Privacy policy

What data potashev.com collects, what I use it for, how long I keep it and what rights you have, under Regulation (EU) 2016/679 (GDPR) and Spain’s Organic Law 3/2018 (LOPDGDD).

Last updated: 7 October 2026

In short. I only process the data you send me through the form or by email, and only to reply to you and prepare a possible collaboration. There are no analytics, no advertising, no sharing with third parties and no automated decisions. You can ask me to correct or delete your data at any time.

Data controller

Controller: Aleksei Potashev
Spanish foreigner ID (NIE): Z1277417W
Address: Calle Doctor Zamenhof 22, 2.º B, 28027 Madrid, Spain
Email: [email protected]

There is no data protection officer: the activity does not require one.

What data I process and where it comes from

Only what you give me:

Assessment request form: name, company or activity, email, phone (if you give it), sector, team size, the boxes you tick about your situation and tools, the free text about the process you want to improve and when you would like to start. The date of submission and the language of the page are recorded with it.
Email: whatever you include when you write to me directly.
Professional relationship: if we go on to agree an engagement, the contact and invoicing details needed to deliver it and to meet tax obligations.

Browsing. The site uses no cookies or analytics tools, so it collects no browsing data for its own purposes. The hosting provider may log technical connection data, such as the IP address, solely to serve the site and keep it secure.

No special categories of data (health, beliefs, membership, etc.) are collected; please do not include them in the form.

Purposes and legal basis

Replying to your request and preparing the first call. Basis: your consent when submitting the form (art. 6(1)(a) GDPR) and steps taken at your request prior to a contract (art. 6(1)(b)).
Delivering and invoicing an agreed service. Basis: performance of the contract (art. 6(1)(b)) and compliance with legal obligations, in particular tax law (art. 6(1)(c)).

I do not use your data for advertising or newsletters, do not combine it with other sources and make no automated decisions that affect you.

How long I keep it

Requests that do not lead to an engagement: up to twelve months after the last contact, in case we pick the conversation up again. Then they are deleted.
If there is an engagement: for as long as the professional relationship lasts and, afterwards, for the periods required by tax and commercial law — as a rule, six years.

Who else can see your data

I do not share your data with third parties or sell it. Two providers act as processors so that the site and email work:

Cloudflare, Inc. (United States): hosts the site (Cloudflare Pages), receives the form submission (Cloudflare Workers) and turns it into an email; it does not keep the form content beyond that delivery. Cloudflare is certified under the EU-US Data Privacy Framework and applies the European Commission’s standard contractual clauses.
Google Ireland Ltd. (Ireland): the mailbox in which I receive the requests. Google may process the data in the United States under the same safeguards.

Beyond these providers, data would only be disclosed to public authorities where the law requires it.

Your rights

You can at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent without affecting processing carried out until then. Just write to [email protected] saying what you want; if there is reasonable doubt about your identity, I may ask you to prove it. I reply within one month at most.

If you believe your rights have not been respected, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es, C/ Jorge Juan 6, 28001 Madrid).

Security

The site is served over HTTPS only and the form travels encrypted. I do not store submissions in databases of my own: the only record is the email I receive, in a mailbox that only I can access.

Minors

The services are aimed at companies and professionals. I do not knowingly collect data from anyone under fourteen; if you notice that a minor has sent me data, write to me and I will delete it.

Changes to this policy

If the way I handle data changes, I will update this page and the date at the top. The version in force is always the one published at this address.