Privacy / Plain language
Clear contact handling.
Optional analytics.
This notice explains how shurkalin.com handles messages you choose to send and its limited Google Analytics 4 setup. The site does not load GA4 until you choose “Allow analytics.”
Controller & contact
The controller for personal data handled through shurkalin.com is Nikolay Shurkalin, Warsaw, Poland. For privacy questions or requests, email [email protected].
Messages you send
If you email me, prepare an inquiry through an intake page, or use the direct message form, I use the name, email address, company context, intent, and message you provide to respond, assess fit, and discuss a possible engagement or professional opportunity. The legal basis is taking steps at your request before a possible contract under Article 6(1)(b) GDPR and my legitimate interest in handling relevant professional inquiries under Article 6(1)(f) GDPR. The separate engagement intake pages prepare their messages in your browser and do not send them automatically.
Direct form delivery
The direct message form sends the fields you enter to a Cloudflare Pages Function. Cloudflare also processes the technical request information needed to deliver and protect the form. A server-side Cloudflare Turnstile check helps reject automated abuse. After successful verification, the function forwards your name, email address, selected intent, message, page path, time, and a random request reference to my private Telegram cloud chat. It does not copy your IP address, browser details, credentials, or analytics identifiers into the Telegram message, and the site does not keep a separate submissions database.
Contact providers & retention
Cloudflare provides site hosting, form execution, and abuse verification. Telegram receives and stores direct-form messages in my private cloud chat. Google provides the Gmail infrastructure used for email correspondence. These providers may process data outside the European Economic Area under their published terms and safeguards. I keep inquiry correspondence only while it is needed to respond, decide whether to work together, continue an agreed relationship, meet legal obligations, or establish or defend legal claims. Messages that are no longer needed for those purposes are deleted.
Purpose & legal basis
If you allow analytics, I use GA4 to understand which pages and offers are useful, how visitors reach the site, and whether selected site actions work. The legal basis is your consent under Article 6(1)(a) GDPR. Refusing or withdrawing consent does not limit access to the site. I do not use this data for advertising, automated decisions, or cross-site personalization.
Data processed
GA4 may process page views, traffic source, approximate location, device and browser category, selected actions such as opening an offer, completing the Architecture Decision Map and its recommended route, or choosing a contact method, first-party cookie identifiers, and technical request data. The site does not send individual Decision Map answers, form contents, names, email addresses, or other free-text form data to GA4. Advertising storage, advertising user data, Google Signals, and ad personalization are disabled.
Google & transfers
Google Ireland Limited and its authorized subprocessors provide GA4 as a processor. Data may be processed outside the European Economic Area, including in the United States. Google describes the safeguards it uses for international transfers in its data transfer frameworks and data processing terms.
Retention
First-party GA4 cookies on this site are configured to expire 60 days after they are first set and are not extended on each visit. User-level and event-level data in the GA4 property is intended to use Google’s shortest available retention setting, currently 2 months. Standard aggregated reports may remain available for longer under Google’s service operation. Your consent preference stays in this browser until you change it or clear site data.
Your choice
The GA4 tag is not loaded until you select “Allow analytics.” If you decline, it is not loaded. You can reopen “Analytics settings” at the bottom of any page and withdraw consent at any time. The site then marks analytics storage as denied, stops its own tracked events, and does not load GA4 on the next page. Withdrawal does not affect processing that occurred while consent was active.
Your rights
Where applicable, you may request access, correction, deletion, restriction, or portability of personal data by using the contact above. You may also lodge a complaint with Poland’s Personal Data Protection Office or another competent supervisory authority.