Privacy Policy
This Privacy Policy explains how personal data may be processed when you visit this website or contact me.
Controller
Mikhail Kostin
Independent professional / sole proprietor registered in Portugal
Contact: info@mikhail-kostin.com
Personal Data Processed
This website does not provide user accounts, comments, checkout, newsletter signup or contact forms.
If you contact me by email, I may process the personal data included in your message, such as your name, email address, company, project details and any other information you choose to provide.
The website may also generate basic technical logs through hosting and security providers, such as Cloudflare. These logs may include technical data such as IP address, browser type, device information, requested URLs, timestamps and security-related events.
Purposes
Personal data may be processed for the following purposes:
- responding to enquiries
- discussing commissions or collaborations
- maintaining professional correspondence
- protecting the website from spam, abuse and security threats
- maintaining and improving the website
- complying with legal obligations
Legal Basis
Depending on the context, processing may be based on:
- consent, when you voluntarily contact me
- pre-contractual steps, when you enquire about a possible commission or collaboration
- legitimate interests, including website security and professional communication
- legal obligations, where applicable
Data Retention
Email correspondence may be retained for as long as necessary to manage the enquiry, professional relationship, legal obligations or legitimate business records.
Technical hosting and security logs are retained according to the policies of the relevant service providers.
Service Providers
This website may use infrastructure and technical services provided by third parties, including:
- Cloudflare, for hosting, DNS, security, caching and email routing
- GitHub, for source code hosting and deployment workflow
- Google Search Console, for search indexing and website diagnostics
If analytics tools such as Google Analytics are added later, they must not run before valid cookie consent is implemented.
International Transfers
Some service providers may process data outside the European Economic Area. Where applicable, such transfers should rely on appropriate safeguards provided by those service providers.
Your Rights
Under the GDPR, you may have the right to:
- access your personal data
- request correction of inaccurate data
- request deletion of data
- object to processing
- request restriction of processing
- request data portability, where applicable
- withdraw consent, where processing is based on consent
To exercise these rights, contact: info@mikhail-kostin.com
You also have the right to lodge a complaint with the Portuguese data protection authority:
Comissão Nacional de Proteção de Dados (CNPD)
https://www.cnpd.pt/
Cookies
See the Cookie Policy for information about cookies and similar technologies.
Last Updated
27 June 2026