How I handle your data

1. Who I am

My name is Mikhail Trigub. I am an Individual Entrepreneur registered in Georgia ([identification number], [address]), and I am the controller of the personal data you leave on this site. To reach me about anything concerning your data: mikhail@mytrigub.com.

2. What data I collect and where from

The request form: your name, a contact for reply (email, phone or Telegram handle — whichever you give) and the text of your message. That is all the form collects; there are no hidden fields.

Direct correspondence: if you write to me by email or Telegram, I receive what you sent and your address or account.

Anonymous site statistics: I use cookieless analytics. It counts page views, country, device type and referrer — without identifying you as a person: no cookies, no browser fingerprinting, no cross-site tracking. That is why this site has no cookie banner: there is nothing for it to ask.

Server technical logs: like any website, the server briefly records the IP addresses of requests — this is needed for security and to fend off attacks.

I do not collect special categories of data (health, beliefs and the like) and ask you not to send them through the form. This site is not addressed to children under 18. Providing any data on this site is voluntary: if you do not fill in the form, the only consequence is that I cannot reply to you.

3. Why I need this data

Only for what you left it for: to answer your request, to discuss and deliver a possible project, to keep business correspondence and records under concluded contracts. I do not use your contacts for mailings without separate consent, do not sell them and do not pass them on for advertising.

4. Legal grounds

• Your consent — when you tick the box in the form; it can be withdrawn at any time, see section 9.
• Pre-contractual and contractual relations — while we discuss or deliver a project.
• My legitimate interest in the security of the site — for the technical logs.
• Legal obligations — retention of contract documents for the periods set by Georgian tax law.

5. Automated decisions

No automated system on this site makes decisions producing legal effects for you. There is no profiling.

6. How long I keep it

Requests from the form and correspondence — 24 months from the last contact, then deleted if we did not start working together. Data under concluded contracts — for the periods required by Georgian law. Technical logs — up to 30 days. On your request I delete data earlier (section 9), except what I am obliged to keep by law.

7. Who can technically see the data

I process the data alone; there are no employees with access. Technically, service providers are involved:

• hosting of the site and the request database — a data centre in Germany (EU);
• email service — a domain mail provider;
• Telegram — only as a channel that notifies me of a new request (name and message text).

Data is passed to providers only to the extent needed for the service to work. Some providers may be located outside Georgia and the EU; I choose services with an adequate level of data protection. Data is disclosed to state authorities only upon a lawful request.

8. How I protect it

The connection to the site is encrypted (HTTPS). The request database is accessible only to me behind authentication, and backups are encrypted. Should a breach occur that affects your rights, I will notify the supervisory authority within the period set by law (72 hours) and you — without undue delay.

9. Your rights

At any time you may:

• find out what data of yours I hold and receive a copy of it;
• demand correction, updating or completion of inaccurate data;
• demand blocking of processing, that is a temporary suspension;
• demand erasure or destruction of your data;
• object to the processing;
• withdraw consent — as easily as you gave it: with a single email. I stop consent-based processing within 7 working days of the withdrawal;
• receive your data in a structured, machine-readable format (portability).

For any of these, write to mikhail@mytrigub.com — I fulfil requests within 10 working days and carry out deletion without asking why. The only exception is data I am obliged to keep by law, such as contract documents: I delete those once the statutory periods expire.

If you believe I have violated your rights, you may contact the Personal Data Protection Service of Georgia (pdps.ge). If you are in the EU — also the supervisory authority of your country.

10. Changes to this policy

If my processing practices change, I will update this document and the version date at the top. Material changes do not apply retroactively to data already collected without your consent.