Privacy policy
This policy describes how Свої handles your data. We collect as little as possible and never sell it.
What we process
Depending on how you use Свої we process: for the waitlist, your email, role (specialist or client), city, chosen category, interface language and the moment you consented; for a provider account, your name, email, a hashed password and the profile details you enter; for a booking request, the name, contact and note you provide; for an abuse report, your message, an optional email and a one-way hash of your IP address and the date. For analytics we count views and contacts per provider using a daily-rotating, non-reversible hash derived from your IP address and browser, with no cookies, no storage of the raw IP and no way to identify you.
What we do not do
We show no advertising, use no advertising pixels and no ad networks, and build no profile about you for advertising or resale. Fonts and map tiles are served from our own servers, so no request leaves for an outside provider unless you have consented to one. We never sell or rent your data.
Cookies and your consent
Свої sets three cookies of its own, all of them necessary: a session cookie and a form-protection token while you are signed in or submitting a form, and one that records your cookie choice so you are not asked again. These require no consent (§ 25(2) TDDDG). Anything beyond them, at present only Google Analytics, is set only after you have agreed, on the basis of that consent (§ 25(1) TDDDG and Art. 6(1)(a) GDPR). Declining takes one click and costs you nothing, the site behaves identically either way. You can change or withdraw your choice at any time with the button below or the link in the footer of any page. Withdrawal takes effect from that moment on and does not affect the lawfulness of what happened before it.
Google Analytics
If you consent, we use Google Analytics 4, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It sets the cookies listed in the cookie settings and sends Google data about your use of the site: which pages you open, an approximate location derived from a shortened IP address, your device and browser, and a randomly generated identifier. We use it for one purpose, to see which parts of the directory are worth keeping and which are not. Google acts as our processor under Art. 28 GDPR and also processes the data for its own purposes, and data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework, for which the European Commission issued an adequacy decision on 10 July 2023, and standard contractual clauses apply in addition, but authorities in the USA may nonetheless be able to access this data. The advertising features are switched off: ad storage, ad personalisation and ad user data stay denied, we run no advertising and we pass the data to no ad network. Google deletes the user and event data after the period set in our account, at most 14 months. The legal basis is your consent alone, which you may withdraw at any time with effect for the future. Google's own information: https://policies.google.com/privacy
Sharing and third parties
Two service notifications are sent to our closed Telegram group so that the team can respond quickly: one about a new specialist registration and one about a new complaint. These messages pass through Telegram (Telegram FZ-LLC) and may be processed outside the EU. In order to display a specialist's profile and their job postings in several languages, we translate the text entered by the specialist (title, description and job posting details) using the Claude service of Anthropic PBC in the USA. Anthropic acts as our processor under Art. 28 GDPR on the basis of a data processing agreement incorporating Standard Contractual Clauses (SCC) and does not use this text to train its models; in doing so, data is transferred to the USA. The legal basis is our legitimate interest in a multilingual directory (Art. 6(1)(f) GDPR). Beyond the processors and third-country transfers named in this policy, we do not engage any others.
Legal basis
Waitlist: your consent (Art. 6(1)(a) GDPR). Accounts and bookings: performance of a contract or steps taken at your request (Art. 6(1)(b)). Analytics, security and handling reports: our legitimate interest in a safe, working service (Art. 6(1)(f)).
Where and how long
The data we store ourselves is held on servers within the European Union. We keep it only as long as needed for the purpose above, or until you ask us to delete it; waitlist entries are removed at the latest once the launch email has been sent and you unsubscribe.
Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and to withdraw consent at any time, as well as the right to lodge a complaint with a data-protection supervisory authority. To exercise any of these, email us at the address below. Deletion is carried out without asking for a reason.
Contact
Controller and contact for data matters: Yehor Hromov, Friesenstr. 65, 71640 Ludwigsburg, Germany. Email: hi@svoyi.net