Privacy Policy

1. Data Controller

The data controller responsible for the processing of your personal data is Denis Bogdanovskiy, based in Warsaw, Poland. Contact: work@bogdanovskiy.com.

2. Legal Basis for Processing

Personal data is processed on the following legal bases under Regulation (EU) 2016/679 (GDPR):
Art. 6(1)(a) — your consent (newsletter subscription, contact form submission).
Art. 6(1)(f) — the legitimate interest of the Controller (website analytics, security, improving the service).

3. Types of Data Collected

Newsletter: email address.
Contact Form: first name, last name, email address, phone number (optional), message content.
Automatically collected: IP address, browser type, device information, pages visited, timestamps — via server logs and analytics tools.

4. Purpose of Data Processing

Your data is processed for the following purposes:
• Delivering the Newsletter to subscribers who have given consent.
• Responding to inquiries submitted via the Contact Form.
• Analyzing website traffic and usage to improve the service.
• Ensuring the security and proper operation of the Website.

5. Third-Party Data Processors

Your data may be shared with the following trusted service providers who act as data processors:
Web3Forms (S-Jeya Sarathi, India) — processing form submissions. Privacy Policy.
Vercel Inc. (USA) — website hosting, Vercel Analytics, and Speed Insights. Privacy Policy.
Google LLC (USA) — Google Analytics for traffic analysis. Privacy Policy.

6. Cookies

The Website uses cookies, which are small text files stored on your device:
Essential cookies — required for basic Website functionality (e.g., language preference).
Analytics cookies — used by Vercel Analytics and Google Analytics to collect anonymous usage data.

You may manage or disable cookies through your browser settings. Disabling essential cookies may impair Website functionality.

7. Data Retention

Personal data is retained only for as long as necessary to fulfill the purposes described in this Policy:
• Newsletter subscriber data — until consent is withdrawn.
• Contact form data — for the duration required to respond to the inquiry and maintain the professional relationship, or until you request deletion.
• Analytics data — in accordance with the retention policies of the respective providers.

8. Your Rights Under GDPR

Under the GDPR, you have the right to:
• Access your personal data held by the Controller.
• Rectify inaccurate or incomplete personal data.
• Erase your personal data ("right to be forgotten").
• Restrict the processing of your personal data.
• Data portability — receive your data in a structured, commonly used format.
• Object to processing based on legitimate interest.
• Withdraw consent at any time, without affecting the lawfulness of processing prior to withdrawal.
• Lodge a complaint with the supervisory authority: Urząd Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warsaw, Poland — uodo.gov.pl.

To exercise any of these rights, contact: work@bogdanovskiy.com.

9. Data Security

The Controller implements appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. All data is transmitted over encrypted HTTPS connections.

10. International Data Transfers

Some third-party processors (Vercel, Google) are based in the United States. Data transfers to the US are safeguarded by Standard Contractual Clauses (SCCs) approved by the European Commission, or by other appropriate safeguards as required under the GDPR.

11. Changes to This Policy

The Controller reserves the right to update this Privacy Policy at any time. Changes take effect upon publication on the Website. The date of the last update is indicated below.

12. Contact

For questions regarding this Privacy Policy or your personal data, contact: work@bogdanovskiy.com.

Supervisory authority: Urząd Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warsaw, Poland — uodo.gov.pl.

Last updated: March 9, 2026