getsite

Privacy Policy

How getsite processes visitor data and project enquiries.

Data controller and configuration status

The controller's details have not yet been completed in settings. They must be entered before lead intake opens; until then, controller details are not published.

From the project-enquiry form: the selected processing route, service, budget, timeline, name, company (if provided), contact details, preferred communication channel, comment, brief answers, form language and consent confirmation.
We do not request nationality, precise geolocation or bank-card details.

Enquiry data is used solely to review a project enquiry and respond to it.
We do not use enquiries for newsletters, advertising or marketing without separate new consent, and we do not sell personal data.
We do not use automated decision-making that produces legal or similarly significant effects for a visitor.

The “Moldova and other countries” route records an enquiry in the international processing environment.
The “Russia” route sends the browser directly to a separate Russian environment and database; the main site is not a proxy and does not receive that enquiry's body before it is recorded in Russia.
Any later identifiable transfer between environments requires a separate legal assessment and does not happen automatically.

Stripe processes payment details only after a visitor voluntarily redirects to a Stripe page; card details do not reach getsite.
An embedded YouTube or Vimeo player loads and connects to its provider only after consent to the External media category.
After consent to Analytics, the site sends an aggregate non-administrative page path to its first-party counter. The counter does not create a visitor profile.
Category controls are available in the banner and through /cookies#settings; browsing or scrolling the site does not mean consent.

Enquiries are retained for up to 12 months after the last meaningful contact.
Rights requests are retained for 3 years from the date they are submitted.
Contract and payment data are retained for periods required by the contract and mandatory records.

You may request access, rectification, erasure, restriction of processing, objection, portability, withdrawal of consent, or ask a question about processing.
Withdrawal does not affect the lawfulness of processing before withdrawal. Use the /data-rights page or the data-protection email if it is published above.
You may also lodge a complaint with the competent data-protection supervisory authority.

We apply data minimisation, input validation, access controls and separation of storage environments.
Transmission is protected with HTTPS; administrative access uses separate authentication, least-privilege access, backups and restoration checks.