Data processing information for visits, inquiries and consent-based tracking.
This page describes how the site handles page visits, project inquiries, spam protection and Google Ads measurement that only activates after explicit consent.
Last updated: April 3, 2026.
Controller
Mykola Kuchuman, Donaufelder Straße 246, 1220 Wien, Austria. Contact: mykolakuchuman@gmail.com.
Hosting and server logs
The site is intended to run on Cloudflare Pages and Pages Functions. The hosting provider may process IP address, request URL, date and time, user agent, referrer and security-related log data in order to deliver the website, defend it against abuse and troubleshoot incidents.
Legal basis: Article 6(1)(f) GDPR, legitimate interests in secure and reliable website operation.
Contact requests
If you use the contact form, email or another direct contact channel linked on the site, the operator may process your name, email address, company, website, project type, budget range, timeline and message content, plus any follow-up communication needed to answer the inquiry.
Fields marked as required in the contact form are needed to review the request. Optional fields can be left empty.
Legal basis: Article 6(1)(b) GDPR for steps taken at your request before entering into a contract, and Article 6(1)(f) GDPR for follow-up communication, triage and protecting the business inbox from misuse.
Spam protection
If Cloudflare Turnstile is enabled on the form, Cloudflare processes technical request data and the Turnstile response token in order to distinguish legitimate visitors from bots. This supports abuse prevention and form security.
Legal basis: Article 6(1)(f) GDPR, legitimate interests in protecting the site and contact form.
Google Ads tag and consent
The Google Ads / gtag snippet is present across the website, but it is only activated after you grant consent through the cookie banner. Before consent, marketing measurement remains disabled and the site only stores your consent choice locally so it can remember it on later page loads.
If you allow this tag, Google may receive page URL, referrer, browser and device information, and advertising-related storage may be read or written according to your consent choice.
Legal basis: Article 6(1)(a) GDPR, consent. You can reopen cookie settings from the footer at any time.
Recipients and service providers
- Cloudflare for hosting, content delivery, server logs and optional Turnstile checks.
- Resend for inquiry delivery by email, if email delivery is enabled.
- Google for Google Ads measurement, but only after consent.
- Telegram only if you choose direct Telegram contact or if optional notification forwarding is enabled separately.
International transfers
Some of these providers may process data outside the EEA, especially in the United States. The live deployment should therefore use the providers' current data processing terms and transfer mechanisms before paid traffic is sent to the site.
Retention
Inquiry data should be kept only as long as needed to answer the request, evaluate a possible engagement and keep necessary business records. A practical default for non-client inquiries is up to 12 months after the last relevant contact unless a longer legal retention period applies.
Your rights
You can request access, rectification, erasure, restriction, objection and data portability where applicable. Consent for Google Ads measurement can be withdrawn for future processing at any time through the footer settings.
You also have the right to complain to the Austrian Data Protection Authority (DSB).
This page is a practical implementation note and not legal advice. If the business setup changes later, review whether VAT, registration or supervisory authority details also need to be added to the live Impressum.