IMtech

Legal information

Privacy policy

Data controller

The controller of the personal data collected through this site is IMtech; its legal name and registration details are given in this section. The controller determines the purposes and means of processing and is responsible for protecting the data. Send any question about the processing to the address given in “Your rights and how to exercise them”.

What data we collect

Through the contact form we receive your name, company name, email address, phone number (if you provide one), the topic of your enquiry, the product it concerns, an approximate budget and the message text. Together with the enquiry we technically store the IP address and the user-agent string of your browser. We do not collect special categories of data and ask you not to send them in the message.

Purpose and legal basis of processing

The data is processed for a single purpose — to handle your enquiry: to clarify the task, prepare a response and propose a next step. The legal bases are your consent, given by ticking the box in the form, and our legitimate interest in answering enquiries and protecting the form against automated spam. Processing is carried out in accordance with the Law of Ukraine “On Personal Data Protection” and, for data subjects in the EU, with Article 6 of the GDPR; the scope of this notice follows Article 13 of the GDPR. You may withdraw your consent at any time — this does not affect the lawfulness of processing carried out before the withdrawal.

Retention periods

Enquiries and the correspondence around them are kept for 24 months from our last contact with you and are deleted afterwards. Enquiries identified as spam are deleted after 30 days. The IP address and user-agent are anonymised after 90 days, after which they no longer identify the sender. If you ask us to delete your data earlier, we will do so within 30 days, except for data we are required by law to retain.

Who we share data with

The data is available to the IMtech employees who handle enquiries and to two categories of service providers: the hosting provider where the site and the database run, and the email service that delivers the enquiry notification. Both act as our processors on the basis of a contract. We do not sell data, do not share it for third-party marketing and do not use any third-party trackers.

Your rights and how to exercise them

You have the right to access your data, to have it rectified or erased, to restrict processing, to object to processing and to receive your data in a machine-readable format. To exercise any of these rights, write to the company's contact email address listed in the contacts on this page. We respond within 30 days and may ask you to confirm your identity so that we do not disclose data to the wrong person.

Supervisory authority

If you believe your rights have been infringed, you may lodge a complaint with the Ukrainian Parliament Commissioner for Human Rights — the supervisory authority for personal data protection in Ukraine. This right does not depend on whether you contacted us first.

Cookies and analytics

The site uses only technically necessary cookies: the admin panel session and protection of the form against cross-site requests. There are no advertising or analytics scripts and no third-party trackers on the site, so no cookie consent banner is required.

Changes to this policy

We update this policy whenever the data we collect, our service providers or the retention periods change. The current version is always available at this address; the date of the last update is shown at the bottom of the page. We notify the people we are already corresponding with about material changes.

The legal name, address and contact details of the data controller are given in the “Data controller” section.