01Who we are (data controller)
The data controller is Arsenii Los, an independent professional registered in Russia under the "professional income tax" regime (self-employed status), trading as veloq lab (tax number / INN: 352532567242).
You can reach us at any time about your data using the contacts at the bottom of this page. We reply to data requests within 30 days.
02What data we collect
We only collect what we actually need. There are no hidden trackers and no data purchased from third parties.
Data you give us in the enquiry form:
- your name, or however you would like to be addressed;
- your contact details — email address, phone number or Telegram username;
- your industry and a short description of the task, if you fill in those fields.
Data collected automatically:
- technical request data handled by our hosting provider (IP address, browser type, date and time of the request), used for security and to keep the site running;
- cookies — see the separate Cookie Policy. Non-essential cookies are only set after you agree to them.
We do not knowingly collect special category data (health, beliefs, biometrics) and we ask you not to include such information in the message field.
03Why we use it, and our legal basis
- To answer your enquiry and prepare a proposal — legal basis: steps taken at your request prior to entering into a contract, and your consent given when you submit the form (Art. 6(1)(b) and 6(1)(a) GDPR).
- To deliver a project you have ordered — legal basis: performance of a contract (Art. 6(1)(b) GDPR).
- To keep the website secure and working — legal basis: our legitimate interest in a functioning, protected website (Art. 6(1)(f) GDPR).
- To understand how the site is used — legal basis: your consent to analytics cookies, which you can withdraw at any time (Art. 6(1)(a) GDPR).
We do not send marketing emails without a separate opt-in, and we do not make automated decisions that produce legal effects for you.
04Who we share it with
We never sell or rent your data. We share it only with the service providers we need in order to reply to you:
- Telegram (Telegram Messenger Inc.) — your enquiry is delivered to our team through a Telegram bot, and any further conversation you start there takes place on Telegram's infrastructure under Telegram's own privacy policy;
- Vercel Inc. — hosting and delivery of this website, including standard server logs;
- Google LLC — web fonts and icon delivery from a CDN when the page loads.
We may also disclose data where we are legally required to do so.
05International transfers
We operate from Russia and use providers based outside the European Economic Area and the United Kingdom, including in the United States. This means your data will be transferred outside the EEA/UK, including to a country that has not received an EU adequacy decision.
We keep such transfers to the minimum needed to reply to you, transmit data over encrypted connections, and rely on your explicit consent for the transfer when you submit the form (Art. 49(1)(a) GDPR). If you would rather not have your data transferred this way, please contact us directly instead of using the form.
06How long we keep it
- enquiries that do not lead to a project — up to 12 months from our last contact, then deleted;
- data related to a project we delivered — for the duration of the engagement and up to 3 years afterwards, to handle warranty, accounting and legal questions;
- cookie preferences — up to 12 months, or until you clear them in your browser.
If you withdraw your consent or ask us to erase your data, we delete it earlier, except where we are legally required to keep specific records.
07Your rights
Subject to applicable law, you have the right to:
- be told what personal data we hold about you and receive a copy of it (access);
- have inaccurate data corrected (rectification);
- have your data deleted (erasure / "right to be forgotten");
- ask us to restrict processing, or object to processing based on legitimate interest;
- receive your data in a portable, machine-readable format (portability);
- withdraw consent at any time — including cookie consent, which you can change through the "Cookie settings" link in the footer;
- lodge a complaint with your local data protection authority if you believe we have handled your data unlawfully.
Exercising these rights is free of charge. Just write to us using the contacts below.
08How we protect your data
The site is served over HTTPS, access credentials for the enquiry channel are stored in server-side environment variables rather than in the website code, and only the people who need the data in order to reply to you can see it. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your information against unauthorised access, alteration or loss.
09Children
This website and our services are intended for business use by adults. We do not knowingly collect data from children. If you believe a child has sent us personal data, contact us and we will delete it.
10Changes to this Policy
We may update this Policy as our services or the applicable rules change. The current version is always published on this page with the date it was last updated. If a change materially affects your rights, we will highlight it on the website.