Imprint (Impressum)

Provider information pursuant to Section 5 of the German Digital Services Act (DDG)

Yuliya Hancharova
Sole proprietor — Einzelunternehmen
Hermannstr. 39
41460 Neuss
Germany

Contact

Telephone: +49 1523 8584081
Email: yuliya@hancharova.com

Responsible for editorial content

Yuliya Hancharova
Hermannstr. 39
41460 Neuss
Germany

Liability for content

As the service provider, I am responsible for my own content on this website in accordance with applicable law.

I am not generally required to monitor third-party information that is transmitted or stored through this website or to investigate circumstances indicating unlawful activity. Obligations to remove or restrict access to information under applicable law remain unaffected.

If I become aware of a specific legal infringement, I will remove or restrict access to the affected content without undue delay.

External links

This website may contain links to websites operated by third parties. The respective third-party provider is responsible for the content and operation of its website.

External websites were checked for apparent legal infringements when the links were added. Continuous monitoring is not reasonable without specific indications of an infringement. If I become aware of unlawful content, I will remove the affected link without undue delay.

Copyright

Unless otherwise stated, the content and works created for this website are protected by German copyright law.

Reproduction, editing, distribution or other use outside the limits permitted by copyright law requires the prior consent of the relevant rights holder. Downloads and copies are permitted only for private, non-commercial use unless expressly stated otherwise.

Where content was not created by me, third-party rights are respected and the relevant source or rights holder is identified where appropriate. Please contact me if you believe that content on this website infringes your rights.

Privacy Policy

1. Controller

The controller responsible for processing personal data in connection with this website is:

Yuliya Hancharova
Sole proprietor — Einzelunternehmen
Hermannstr. 39
41460 Neuss
Germany

Telephone: +49 1523 8584081
Email: yuliya@hancharova.com

The controller determines the purposes and means of processing personal data through this website.

2. Scope of this privacy policy

This privacy policy explains how personal data is processed when you:

• visit hancharova.com;
• activate a video provided through Vimeo;
• contact me by email or telephone; or
• follow a link to an external website.

Personal data is any information relating to an identified or identifiable natural person. Examples include a name, email address, telephone number, IP address and device or browser identifiers.

This website does not provide public user accounts, comments, a newsletter, an online shop or a visitor-facing contact form.

3. Website hosting and server log files

This website is hosted by:

STRATO GmbH
Otto-Ostrowski-Straße 7
10249 Berlin
Germany

When you access this website, your browser automatically transmits technical data to the hosting server. This may include:

• the IP address of your device;
• the date and time of access;
• the requested page or file;
• the referring page;
• the amount of data transferred;
• browser type and browser version;
• operating system;
• hostname; and
• the HTTP status code.

This information is processed to deliver the website, maintain its stability and security, diagnose technical errors and detect or prevent attacks and misuse.

The legal basis is Article 6(1)(f) GDPR. My legitimate interests are the secure, reliable and technically functional provision of this website and the protection of the website and its visitors against attacks.

STRATO states that visitor IP addresses used for detecting and preventing attacks are retained for no longer than seven days, unless longer storage is required to investigate a particular security incident.

STRATO acts as a processor under Article 28 GDPR. A data-processing agreement is maintained with STRATO where required.

4. WordPress

This website uses the self-hosted WordPress content-management system.

WordPress is used to create, manage and display the website content. Ordinary visitors cannot create accounts, log in, publish comments or access the website’s administrative area.

Administrative login and security functions may process technical information or place login cookies when the website administrator signs in. These functions are not used to track ordinary website visitors.

The legal basis for processing personal data necessary to operate and secure WordPress is Article 6(1)(f) GDPR. My legitimate interest is the secure and efficient management of the website.

5. Cookies and similar technologies

This website does not use separate advertising, retargeting or behavioural-profiling cookies.

Strictly necessary storage or access may be used where required to transmit the website, protect it against attacks or provide a function expressly requested by the visitor. Such storage or access is based on Section 25(2) TDDDG. Related processing of personal data is based on Article 6(1)(f) GDPR unless another legal basis is stated below.

Optional Vimeo content is blocked by default. A connection to Vimeo is established only after you actively select the button to load the relevant video.

No general marketing-cookie banner is used because Vimeo is controlled separately at video level and no other non-essential visitor technology is intended to operate before consent. This must be reassessed whenever the website theme, plugins or external services are changed.

