Privacy Policy

Introduction

This Privacy Policy explains how Andrii Peretiatko (https://peretyatkosdet.com) collects, uses, and protects your personal information when you visit our portfolio website and use the contact form.

We are committed to protecting your privacy and ensuring the security of your personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Information We Collect

1. Contact Form Data

When you submit the contact form, we collect:

• Your name
• Email address
• Message subject (optional)
• Message content
• Timestamp of submission

2. Automatic Data Collection

We automatically collect certain technical information:

• IP address (anonymized for GDPR compliance)
• Browser type and version
• Device information
• Pages visited and time spent
• Referring website

3. Analytics Data

We use Vercel Analytics (privacy-friendly, GDPR-compliant) to understand website usage:

• Page views and unique visitors
• Geographic location (country level only)
• Performance metrics (page load times)

Note: Vercel Analytics does not use cookies and does not track individual users across websites.

How We Use Your Information

We use the collected information for the following purposes:

• Contact Form: To respond to your inquiries and communicate with you
• Analytics: To improve website performance and user experience
• Security: To prevent spam, abuse, and protect against malicious activities
• Legal Compliance: To comply with legal obligations and respond to lawful requests

Data Protection Measures

We implement multiple layers of security to protect your personal data:

• HTTPS Encryption: All data transmitted is encrypted using TLS/SSL
• CAPTCHA Protection: Cloudflare Turnstile prevents bot spam
• Input Sanitization: All user inputs are sanitized to prevent XSS attacks
• CORS Validation: Requests are validated to prevent unauthorized access
• Rate Limiting: Prevents abuse and spam attacks
• IP Anonymization: IP addresses are anonymized for GDPR compliance
• Secure Storage: Data is stored securely with encrypted environment variables

Third-Party Services

We use the following third-party services that may process your data:

Your Rights (GDPR)

Under the GDPR, you have the following rights regarding your personal data:

To exercise any of these rights, please contact us at andrey.peretyatko@hotmail.com

Data Retention

We retain your personal data only for as long as necessary:

• Contact Form Data: Stored in email inbox until manually deleted or until you request deletion
• Analytics Data: Aggregated and anonymized data retained for up to 12 months
• Server Logs: Anonymized IP logs retained for up to 30 days for security purposes

Cookies

This website uses minimal cookies:

• Theme Preference: Stores your dark/light mode preference (localStorage, not a cookie)
• Cloudflare Turnstile: Temporary cookie for CAPTCHA verification (automatically deleted)

We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

Children's Privacy

This website is not intended for children under the age of 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). We ensure that such transfers comply with GDPR requirements through:

• Standard Contractual Clauses (SCCs) with service providers
• Adequacy decisions by the European Commission
• Other lawful transfer mechanisms

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The “Last Updated” date at the top of this page indicates when the policy was last revised. We encourage you to review this policy periodically.

Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Supervisory Authority

If you are located in the EEA and believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection authority.