Privacy policy

Version accepted on 27 October 2026; effective upon publication. Open details are identified below.

Who is responsible and how to contact us

This notice concerns it-premium.com.ua and its enquiry forms, not the authenticated customer portal. Maksym Prokopov operates the website personally under the IT-Premium name and is responsible for processing the personal data described here (the data controller).

For privacy requests, contact [email protected] or +380 44 545 77 32. Correspondence address: IT-Premium, 32H Yevhena Konovaltsia Street, office 5, Kyiv, Ukraine.

Information and purposes

The audit form requires your name, Ukrainian telephone number, email and consent to process the enquiry. Company and a description of your situation are optional. Please do not submit passwords, financial account details, health information or other sensitive data. We receive your language, consent choices, page address and any campaign parameters present when you submit (UTM values and gclid).

These details let us answer your enquiry, discuss services and understand how the enquiry reached us. Submission is voluntary; without required contact details we cannot process the form, but you can contact us directly. Proposed basis for enquiry processing: your consent; steps towards a contract at your request may apply to subsequent correspondence. The separate, unchecked marketing choice is optional and does not determine whether we answer. It records permission for marketing messages, but the form does not itself subscribe you to a list or create an advertising audience. Open detail: approve the processing bases and confirm any intended marketing/remarketing service and withdrawal process.

Technical request identifiers, status, counters and a hash derived from IP address and time window protect against spam and duplicate sends. Proposed basis: legitimate interests in securing the service, subject to applicable law and your rights. The delivery infrastructure processes your IP address; a hash is not a guarantee of anonymity.

Services, recipients and transfers

Audit requests are emailed to the IT-Premium sales mailbox through Amazon Web Services (AWS): API Gateway, Lambda and SES. DynamoDB holds duplicate-prevention records; CloudWatch holds operational logs. The audit backend is configured in Frankfurt, Germany (eu-central-1); this does not establish the location of every provider operation or mailbox copy. The existing PDF proposal sender uses a separate AWS/SendGrid flow and the recipient address entered there.

The website also loads Google Tag Manager, an analytics script from analytics.prokopov.me, Google Maps on the homepage, and external assets such as Font Awesome. Requests to external services can expose network/browser information. Open detail: confirm the hosting providers, analytics operator and settings, access recipients, international transfer arrangements and any additional services activated through Tag Manager.

The sales mailbox uses Google Workspace (Google Groups). No remarketing services are used. To withdraw optional marketing consent, contact [email protected].

Retention

Sales enquiries and related mailbox data have an approved retention period of two years. This is the retention policy, not confirmation that automatic mailbox deletion is configured.

Audit duplicate-prevention records become eligible for automatic deletion after 24 hours; deletion can occur later. Audit application logs are configured for 14-day retention. These technical periods do not delete the sales email or the submitted information in it. Open detail: confirm how the two-year policy applies to backups and approve retention for the separate PDF service and analytics.

Cookies and analytics

The form reads campaign values from the current URL when submitted; it does not persist those values or contact details in browser storage. Its lead event is emitted only after the backend accepts the request and contains form identifiers, not contact fields or free text. This does not establish what other analytics tags collect.

Tag Manager and the site’s analytics script currently load without a consent gate in the inspected templates. The enquiry checkbox is not consent to analytics cookies. Open detail: inventory active tags, cookies, purposes, lifetimes and recipients; verify or implement applicable consent and withdrawal controls. We do not claim analytics is anonymous, cookie-free or blocked until consent. Browser cookie controls alone are not a site consent mechanism.

Your choices and rights

Contact us to ask about your data, request access or correction, object to processing, request deletion or withdraw consent. Where applicable, you can also request restriction or portability. Withdrawing consent does not undo processing already lawfully performed; legal obligations may limit deletion. We may need proportionate information to verify your identity. You can complain to the Ukrainian Parliament Commissioner for Human Rights or another competent authority where applicable. Open detail: confirm the request-handling procedure and applicable response periods.

We will update this notice when the practices described change. Contact us for questions about the open items.