6. Vimeo videos

6.1 Provider and purpose

This website presents portfolio videos using the Vimeo video service provided by:

Vimeo.com, Inc.
330 West 34th Street, 10th Floor
New York, NY 10001
United States

Vimeo’s EU/EEA representative is the European Data Protection Office, Avenue Huart Hamoir 71, 1030 Brussels, Belgium.

Vimeo is used to make video portfolio material available in a reliable and technically suitable player.

6.2 Click-to-load implementation

Vimeo videos are not loaded automatically.

Before activation, the website displays a locally hosted preview or placeholder. The Vimeo iframe and other Vimeo resources are inserted only after you select the button marked “Load Vimeo video” or equivalent wording.

By selecting that button, you consent to:

• establishing a connection to Vimeo;
• transmitting personal data to Vimeo and its service providers;
• storage of or access to information on your device where performed by the Vimeo player; and
• possible processing of data in the United States and other countries outside the European Economic Area.

The Vimeo player is configured with the dnt=1 parameter. This limits the creation of certain Vimeo analytics cookies but does not prevent all data processing.

6.3 Data processed

When you activate a Vimeo video, Vimeo may receive or process information including:

• your IP address;
• approximate location derived from the IP address;
• browser type and browser settings;
• operating system and device information;
• the page from which the video was activated;
• the video identifier;
• date and time of the request;
• playback and player interactions;
• security and diagnostic information; and
• Vimeo cookies already stored in your browser.

Depending on Vimeo’s processing and account settings, Vimeo may provide me with aggregated or statistical information about video playback. I do not use such information to create individual visitor profiles.

6.4 Cookies and device access

According to Vimeo, use of the DNT parameter does not prevent a browser from sending Vimeo cookies that were stored during an earlier visit to Vimeo or another website using Vimeo.

Vimeo also states that the following security cookies may be set when DNT mode is active:

• player_clearance, for bot prevention, normally for up to seven days;
• cf_clearance, for bot prevention, normally for up to one year;
• _cf_bm, for bot-management purposes, normally for approximately 30 minutes; and
• _cfuvid, for rate limiting, normally for the browser session.

These cookies and related technologies are operated by Vimeo and its security or infrastructure providers, including Cloudflare where applicable.

6.5 Legal basis

Before you activate a video, no Vimeo content is intended to load.

The legal basis for loading Vimeo and processing personal data following activation is your consent under Article 6(1)(a) GDPR.

Where Vimeo stores information on or accesses information from your device, the legal basis is your consent under Section 25(1) TDDDG.

Consent is voluntary. You can use the remainder of the website without activating Vimeo videos.

Where activation applies only to an individual video or page visit, you can prevent future loading by not activating further videos or by reloading the page. Where a persistent consent setting is offered, consent can be withdrawn through the website’s privacy or consent settings.

Withdrawal applies to future processing. It cannot reverse information that was transmitted before consent was withdrawn.

6.6 Recipients

Recipients of information transmitted when a video is activated may include:

• Vimeo.com, Inc.;
• Vimeo affiliates;
• Vimeo’s hosting, content-delivery, security, analytics, support and technical service providers;
• Cloudflare or comparable infrastructure and security providers used by Vimeo; and
• public authorities where disclosure is required by applicable law.

Vimeo acts as an independent controller for processing carried out through its embedded player.

6.7 International transfers and safeguards

Vimeo is based in the United States and states that it uses computer systems, servers and databases in the United States and other countries.

Vimeo states that transfers from the European Economic Area may be based on the EU–US Data Privacy Framework where applicable and that Standard Contractual Clauses are used where appropriate.

For embedded-player processing not covered by an adequacy decision, controller-to-controller Standard Contractual Clauses have been concluded with Vimeo. These clauses are intended to provide contractual safeguards under Article 46 GDPR.

Information about the relevant safeguards or a copy of them may be requested using the controller contact details in Section 1. Commercially confidential content may be redacted where legally permitted.

Despite these safeguards, processing in the United States may involve risks because authorities may have access to personal data under US law and EU data-subject rights may not be enforceable to the same extent as within the European Union.

6.8 Storage

I do not determine the storage periods applied independently by Vimeo and its service providers.

Vimeo states that it retains automatically collected logs and other information while it has a business or legal reason to do so and subsequently deletes or anonymises the information. Cookie periods known for the DNT player are described above.

