Skip to Content
EN UA
Free consultation →

Privacy Policy

Last updated: 13 November 2026

This policy explains what personal data we collect when you visit erpconsulting.pro or contact us, why we do it, how long we keep it and what rights you have. It is specific to this website and kept as short as we could make it.

  1. Who is responsible
  2. What data we collect
  3. Why we use it and on what legal basis
  4. Who processes data for us
  5. International transfers
  6. How long we keep data
  7. Your rights
  8. Security
  9. Changes to this policy

Who is responsible

The controller of your personal data is individual entrepreneur Viktor Turych, trading as ERP Consulting, Shatsk, Volyn region, Ukraine.

For any privacy question or request, email [email protected].

What data we collect

  • Contact form. Your email address (required) and, if you provide them, your name, company, company size, the services you are interested in and your message.
  • Email. Whatever you include when you write to us directly.
  • Technical data. IP address, browser type, requested pages and timestamps in our server logs, and a pseudonymised visitor record that our CRM links to a form submission.
  • Cookies and similar technologies. See our Cookie Policy.

We do not ask for sensitive data and do not knowingly collect data from children.

Why we use it and on what legal basis

  • To answer your request, prepare a consultation or proposal and manage our business relationship: steps taken at your request before entering into a contract (GDPR Art. 6(1)(b)).
  • To keep the website secure and protect forms from spam and abuse (server logs, Cloudflare, Turnstile): our legitimate interest (Art. 6(1)(f)).
  • To understand how the website is used (Google Analytics 4): only with your consent given in the cookie banner (Art. 6(1)(a)). You can withdraw it at any time.
  • To meet legal obligations, such as accounting records once we work together (Art. 6(1)(c)).

We do not sell your data, do not use it for automated decision-making and do not send you marketing emails unless you have separately agreed to receive them; every such email has an unsubscribe link. For visitors in Ukraine we also process data in line with the Law of Ukraine "On Personal Data Protection".

Who processes data for us

Our website and CRM (Odoo) run on our own server, so your request stays in our own system. We use these service providers:

  • Hetzner Online GmbH (Germany): server hosting in an EU data centre.
  • Cloudflare, Inc. (USA): content delivery, security, bot protection (Turnstile) and cookieless traffic statistics. It processes IP addresses and technical request data.
  • Google Ireland Ltd / Google LLC: Google Analytics 4 and Google Tag Manager (only after your consent) and Google Workspace for our email.

We disclose data to public authorities only where the law requires it.

International transfers

Cloudflare and Google may process data outside the EEA and Ukraine, including in the USA. These transfers rely on the EU-US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses.

How long we keep data

  • Contact requests that do not lead to cooperation: up to 2 years after our last contact, then deleted or anonymised.
  • Client data: for the duration of our cooperation and afterwards for as long as accounting and tax law requires.
  • Server logs: up to 14 days (web server) and about 8 weeks (application).
  • Backups: up to 6 months, then overwritten automatically.
  • Analytics data: according to the retention period set in Google Analytics, at most 14 months.

Your rights

You can ask us to:

  • give you access to your data and a copy of it;
  • correct inaccurate or incomplete data;
  • delete your data;
  • restrict processing, or object to processing based on our legitimate interest;
  • hand over the data you gave us in a portable format;
  • stop analytics: withdraw your consent at any time on the Cookie Policy page.

Write to [email protected]; we reply within 30 days. You may also lodge a complaint with a supervisory authority: in Ukraine, the Ukrainian Parliament Commissioner for Human Rights; in the EU, the data protection authority of your country.

Security

All traffic is encrypted (HTTPS), access to our systems is restricted and key-protected, and backups are encrypted.

Changes to this policy

We update this policy when our website or services change. The date at the top shows the current version.