal data, correction, deletion, restriction of processing, or data portability. You may also have the right to object to processing.
Where processing relies on consent, you can withdraw it. Withdrawal does not affect the lawfulness of processing carried out beforehand.
To exercise your rights, email yabrova6@gmail.com. If necessary, I may request sufficient information to verify your identity. Requests will be handled within the applicable statutory deadline.
You may also lodge a complaint with the relevant data protection authority, including the authority in your country of residence, place of work, or the location of an alleged infringement where the GDPR applies.
Where processing relies on consent, you can withdraw it. Withdrawal does not affect the lawfulness of processing carried out beforehand.
To exercise your rights, email yabrova6@gmail.com. If necessary, I may request sufficient information to verify your identity. Requests will be handled within the applicable statutory deadline.
You may also lodge a complaint with the relevant data protection authority, including the authority in your country of residence, place of work, or the location of an alleged infringement where the GDPR applies.
9. Providing your information
Sending an enquiry is voluntary. Your name, email address, and project details are needed to handle the request. Without contact information, I cannot reply.
I do not make decisions that produce legal or similarly significant effects on you based solely on automated processing.
I do not make decisions that produce legal or similarly significant effects on you based solely on automated processing.
10. Changes to this policy
If the website or its data handling practices change, I will update this page and the date above.
