Privacy Policy

Last updated: 31 October 2026

I keep this short because I collect very little. If anything here is unclear, write to me at [email protected].

Who is responsible for your data

Festedius is a private energy practice run by a sole proprietor registered in Ukraine. For this website and for the messages you send me, I am the data controller. Contact for all questions about your data: [email protected].

What this website collects

By default the website sets no cookies and runs no analytics or tracking scripts. It is a static site hosted on Cloudflare Pages. Cloudflare, as the hosting provider, processes technical connection data (such as your IP address) for security and delivery; I do not receive or use that data.

Apart from analytics, which runs only if you consent, the only data I collect through the site is what you type into the contact form:

• your name (as you choose to give it),
• your e-mail address,
• your message and, if you select one, the service you are interested in.

Please do not include information about your health, diagnoses, or about other people in the message. If we start working together, we will discuss anything personal privately, not through the website form.

How the form reaches me

The form is delivered to my mailbox by a third-party relay service, FormSubmit (formsubmit.co). It receives what you typed and forwards it to me by e-mail. According to its policy, it does not disclose the data to anyone else except as needed to deliver the message or when required by law. It has not published where its servers are located or a data processing agreement; I treat it as a processor acting on my instructions and send nothing through it beyond the form fields above. The message then lives in my mailbox at Google (Gmail).

Why I process it and on what legal basis

• To answer you and, if you wish, to arrange the work: this is necessary to take steps at your request before any agreement (GDPR Article 6(1)(b)) and my legitimate interest in replying to people who write to me (Article 6(1)(f)).
• If you tell me about something sensitive in your message, I rely on your explicit consent, which you give by sending it (Article 9(2)(a)). I would rather you did not include such details at all.
• Under Ukrainian law on personal data protection, by sending the form you consent to the processing described here for the purpose of replying to you.

How long I keep it

Messages that do not lead to any work are deleted after six months. If you become a client, I keep our correspondence for as long as I am required to under Ukrainian accounting and tax rules, and then delete it.

Materials you provide for the work itself (for example a current photograph and your date and time of birth) are used only for your work, are stored in a protected place rather than in ordinary e-mail where possible, are never published or shared, and are deleted 30 days after the work is complete, unless you ask me to keep them for future work.

Who else sees your data

Nobody, with these exceptions: the form relay and the mailbox provider named above (as processors), the hosting provider (technical data only), Google and Microsoft (only if you accept analytics), and public authorities if the law requires it. I do not sell or rent data, and I do not use it for advertising. If I ever use a translation tool to understand a message, I remove your name and do not include photographs.

International transfers

I am in Ukraine. When you write to me from the EU, the UK or elsewhere, you send your data to me directly. The mailbox and relay providers may process it in other countries, including the United States, under their own safeguards. Ukraine has data protection law and a supervisory authority (the Ukrainian Parliament Commissioner for Human Rights).

Your rights

Wherever you are, you can ask me to show you the data I hold about you, correct it, delete it, limit how I use it, or send it to you in a usable form; you can object to processing based on legitimate interest; and you can withdraw consent at any time without affecting what was done before. Write to [email protected]; I answer within one month. If you are in the EU or the UK, you can also complain to your local data protection authority. In Ukraine, to the Parliament Commissioner for Human Rights.

Children

This practice is for adults. I do not knowingly collect data from anyone under 18. If you believe a minor has written to me, tell me and I will delete it.

Changes

If this policy changes, the new version is published here with a new date.

Analytics and cookies (only with your consent)

If you accept in the cookie banner, I use Google Analytics and Microsoft Clarity to count visits and clicks and to see how the site is used. They set cookies and may send technical data (such as IP address and device information) to Google and Microsoft. Without your consent, nothing from them is loaded.

You can change your choice at any time with “Cookie settings” at the bottom of the page. Your choice is saved in your browser. Declining does not limit what you can do on the site.