Privacy Policy


Version 1.0 (as of 01 February 2026)

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Sofiia Dubinina
Email: sofiia@dubinina.de
Website: https://dubinina.de


2. General Information on Data Processing

The protection of your personal data is of great importance to me. I process personal data exclusively in accordance with the GDPR, the German Federal Data Protection Act (BDSG), and the Telecommunications-Telemedia Data Protection Act (TTDSG).

This website serves solely to present my person and my professional qualifications (online cv / personal portfolio) and does not pursue any commercial purposes. Only such personal data is processed as is technically necessary or required for contacting me.


3. Data Protection Officer

A data protection officer has not been appointed, as there is no legal obligation pursuant to Article 37 GDPR and no extensive processing of special categories of personal data takes place.


4. Collection and Processing of Personal Data

a) Visiting the Website (Server Log Files)

When accessing this website, the hosting provider automatically collects the following technical data:

  • IP address (shortened or anonymized where technically possible)
  • Date and time of access
  • Name and URL of the retrieved file
  • Referrer URL
  • Browser type and version
  • Operating system

Purpose of processing:
Ensuring the stable and secure operation of the website as well as technical error analysis.

Legal basis:
Article 6(1)(f) GDPR (legitimate interest)

Storage period:
Server log files are deleted no later than 30 days after collection.


b) Contact via Contact Form or Email

When contacting me, the personal data you provide (e.g., Name, Email Address, Phone Number, Message, Selected Contact Category) is processed exclusively for the purpose of handling your request.

Providing personal data is voluntary. However, without this information, it is not possible to process your inquiry.

Purpose:
Processing your request and personal communication.

Legal basis:

  • Article 6(1)(b) GDPR (pre-contractual communication)
  • Article 6(1)(a) GDPR (voluntary contact)

Consent to the processing of the transmitted data is documented in order to comply with the legal documentation requirements pursuant to Article 7 GDPR.

Retention period:
Personal data will be deleted once your request has been fully processed, but no later than 12 months after processing.


5. Use of Local Storage (Functional Settings)

This website uses Local Storage exclusively for storing functional settings, in particular:

  • the selected language of the website
  • the selected display option (e.g. color scheme)

The storage serves solely to ensure a user-friendly presentation of the website and allows the selected settings to be retained during a subsequent visit.

There is no analysis of user behavior, no tracking, no profiling, and no disclosure of the stored information to third parties.

No systematic monitoring of users takes place.

Legal basis:

  • Section 25(2) No. 2 TTDSG
  • Article 6(1)(f) GDPR (legitimate interest)

6. Cookies

This website does not use cookies. In particular, no analytics, marketing, or tracking cookies are used.


7. External Services and Third-Party Providers

No external services or third-party content are currently integrated on this website. In particular, no analytics, marketing, or social media services are used.


8. Links to Social Networks

This website contains only simple links to profiles on social networks (e.g. Facebook, Instagram, Twitter / X).

When clicking on such a link, you will be redirected to the respective external platform. Only from that point onward does the processing of personal data by the respective provider take place.

I have no influence over the nature, scope, and purpose of data processing by the operators of the social networks.

Further information on the processing of personal data can be found in the respective privacy policies of the providers.


9. Hosting

This website is hosted by:

Privatne pidpryiemstvo “Rulez”
03110, Ukraine
Kyiv, Preobrazhenska Street 23,
Building A, Office 208

Website: https://redo.ua
Further information can be found in REDO’s privacy policy: https://redo.ua/conf_policy

Type and Scope of Data Processing: As part of the hosting, personal data is processed that is technically necessary when accessing the website. This includes, in particular:

  • IP address
  • Date and time of access
  • Name and URL of the retrieved file
  • Referrer URL
  • Browser type and version
  • Operating system

This data is processed exclusively for the purpose of providing, maintaining, and securing the website.

Transfer to Third Countries: Processing takes place on servers in Ukraine, a third country without an EU adequacy decision under Art. 45 GDPR. It cannot be ruled out that public authorities in the third country may access personal data without effective legal remedies being available.

Legal Basis:

  • Art. 6(1)(f) GDPR (legitimate interest in the technical provision, stability, and security of the website)

Measures to Protect Data Subjects:

  • Processing only of technically necessary data
  • No creation of user profiles
  • No disclosure of data to third parties for commercial purposes
  • Anonymization of IP addresses, where technically possible

Note: The processing of personal data as part of hosting is technically necessary to provide the website. Therefore, using the website without this data processing is not possible.

Automated Decision-Making: Automated decision-making or profiling pursuant to Art. 22 GDPR does not take place.


10. SSL or TLS Encryption

For security reasons and to protect the transmission of confidential content, this website uses SSL or TLS encryption. This applies in particular to inquiries you send to me via the contact form.

An encrypted connection can be recognized by the change in the browser’s address bar from “http://” to “https://” and by the lock icon in your browser bar.

If SSL or TLS encryption is activated, the data you transmit to me (e.g., name, email address, telephone number, subject, and message content) cannot be read by unauthorized third parties.


11. Rights of Data Subjects

You have the right to:

  • Access (Article 15 GDPR)
  • Rectification (Article 16 GDPR)
  • Erasure (Article 17 GDPR)
  • Restriction of processing (Article 18 GDPR)
  • Data portability (Article 20 GDPR)
  • Withdrawal of consent (Article 7(3) GDPR)
  • Lodging a complaint with a supervisory authority (Article 77 GDPR)

To exercise your rights, please send an Email to sofiia@dubinina.de.


12. Competent Supervisory Authority

Competent data protection supervisory authority:
The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg


13. Changes to this Privacy Policy

This privacy policy may be amended to reflect legal or technical changes.
The current version of this privacy policy shall apply. Version 1.0, as of 01 February 2026.