Privacy Policy

Last updated: May 8, 2026.

1. Data Controller

Your personal data controller is Illia Sandyriev (Sandyriev Consulting, sole proprietor), the owner of sandyriev.com.

Contact: [email protected], +380 66 336 41 80.

2. What We Collect

• Contact form data: name, email, phone, message (via Contact Form 7 and SendPulse forms).
• Technical data: IP address, user-agent, visit timestamp (Cloudflare CDN, Apache server logs).
• Analytics data: page interactions, traffic source, session duration (Google Analytics 4 via Google Tag Manager).
• Cookies: session, analytics (Google), functional (Cloudflare).

3. Purposes of Processing

• Responding to your inquiries or consultation requests.
• Measuring site and advertising performance.
• Security and protection against attacks.

4. Legal Basis

• Consent (GDPR Art. 6(1)(a); Ukrainian Data Protection Law Art. 11) — for analytics and marketing cookies.
• Contract / pre-contractual measures (GDPR Art. 6(1)(b)) — for contact form submissions.
• Legitimate interest (GDPR Art. 6(1)(f)) — for site security and server logs.

5. Third-Party Processors

• Google LLC — Google Analytics 4 and Google Ads (USA, EU-US Data Privacy Framework).
• Cloudflare, Inc. — CDN and DDoS protection (USA, GDPR-compliant).
• Hetzner Online GmbH — server hosting (Germany, GDPR).
• SendPulse — contact form processing (Ukraine).
• HubSpot, Inc. — if you submit a HubSpot CRM form (USA, GDPR-compliant).

6. Retention

• Contact form submissions: until your inquiry is resolved + 1 year for business communication.
• Google Analytics 4: 26 months (default).
• Server logs: 30 days.

7. Cookies

• Necessary — for basic site operation (session, security).
• Analytics — Google Analytics (requires your consent).
• Marketing — Google Ads and remarketing (requires your consent).

You can opt out of optional cookies via the consent banner or your browser settings.

8. Your Rights

Under GDPR and Ukrainian Data Protection Law, you have the right to:

• Access your personal data.
• Correct inaccurate or incomplete data.
• Request erasure (“right to be forgotten”).
• Restrict processing.
• Data portability.
• Object to processing.
• File a complaint with the Ukrainian Parliament Commissioner for Human Rights or an EU supervisory authority.

9. Data Requests

Send requests to [email protected] with subject “Privacy Request”. We will respond within 30 days.

10. Policy Changes

We may update this Policy. The “Last updated” date is at the top of the page.