Privacy notice

Who is responsible

The controller for the processing described here is:

Karyna Dolynka
Prager Str. 18
99427 Weimar
Germany
Email: contact@karynadolynka.com
Phone: +380 96 602 14 37

For any question about your data, write to the email address above.

What the enquiry form collects

Submitting the enquiry form — the pop-up quick brief or the full form near the bottom of the page — sends your name, your email address, an optional brand or company name, and the message you type. A hidden field and a timestamp are also submitted for spam detection; neither carries any personal information beyond what a normal visit to the page already exposes.

Legal basis

This processing relies on your consent, given by ticking the consent checkbox before the form can be submitted (Art. 6(1)(a) GDPR). If you would rather not give that consent, please write directly to the email address in the contact section instead.

How a submitted message is handled

The form is processed by a small script on the server that hosts this site. It checks the fields and delivers your message as an email to the operator's mailbox, which is hosted on the same server. The message does not leave the server to reach that mailbox. The script itself stores no copy of your message in a database or file.

Two things are kept on the server in connection with the form:

• To stop the form being used to send mass email, the server counts submissions per visitor for ten minutes. It keeps a one-way, keyed fingerprint of your IP address with the times of your recent submissions — never the address itself — and discards entries older than ten minutes.
• If the email cannot be delivered, the mail system returns a copy of it, including your message, to a mailbox on the same server that collects delivery failures.

Hosting

This site runs on a server rented from Host Europe GmbH, which processes every request to the site, including enquiry-form submissions. Going by its network address, the server is located in Strasbourg, France. Its web server logs each request with your IP address, the time, the page requested and your browser's identification string. These logs are needed to run and secure the server (Art. 6(1)(f) GDPR) and are deleted after 90 days. Summary statistics of visits — numbers of visits, pages, browsers — are generated from them on the same server (AWStats); these summaries can include IP addresses.

Everything the page loads — text, images, fonts and videos — comes from this same server. The Instagram link is an ordinary link; nothing is loaded from Instagram unless you follow it.

Cookies and your consent

When you first visit, a bar at the bottom of the page asks whether you agree to statistics cookies. Your answer is stored in your browser's local storage, so the question is not repeated on every page. Storing it is necessary to respect your choice and needs no consent (§ 25(2) no. 2 TDDDG).

Statistics are only used if you click “Accept all” or switch them on under “Settings”; with “Reject all”, nothing beyond what is necessary runs (Art. 6(1)(a) GDPR, § 25(1) TDDDG). You can change or withdraw your choice at any time with “Cookie settings” at the bottom of every page.

How long data is kept

An enquiry, and the email it produces, is kept for as long as it takes to answer it and to handle any collaboration that follows from it. It is then deleted, unless German commercial or tax law requires it to be kept for longer.

Your rights

You have the right to access the personal data held about you (Art. 15 GDPR), to have it corrected (Art. 16) or erased (Art. 17), to restrict its processing (Art. 18), to receive it in a portable format (Art. 20), and to object to processing based on legitimate interests (Art. 21). You can withdraw your consent to the processing of an enquiry at any time, with effect for the future (Art. 7(3)). To exercise any of these rights, write to the email address above.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR) — for example the authority responsible for Weimar, the Thüringer Landesbeauftragter für den Datenschutz und die Informationsfreiheit (TLfDI).

Still being confirmed

• The data processing agreement with Host Europe GmbH, and the confirmed location of the server and of the outgoing mail relay.
• How long a returned copy of an undeliverable email is kept on the server, and how long the AWStats summaries are kept.
• The statistics service, once chosen: its name, what it collects, where it processes the data and for how long.
• A review of this notice by a qualified legal adviser.