Privacy Policy

Effective date: 2025-09-30

This page explains how I (Eugene Venger) collect, use, and protect personal data on venger.me. I operate as an independent contractor based in Poland and process personal data in accordance with the GDPR.

Data Controller

Controller: Ievgen Venger
Email: eugene@venger.me
Phone: +48 508 737 592
Address: Stalowa 13, 03-425 Warsaw, Poland

What data I collect

• Contact form: name, email, your message, and selected service interest.
• Email: if you email me directly, I will process the data you send.
• Site analytics: privacy-friendly, aggregate usage metrics (see Analytics below).
• Technical logs: IP address and user agent may appear in server logs for security/abuse prevention.

Why I collect it (legal bases)

• Respond to inquiries and provide proposals — contract initiation/legitimate interest.
• Provide and improve the site — legitimate interest.
• Security and fraud prevention — legitimate interest.
• Legal obligations — where applicable (e.g., accounting records).

Analytics

I use Umami Analytics, a privacy-friendly and cookieless analytics tool, to measure aggregate traffic and content performance. Umami does not track individuals across sites and does not build user profiles. Metrics include page views, referrers, devices, and countries in aggregate form.

Cookies

The site is designed to work without non-essential cookies. If any cookies are ever used, they will be limited to what is necessary for functionality or security. You can block cookies at the browser level.

How long I keep data

• Contact messages: up to 12 months after last interaction, or longer if we start a project.
• Business records: retained as required by tax/accounting law.
• Analytics aggregates: retained for trend analysis without identifying individuals.

Sharing and processors

I may share data with service providers strictly as needed to run the site and communications (e.g., hosting, email, analytics). These providers act as processors and only process data under my instructions.

International transfers

If data is transferred outside the EEA, I rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or adequacy decisions.

Your rights (GDPR)

• Access your data
• Rectify inaccurate data
• Erase data (right to be forgotten)
• Restrict or object to processing
• Data portability
• Withdraw consent where processing is based on consent

To exercise rights, email eugene@venger.me. You also have the right to lodge a complaint with the Polish Data Protection Authority (UODO): uodo.gov.pl.

Security

I implement reasonable technical and organizational measures to protect personal data. No system is 100% secure; risk is minimized by collecting the minimum necessary data and limiting retention.

Children

This site is not intended for children and I do not knowingly collect children’s data.

Changes

I may update this policy from time to time. Material changes will be reflected on this page with an updated effective date.