Privacy Policy

This privacy policy describes how Andriichuk OÜ ("we", "us", or "the company"), a private limited company registered in Estonia, processes personal data in connection with the website andriichuk.com. It is written to comply with the General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and applicable Estonian law.

1. Data controller

The data controller for any personal data processed via this website is:

• Andriichuk OÜ, registered in Estonia — Business Registry code 17510708
• Registered address: Sepapaja tn 6, 15551 Tallinn, Lasnamäe linnaosa, Harju maakond, Estonia
• Contact: viktor@andriichuk.com

2. What this website does and does not collect

This is a static corporate presentation website. It does not:

• Use marketing or advertising cookies
• Run third-party advertising analytics (Google Analytics, Meta Pixel, and similar are not deployed)
• Host contact forms or newsletter sign-ups
• Store visitor accounts or login data

The only personal data we receive directly is what you choose to send us — for example, the contents of an email you send to viktor@andriichuk.com.

2.1 Self-hosted analytics (Matomo)

To understand how the website is used and detect performance issues, we run a self-hosted instance of Matomo on infrastructure under our control (analytics.gazolin-production.com). Matomo is privacy-friendly analytics: data is not shared with third parties for advertising purposes.

Matomo records aggregated information such as page views, referrer, approximate location derived from IP, device type, and browser. Where required by applicable law, IP addresses are anonymised and identifiers are short-lived.

Legal basis: Article 6(1)(f) GDPR — legitimate interest in measuring and improving our own website. You may opt out at any time by enabling "Do Not Track" in your browser or by contacting us.

3. Server logs

Our hosting provider may temporarily record standard server-access logs (IP address, user-agent string, requested URL, timestamp) for the purpose of operational security and abuse prevention. These logs are retained for a limited period and are not used for profiling.

Legal basis: Article 6(1)(f) GDPR — legitimate interest in operating a secure website.

4. Correspondence by email

If you contact us by email, we process the information you provide (name, email address, the contents of the message) for the sole purpose of replying to you and, where relevant, fulfilling a contract or pre-contractual request.

Legal basis: Article 6(1)(b) GDPR (steps to enter into a contract) or Article 6(1)(f) GDPR (legitimate interest in answering correspondence). Correspondence is retained as long as necessary for the matter at hand and applicable record-keeping obligations.

5. Third parties

We use the following infrastructure providers, each of whom acts as a processor or independent controller:

• A static-site hosting provider (server-access logs, content delivery)
• Google Fonts (typography served via Google's CDN — see Google's privacy policy)

We do not sell or rent personal data to anyone.

6. International transfers

Where any processor is located outside the European Economic Area, transfers are protected by Standard Contractual Clauses (Article 46 GDPR) or equivalent safeguards.

7. Your rights under GDPR

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate personal data
• Request erasure where applicable
• Restrict or object to processing
• Data portability where applicable
• Lodge a complaint with the Estonian Data Protection Inspectorate (aki.ee) or the supervisory authority of your habitual residence

To exercise any of these rights, contact viktor@andriichuk.com.

8. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top of this page reflects the latest revision. Material changes will be highlighted on the website.