Privacy Policy

1. Who is responsible for your data

Andrei Barannikov, an independent data strategy and governance consultant based in Valencia, Spain, is the data controller for personal data collected through andreibarannikov.com.

You can reach me about anything in this policy at .

2. What personal data I collect

Data you give me

When you use the contact form, I receive the details you fill in:

• The subject of your enquiry and the message you write
• First name, last name, business email address and company
• Optionally your role, phone number and country
• Which language version of the site you used, and the date and time of the submission

If you contact me by email, phone or LinkedIn instead, I process whatever you choose to share in that message. When you use the contact form, I also send an automatic confirmation to the email address you provide.

Data collected automatically

My hosting provider processes standard server log data such as your IP address, browser type and the pages requested, which is needed to deliver the site and keep it secure.

Cookies and tracking

This site sets no advertising cookies, no analytics cookies and no third-party trackers. Your language choice is saved in your browser's local storage on your own device; it is never transmitted to me and you can clear it at any time through your browser settings.

3. Why I use your data and my legal basis

• To answer your enquiry and prepare a possible engagement. Legal basis: Article 6(1)(b) GDPR — steps taken at your request before entering into a contract — and Article 6(1)(f), my legitimate interest in responding to business enquiries.
• To keep a record of business correspondence and protect the website. Legal basis: Article 6(1)(f) GDPR, my legitimate interest in running my professional activity securely and being able to evidence what was agreed.
• To meet tax, accounting and other legal duties if we go on to work together. Legal basis: Article 6(1)(c) GDPR.

I do not use your details for marketing, I do not sell or rent them, and I do not carry out profiling or automated decision-making.

4. Who else can access your data

I do not share your personal data with anyone except the service providers that make this site and my correspondence work. They act as processors on my instructions and may not use your data for their own purposes:

• Netlify — hosting of this website and storage of contact form submissions.
• Zoho — delivery and storage of the message that notifies me of your enquiry and of any correspondence that follows.
• Resend — sending the automatic confirmation email to the address you provide in the contact form.

Beyond that, I disclose personal data only where I am legally required to, for example to a competent authority acting within its powers.

5. International transfers

Some of these providers are established in, or store data in, the United States. Where personal data leaves the European Economic Area, the transfer is covered by appropriate safeguards under Chapter V GDPR, in practice the European Commission's Standard Contractual Clauses and, where the provider is certified, the EU-U.S. Data Privacy Framework. You can ask me for details of the safeguards that apply.

6. How long I keep your data

• Enquiries that do not lead to work: kept for as long as the conversation may realistically continue, and deleted at the latest 24 months after our last contact.
• Enquiries that lead to an engagement: kept for the duration of the work and afterwards for the periods required by contract, tax and accounting law, which in Spain is generally up to six years.
• Server log data: kept only for the short periods applied by my hosting provider for security and troubleshooting.

When a retention period ends, the data is deleted from the contact form storage and from my mailbox.

7. Your rights

Under the GDPR you have the right to:

• Ask what personal data I hold about you and receive a copy of it
• Have inaccurate or incomplete data corrected
• Have your data erased when there is no longer a valid reason for me to keep it
• Ask me to restrict processing, or object to processing based on my legitimate interests
• Receive the data you provided in a structured, commonly used, machine-readable format
• Withdraw your consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before you withdrew it

To exercise any of these rights, write to . I will respond within one month. Exercising your rights is free of charge.

If you believe your data has been handled improperly, you can also complain to the Spanish Data Protection Agency, Agencia Española de Protección de Datos, or to the supervisory authority in your own country.

8. How your data is protected

This site is served over HTTPS, so what you type into the form is encrypted in transit. Access to form submissions and to my mailbox is protected by strong authentication, and I collect as little personal data as possible in the first place. No transmission over the internet can be guaranteed to be completely secure, but I take reasonable technical and organisational measures to protect your data.

9. Children

This site offers professional services to organisations and is not directed at children. I do not knowingly collect personal data from anyone under 16.

10. Changes to this policy

If I change how personal data is handled, I will publish the updated policy on this page with a new date at the top. Please check back occasionally.