Privacy policy

1. Who is responsible for your data

The controller of personal data processed through this website (https://irenagolob.com) is Irena Golob, company ID CHANGE_ME, registered office: CHANGE_ME.

You can contact us about any privacy matter at privacy@example.com.

2. Which personal data we process

Depending on how you use the website, we process:

• Contact form data — your name, email address, phone number (if you provide it) and the content of your message.
• Technical data — IP address, browser type, device, pages requested and time of the request, recorded in the server logs of our hosting provider for the security and operation of the site.
• Your cookie choice — stored in your browser so that we do not ask you again on every visit.

3. How we collect data

Directly from you, when you fill in the contact form or write to us; automatically, when your browser requests a page; and through cookies and similar technologies — optional ones only with your consent.

4. Purposes of processing

• Answering your inquiries and preparing offers.
• Operating, securing and improving the website.
• Meeting our legal obligations.

5. Legal basis

• Art. 6(1)(b) GDPR — taking steps at your request before entering into a contract (inquiries through the contact form).
• Art. 6(1)(f) GDPR — our legitimate interest in operating and securing the website.
• Art. 6(1)(c) GDPR — compliance with legal obligations.

6. Cookies and similar technologies

This website stores information in your browser only as described below. Strictly necessary items are used without consent; everything else only after you allow it. You can change your choice at any time with the “Cookie settings” link in the footer.

7. Recipients of data

We share personal data only with service providers that process it on our behalf under a data processing agreement: our hosting and form-handling provider (Netlify, Inc.) and our email provider. We may also disclose data to public authorities where the law requires it.

8. Transfers outside the EEA

Some providers are located outside the European Economic Area, notably in the United States, or may access data from there. Such transfers rely on an adequacy decision (for example the EU–US Data Privacy Framework) or on Standard Contractual Clauses.

9. How long we keep data

Contact form messages are kept for as long as needed to answer you and for up to 24 months afterwards in case of follow-up questions, unless a longer period is required by law (for example when an inquiry leads to a contract). Server logs are kept by the hosting provider for a short period under its own policy. Your cookie choice is kept for 180 days.

10. Your rights

You have the right to:

• access your personal data;
• have inaccurate data corrected;
• have your data erased (“right to be forgotten”);
• restrict processing;
• receive your data in a portable format;
• object to processing based on our legitimate interest;
• withdraw consent at any time.

To exercise these rights write to privacy@example.com. We reply within one month.

11. Right to complain

You have the right to lodge a complaint with a supervisory authority: Your national data protection authority — https://www.edpb.europa.eu/about-edpb/about-edpb/members_en.

12. Security

We apply appropriate technical and organisational measures: encrypted connections (HTTPS), restricted access to data and regular system updates.

13. Children

This website is not directed at children under 16 and we do not knowingly collect their data.

14. Changes to this policy

We may update this policy. The current version is always on this page, with the date of the last update.

15. Contact

Questions? Write to us at privacy@example.com.