Privacy Policy

1. Controller

The data controller is Ivan Anisimov, a sole proprietor registered in Portugal (NIF 327343117), operating at anisimov.dev.

Contact:

2. What data I collect

When you contact me via the form on this website or by email, I may collect:

• Your name and email address
• The content of your message or enquiry
• Basic metadata (date and time of contact)

When you make a payment, payment data (card details or bank account details) is processed entirely by Stripe, Inc. I do not store or have access to your card or banking credentials. I may receive and retain transaction records (amount, date, reference) for invoicing and tax compliance purposes.

3. How I use your data

• To respond to your enquiry and provide requested services
• To issue invoices and comply with Portuguese tax law
• To fulfil contractual obligations under an active engagement

I do not use your personal data for marketing without your explicit consent. I do not sell, rent, or share your data with third parties except as strictly necessary to deliver services (e.g. payment processor).

4. Legal basis (GDPR)

Processing is based on:

• Contract performance — processing necessary to fulfil a contract or take pre-contractual steps at your request (Art. 6(1)(b) GDPR)
• Legal obligation — compliance with Portuguese tax and accounting regulations (Art. 6(1)(c) GDPR)
• Legitimate interest — responding to business enquiries and maintaining client records (Art. 6(1)(f) GDPR)

5. Data retention

Enquiry data (contact form messages, email correspondence that did not result in a contract) is retained for up to 12 months.

Invoicing and contract data is retained for 10 years as required by Portuguese tax regulations (Código do IVA and Código do IRC/IRS).

6. Your rights

Under the GDPR you have the following rights regarding your personal data:

• Access — request a copy of the data I hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion, where legally permitted
• Restriction — request that processing be limited
• Objection — object to processing based on legitimate interest
• Portability — receive your data in a machine-readable format

To exercise any of these rights, email . I will respond within 30 days.

You also have the right to lodge a complaint with the Portuguese data protection authority: CNPD (Comissão Nacional de Proteção de Dados) at cnpd.pt.

7. Cookies

This website does not use tracking cookies, analytics scripts, or advertising pixels. No third-party tracking code is loaded. The only cookies that may be set are strictly necessary session cookies required for basic website functionality.

8. Third-party services

Payments are processed by Stripe, Inc. (United States). Stripe is certified to PCI DSS Level 1 and acts as a data processor under a Data Processing Agreement. Their privacy policy is available at stripe.com/privacy.

No other third-party services (analytics, advertising, social media) are integrated into this website.

9. Contact

For any privacy-related questions or to exercise your rights, contact:

Ivan Anisimov
NIF: 327343117

Portugal (EU)