Further details are available in Vimeo’s Privacy Policy, Cookie Policy and Vimeo Player Cookies documentation.

7. Analytics, advertising and profiling

No separate Google Analytics, Meta Pixel, advertising, retargeting, heatmap, session-recording or visitor-fingerprinting service is currently intended to operate through this website.

Hosting log files and aggregated hosting statistics may nevertheless be produced for security, technical operation and general traffic evaluation. I do not combine those statistics with other information to identify individual visitors or create advertising profiles.

Vimeo carries out its own processing after a visitor activates a Vimeo video, as described in Section 6.

No automated decision-making or profiling within the meaning of Article 22 GDPR is carried out by me through this website.

8. Contact by email

You may contact me using the email address displayed on this website.

When you send an email, I process the information you provide, which may include:

• your name;
• your email address;
• the content of your message;
• information about your organisation, project or request;
• documents or files you attach; and
• other information you choose to provide.

The information is used to read, answer and manage your request.

Where your message concerns steps before entering into a contract or an existing contractual relationship, the legal basis is Article 6(1)(b) GDPR.

For other professional enquiries, the legal basis is Article 6(1)(f) GDPR. My legitimate interest is responding to enquiries and conducting professional communication.

Email correspondence is deleted when it is no longer necessary for the relevant purpose, unless continued retention is required by statutory record-keeping obligations or for the establishment, exercise or defence of legal claims.

Your email address is not added to a newsletter or marketing list merely because you contact me.

Please do not send special-category, highly confidential or security-sensitive information by unencrypted email.

9. Contact by telephone

If you contact me by telephone, I may process your name, telephone number, the date and time of the call and information you provide during the conversation.

This information is used to respond to and manage your enquiry.

Where the call concerns steps before entering into a contract or an existing contract, the legal basis is Article 6(1)(b) GDPR. For other professional enquiries, the legal basis is Article 6(1)(f) GDPR.

Telephone calls are not recorded.

10. External links

This website may contain ordinary links to websites operated by third parties.

When you select an external link, you leave this website. The third-party operator may then process information such as your IP address, browser information and referring-page information.

An ordinary external link does not normally establish a connection to the third-party provider until you select it. This is different from activated or automatically embedded third-party content.

I do not control the processing carried out by external websites. Please review the privacy information of the relevant provider.

11. Other recipients

In addition to the recipients specifically described above, personal data may be disclosed where necessary to:

• website hosting and IT-maintenance providers;
• professional advisers such as lawyers or tax advisers;
• public authorities, courts or law-enforcement bodies where disclosure is legally required; or
• establish, exercise or defend legal claims.

Personal data is not sold or rented to third parties.

12. Storage periods

Unless a specific period is stated in this privacy policy, personal data is retained only for as long as necessary for the relevant purpose.

Data may be retained for longer where required by statutory record-keeping obligations or where necessary to establish, exercise or defend legal claims.

When no further legal basis for retention exists, the information is deleted or anonymised.

13. Your rights

Subject to the applicable legal requirements, you may have the following rights:

• the right of access under Article 15 GDPR;
• the right to rectification under Article 16 GDPR;
• the right to erasure under Article 17 GDPR;
• the right to restriction of processing under Article 18 GDPR;
• the right to data portability under Article 20 GDPR;
• the right to object under Article 21 GDPR; and
• the right to withdraw consent at any time with effect for the future.

Where processing is based on Article 6(1)(f) GDPR, you may object for reasons arising from your particular situation.

To exercise your rights, use the contact information in Section 1.

14. Right to lodge a complaint

You have the right to lodge a complaint with a data-protection supervisory authority under Article 77 GDPR.

The supervisory authority responsible for North Rhine-Westphalia is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Kavalleriestraße 2–4
40213 Düsseldorf
Germany

Telephone: +49 211 38424-0
Email: poststelle@ldi.nrw.de

You may also contact the supervisory authority responsible for your habitual residence, place of work or the place of the alleged infringement.

15. Data security

This website uses encrypted HTTPS communication through SSL/TLS.

Appropriate technical and organisational measures are used to protect personal data against accidental or unlawful loss, alteration, disclosure, destruction or unauthorised access.

Complete security of information transmitted through the internet cannot be guaranteed.

16. Changes to this privacy policy

This privacy policy may be updated when the website, its technical configuration, the providers used or applicable legal requirements change.

The version published on this website applies at the time of your visit.