1. Data controller
The data controller is the person or entity operating under the ArieDev brand through ariedev.online.
Private channels for privacy-related communications are provided in the applicable contractual documents or formal communications relating to the relevant professional relationship. This public website intentionally does not publish direct contact details.
This Privacy Policy describes processing carried out through ariedev.online and in connection with commercial enquiries and professional engagements. It must be updated if the actual tools or processing activities change.
2. Categories of personal data processed
Browsing data
Systems and procedures used to operate the website may process IP address, request date and time, requested page, browser and device information, response codes, and technical data necessary for security, diagnostics, and service operation.
Data provided voluntarily
When a person communicates with ArieDev through a private channel, information such as name, email address, telephone number, organization, message content, project requirements, attachments, and any other voluntarily supplied information may be processed.
Contractual and administrative data
For active engagements, identification and tax information, addresses, representatives, invoices, payments, communications, technical credentials, and information necessary to perform the project may be processed.
Do not provide special-category, health, biometric, criminal-offence, or other highly sensitive data unless genuinely necessary and specifically agreed. Projects requiring such data should be governed by appropriate additional terms.
3. Purposes and legal bases
- Responding to enquiries and preparing proposals: steps requested before entering into a contract.
- Providing services and managing the relationship: performance of a contract.
- Billing, accounting, and regulatory obligations: compliance with legal obligations.
- Security, abuse prevention, and protection of legal rights: legitimate interests in protecting systems, infrastructure, users, and legal position, subject to applicable balancing requirements.
- Promotional communications: consent where required or another lawful basis where permitted, with applicable opt-out rights.
- Non-essential cookies or tracking tools: consent where such tools are installed and consent is required.
4. Nature of providing data
Providing information that is necessary to evaluate a request or perform a contract is required for those purposes. Failure to provide it may prevent the Provider from assessing the request, entering into the engagement, or delivering the service.
Consent for optional purposes, such as non-essential marketing, is voluntary and may be withdrawn without affecting services already requested, subject to applicable law.
5. Processing methods and security
Personal data is processed using digital systems and, where necessary, paper records in accordance with principles of lawfulness, fairness, transparency, minimization, purpose limitation, and storage limitation. Access is limited to authorized persons and necessary service providers.
Reasonable technical and organizational measures are used in proportion to risk. No internet-connected system can be guaranteed absolutely secure. Clients are responsible for protecting credentials and communication channels and for promptly reporting suspected compromise.
6. Retention periods
- unconverted enquiries: normally up to 12 months unless longer retention is justified for legal defence or another lawful basis;
- contractual and administrative records: for the relationship and afterwards for periods required by tax, accounting, contractual, or legal obligations, commonly up to 10 years where applicable;
- technical and security logs: only for as long as reasonably necessary for operation, diagnosis, fraud prevention, and security, normally from a few days up to 12 months depending on the system and risk;
- consent-based marketing: until consent is withdrawn or for the retention period specified when consent was collected.
Data may be retained longer where required for disputes, investigations, legal obligations, or the establishment, exercise, or defence of legal claims.
7. Recipients and processors
Where necessary, data may be disclosed to hosting, cloud, email, support, accounting, payment, security, development, legal, tax, or other professional service providers, and to competent authorities where legally required.
Providers processing personal data on behalf of the controller are appointed as processors where required. Information about relevant processors may be requested through the private channel formally communicated to the data subject.
Personal data is not made public unless disclosure is based on consent, a legal requirement, or the data subject’s own decision to publish it.
8. Transfers outside the European Economic Area
Some technology providers may process data outside the European Economic Area. Where required, appropriate safeguards may include adequacy decisions, standard contractual clauses, supplementary measures, or another lawful transfer mechanism under the GDPR or other applicable law.
The actual locations and safeguards for hosting, cloud services, analytics, embedded services, and other tools should be reviewed whenever the site infrastructure changes.
10. Data subject rights
Where the GDPR or similar law applies, a data subject may have rights of access, rectification, erasure, restriction, portability, objection to processing based on legitimate interests, and withdrawal of consent. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
Requests may be submitted through the private written channel formally communicated within the relevant relationship. Reasonable information may be requested to verify identity before acting on a request.
A data subject may also lodge a complaint with the competent data protection supervisory authority, without prejudice to any other available remedy.
11. Minors and automated decision-making
The professional services are not directed at children. Personal data relating to minors is not knowingly collected without an appropriate lawful basis and any required authorization.
Unless specifically disclosed otherwise, no decisions are made solely by automated processing that produce legal or similarly significant effects on an individual.
12. Updates to this Privacy Policy
This policy may be updated to reflect legal, technical, or organizational changes. The version published on the website shows the latest update date. Material changes will be communicated in an appropriate manner where required.
Privacy-related communications are handled through the private channels formally provided to the relevant counterparty or data subject.