Privacy

1. Controller

Eugenius Works OÜ, Ahtri 12, 10151 Tallinn, Estonia. Registry code 17328762. Managing director Eugen Panov.

For data protection questions, including any request listed in section 7, write to hey@eugenius-works.com.

2. Hosting

The site is hosted on Cloudflare Workers with static assets. To deliver pages and to protect the site against attacks, Cloudflare processes your IP address and request metadata such as the time of the request, the page requested, the referrer, and your browser's user agent.

Legal basis: legitimate interest in operating a secure and available website, Art. 6(1)(f) GDPR. Cloudflare acts as a processor on behalf of the controller.

3. Analytics

The site uses Cloudflare Web Analytics. It is cookieless: it sets no cookies, does not fingerprint your device or browser, and does not track you across other sites. It collects only aggregated page-view data, such as how often a page was viewed and the broad referrer category.

Legal basis: legitimate interest in understanding which pages are read, Art. 6(1)(f) GDPR.

This is why the site shows no cookie banner. A consent banner is required for storing or reading information on your device that is not strictly necessary. Nothing here stores or reads anything, so there is nothing to consent to.

4. Cookies and local storage

This site sets no cookies and uses no local storage, session storage, or comparable technology.

5. Contact form

The contact form on the homepage collects your name, your email address, and your message. These are used to read and answer your enquiry, and for nothing else.

Legal basis: Art. 6(1)(b) GDPR where the enquiry concerns a contract or steps taken before entering one, and otherwise legitimate interest in answering messages sent to the company, Art. 6(1)(f) GDPR.

Submissions are delivered by email through Resend (Resend, Inc., United States), which acts as a processor. The transfer to the United States relies on the EU-US Data Privacy Framework and on standard contractual clauses.

The form contains a hidden spam-prevention field, a honeypot. It is invisible to people and to screen readers, so it collects nothing from real visitors; only automated submissions fill it in, and those are discarded.

Retention: enquiries are kept only as long as needed to handle them and any follow-up, then deleted.

6. RSS feed

The feed at /rss.xml is a static file. Requesting it collects nothing beyond the hosting data described in section 2.

7. Your rights

You have the right to access your personal data, to have it corrected or erased, to restrict its processing, to receive it in a portable form, and to object to processing based on legitimate interest.

You also have the right to lodge a complaint with a supervisory authority. The competent authority here is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), https://www.aki.ee/en.

8. What this site does not do

There is no profiling and no automated decision-making. Personal data is not sold, and it is not shared with advertising networks. The site carries no advertising, no social media embeds, and no third-party trackers beyond the hosting and analytics described above.