Privacy Policy

Last updated: 24 May 2026 · Effective immediately

This privacy policy describes how Kirill Strelnikov (operating as an independent autónomo in Barcelona, Spain), through the website kirweb.site, collects and processes personal data. This site complies with the EU General Data Protection Regulation (GDPR) and Spanish data-protection law (LOPDGDD).

1. Who is the data controller

Kirill Strelnikov · Barcelona, Spain · [email protected]. For any data-related request, write to the same email.

2. What data we collect

• Contact form on kirweb.site: name, email or Telegram handle, message content, UTM parameters of the source URL, and the timestamp of submission.
• Google Lead Form (inside Google Ads): name, email and phone number that you choose to share through your Google account.
• Analytics: anonymised page views, device type, country, and referral source via Google Analytics 4. No personally identifying data is collected by analytics.
• Advertising: Google Ads conversion tracking records when a form submission happens, without storing personal identifiers on our side.
• Server logs: IP address, user agent, and request path, retained for security and abuse prevention.

3. Why we collect it

• To reply to your project enquiry and discuss potential engagement.
• To measure which marketing channels work, so the advertising budget is not wasted.
• To keep the site secure (rate-limiting, abuse detection).

We do not use your contact data for newsletters, marketing emails, or any purpose beyond responding to your enquiry. Your data is never sold or shared with unrelated third parties.

4. Legal basis

• Consent (GDPR art. 6(1)(a)) — when you voluntarily submit a contact form or lead form.
• Legitimate interest (GDPR art. 6(1)(f)) — for analytics, security logging, and ad performance measurement, balanced against your privacy.

5. Who processes your data on our behalf

• Google LLC — analytics (Google Analytics 4), advertising (Google Ads), Google Lead Forms. Data may be transferred outside the EU under the EU-US Data Privacy Framework.
• Cloudflare, Inc. — CDN, DDoS protection, TLS termination.
• Telegram FZ-LLC — when notifications about new enquiries are forwarded to a private Telegram chat owned by the controller. Only the data you submitted is forwarded.

No other third parties receive your data.

6. How long we keep it

Contact form submissions are retained for as long as the conversation about a potential project is active, plus up to 24 months for accounting and legal reasons (Spanish tax law requires retention of commercial correspondence). After that, records are deleted or anonymised. Analytics data is retained according to Google's default settings (currently 14 months).

7. Your rights under GDPR

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion ("right to be forgotten").
• Object to or restrict processing.
• Receive your data in a portable format.
• Withdraw consent at any time (without affecting prior lawful processing).
• File a complaint with the Spanish data protection authority (Agencia Española de Protección de Datos, aepd.es).

To exercise any of these rights, write to [email protected] from the email address you submitted. Requests are answered within 30 days.

8. Cookies

The site uses minimal technical cookies (CSRF protection) and Google Analytics / Google Ads cookies for measurement. No advertising profiles are built on our side. You can block analytics and advertising cookies at any time via your browser settings or a consent manager extension; the site remains fully functional without them.

9. Changes to this policy

If this policy changes, the updated version is published at this URL with a new "Last updated" date. Material changes affecting how your existing data is processed will be notified by email where applicable.

10. Contact

Questions about this policy: [email protected] · Telegram @KirBcn.