Who We Are Rostoria (Individual Entrepreneur Polina Bacho), email: connect@rostoria.co. We are the controller of personal data collected through this website.
What Data We Collect Contact details: first name, last name, phone number/WhatsApp, content of the comment in the form. Communications: messages and metadata during email/WhatsApp communication. Technical data: IP address (anonymized in GA4), device/browser type, pages and events (upon consent for analytical cookies). Limited: business information voluntarily provided by you in the comments (e.g., industry, project goals).
Sources Data is collected directly from you (forms, correspondence) and automatically via cookies/analytics upon your consent.
Purposes and Legal Bases We process data for: Responding to your request and project communication — legitimate interest (Art. 6(1)(f) GDPR). Record-keeping and legal compliance — legal obligation (Art. 6(1)(c) GDPR). Maintenance and protection of the service — legitimate interest (Art. 6(1)(f) GDPR). Analytics (GA4 with IP anonymization) — only upon your consent (Art. 6(1)(a) GDPR). We do not use automated decision-making systems (including profiling) that could produce legal effects concerning you or similarly significantly affect you. All request evaluation is conducted manually by qualified specialists.
Retention We retain leads for no longer than 12 months from the last contact unless otherwise required by law. Upon your request, data is deleted within 30 days. Data from forms might not be saved in Tilda Leads if immediate transfer to our systems is selected. Email correspondence is stored according to the email provider's policy.
Recipients (Processors) We transfer data only to services necessary for website operation/communication under data processing agreements: Tilda Publishing — hosting and forms. Google Analytics 4 — analytics (upon consent, with IP anonymization). WhatsApp/Meta — communications via WhatsApp link/button. By using the WhatsApp button, you agree to the terms and Privacy Policy of WhatsApp LLC. We recommend not sharing critical financial information or passwords via messengers. Google Workspace email provider — business correspondence. Other IT contractors (only when necessary and with data protection measures).
International Transfers Our service providers may process data outside the EEA (e.g., USA/Georgia). We use Standard Contractual Clauses (SCC) and/or other mechanisms provided by the GDPR to ensure adequate protection.
Your Rights (GDPR) You have the right to request: access, rectification, erasure, restriction of processing, data portability. You can object to processing based on legitimate interest and withdraw consent (for analytics) at any time. To exercise these rights, email connect@rostoria.co.
Cookies and Analytics We use only strictly necessary cookies for the website to function. Analytical/marketing cookies are activated only upon your consent. More details are in the Cookie Policy. You can change your cookie preferences via the "Cookie Settings" link in the footer.
Security We implement organizational and technical security measures and use HTTPS encryption. However, no method of data transmission over the Internet guarantees absolute protection. Commercial Information. We strictly distinguish between your Personal Data (name, contact details) and Commercial Information (essence of the business task, financial data, ideas) that you provide for evaluation. A strict confidentiality regime is applied to Commercial Information, exceeding personal data protection standards. We are ready to sign an NDA (Non-Disclosure Agreement) before starting a detailed discussion of the project.
Age Restriction The website is not intended for individuals under 16. We do not knowingly collect their data.
Updates We may update this Policy. The new version is published on the website with the specified date. Data inquiries contact: connect@rostoria.co
