Privacy Policy
Last updated: 26 September 2026
This Privacy Policy explains how personal data is collected, used, stored and protected when you visit denysnaumov.com or contact me through the website.
1. Data Controller
The controller responsible for the processing of personal data is:
Denys Naumov
Self-employed professional
Alpicat, Lleida, Spain
NIF/NIE: Z2260455C
EU VAT number: ESZ2260455C
Email: denys@denysnaumov.com
Website: https://denysnaumov.com
2. Personal Data I Collect
When you submit a contact or project enquiry through the website, I may collect:
- your name;
- your email address;
- your company name, if you choose to provide it;
- the date and time of your enquiry;
- technical information necessary to process, secure and operate the website.
The web server may also process limited technical information, such as IP addresses, browser information, requested URLs and request timestamps, as part of normal server and security logging.
I do not intentionally collect special categories of personal data through this website.
3. Why I Process Your Data
Personal data submitted through the website is used to:
- respond to enquiries;
- discuss requested services or potential projects;
- take steps requested by you before entering into a professional relationship;
- communicate regarding an existing enquiry or project;
- maintain the security and technical operation of the website;
- comply with applicable legal obligations where required.
Personal data submitted through the contact forms is not used for behavioural advertising, profiling, remarketing or unsolicited marketing communications.
4. Legal Basis for Processing
Where you contact me regarding professional services, personal data is primarily processed because it is necessary to take steps at your request before entering into a contract or to perform an existing contractual relationship, in accordance with Article 6(1)(b) GDPR.
Limited technical information may be processed on the basis of my legitimate interests under Article 6(1)(f) GDPR in maintaining the security, availability and proper operation of the website.
A limited notification about a new enquiry may also be processed through Telegram on the basis of my legitimate interest in managing and responding to enquiries efficiently.
Where processing is necessary to comply with a legal obligation, Article 6(1)(c) GDPR may apply.
The privacy checkbox displayed with contact forms confirms that you have read and understood this Privacy Policy. It does not replace or alter the applicable legal basis for processing.
5. Contact Form Data
The contact forms on this website request:
- Name — required
- Email — required
- Company name — optional
Providing your name and email address is necessary for me to process and respond to your enquiry.
If you do not provide the required information, I may not be able to respond to your request.
6. Where Your Data Is Stored
Contact form submissions are stored in the private Payload CMS database used by this website.
The website, Payload CMS and its database are hosted on OVHcloud infrastructure located in France, within the European Union.
OVHcloud acts as an infrastructure provider and data processor in connection with the hosting of data stored on the server.
Appropriate technical and organisational measures are used to protect personal data against unauthorised access, loss, alteration or disclosure.
7. Telegram Notifications
A limited notification may be sent through Telegram when a new website enquiry is received so that I can respond promptly.
The notification may contain:
- your name;
- your company name, if provided.
Your email address is not transmitted through Telegram.
Your email address and complete contact record remain stored in Payload CMS.
Telegram processes the limited information transmitted through its own infrastructure and in accordance with its own privacy terms.
The amount of personal data transmitted through Telegram is intentionally limited.
8. Data Retention
Contact enquiries that do not result in an ongoing client relationship are normally retained for up to 12 months after the last communication relating to the enquiry.
After this period, the enquiry and associated personal data may be deleted unless there is a legitimate or legal reason to retain the information for longer.
If an enquiry results in a client relationship, certain information may need to be retained for longer where necessary for contractual, accounting, tax or other legal obligations.
Technical and security logs, where generated, are retained only for the period reasonably necessary for security, diagnostics and operation of the website.
9. Analytics, Advertising and Profiling
This website does not currently use visitor analytics, advertising or behavioural tracking systems such as:
- Google Analytics;
- Meta Pixel;
- advertising or remarketing trackers;
- behavioural profiling systems.
I do not create advertising profiles of website visitors and do not use contact form data for automated decision-making.
10. Sharing of Personal Data
I do not sell, rent or trade your personal data.
Personal data may be processed by service providers only where necessary for the operation of the website or management of your enquiry.
Relevant providers currently include:
- OVHcloud — website, server and database hosting;
- Telegram — limited notification of new enquiries as described above.
Personal data may also be disclosed where required by law, a court order or a competent public authority.
11. International Data Transfers
The website and its Payload CMS database are hosted in France.
Telegram states that data relating to users in the European Economic Area is stored in data centres in the Netherlands. Where personal data is otherwise transferred outside the European Economic Area, applicable safeguards required by data-protection law should apply.
12. Your Data Protection Rights
Depending on the circumstances, the GDPR gives you the right to:
- request access to your personal data;
- request correction of inaccurate or incomplete data;
- request deletion of your personal data;
- request restriction of processing;
- object to processing based on legitimate interests;
- request data portability where applicable.
To exercise your rights, contact:
I may request reasonable information to verify your identity where necessary to protect personal data from unauthorised disclosure.
You also have the right to lodge a complaint with the Agencia Española de Protección de Datos (AEPD) if you believe that your personal data has been processed in violation of applicable data-protection law.
13. Security
Reasonable technical and organisational measures are used to protect personal data and the systems used to process it.
However, no internet-based system can guarantee absolute security.
14. Changes to This Privacy Policy
This Privacy Policy may be updated when the website, its functionality, data-processing practices, service providers or applicable legal requirements change.
The current version will always be published on this page together with the date of the latest update.