Privacy Policy

This page explains what personal data I process on artemn.com and in my private projects, why I process it, and what rights you have. In short: no analytics, no ads, no tracking, and I don’t sell data.

Who is responsible

Artem Negri
Esslinger Hof 4, 70372 Stuttgart, Germany
E-mail: artem.negri@gmail.com

I am the controller under the EU General Data Protection Regulation (GDPR) for everything described here.

What this policy covers

• This website, artemn.com, and its subdomains.
• My private projects: apps, bots and tools that I build and run only for myself and the people closest to me. They are not public services and are not sold. Any project that links to this page is covered by it.

Visiting this website

Server logs. The site runs on a server rented from Hetzner Online GmbH in Germany. Like any web server, it records each request: your IP address, date and time, the page requested, the HTTP status, the amount of data sent, the referring page and your browser’s user agent. I use these logs to deliver the site, keep it secure and fix errors. Legal basis: my legitimate interest in running a secure website (Art. 6(1)(f) GDPR). Logs are deleted automatically after 15 days at the latest.

No cookies, no tracking. The site sets no cookies and uses no analytics, advertising or tracking tools. It has no comments and no contact forms.

External links. Links to LinkedIn, Xing, GitHub, Stack Overflow and other sites are plain links. Nothing is sent to those sites unless you click one. After that, their own privacy policies apply.

E-mail. If you write to me, I use your address and message only to reply. My mailbox is provided by Google (Gmail), so Google processes e-mails sent to me. I delete correspondence once it is no longer needed, unless the law requires me to keep it. Legal basis: Art. 6(1)(b) or (f) GDPR, depending on what you write about.

My private projects

What data. Each project collects only what it needs to work. Depending on the project, this can be:

• your account details from the sign-in provider: name, e-mail address, profile picture and user ID;
• data from a service you choose to connect, such as calendar events, e-mails or files, limited to the permissions you grant;
• content you enter in the project or send to it, such as messages to a bot;
• technical logs, as described for the website above.

Sign-in and connected services. Projects may use Google, Apple, Microsoft, GitHub or Telegram for sign-in, or to access data on your behalf. Before you grant access, the provider shows you which permissions the project asks for. A project asks only for the permissions its features need and uses the data only for those features. Access tokens are stored on the server and used only for requests you enabled.

Telegram bots. Messages you send to my bots pass through Telegram’s servers. A bot receives your Telegram user ID, name, username and the messages you send it. For Telegram’s part, Telegram’s privacy policy applies.

Where data is stored. Unless a project says otherwise, its data is stored on my server at Hetzner in Germany.

What I don’t do. I don’t sell data, show ads, build advertising profiles, or share data with anyone beyond the providers named on this page that are needed to run a project. I don’t make automated decisions that have legal or similarly significant effects on you.

Legal basis. Providing a project you asked to use (Art. 6(1)(b) GDPR), and your consent when you grant access to an account (Art. 6(1)(a) GDPR). You can withdraw consent at any time. Withdrawal doesn’t affect processing that happened before it.

How long. I keep project data while you use the project. When you ask me to delete it, revoke the project’s access, or I shut the project down, I delete your data within 30 days, unless the law requires me to keep it.

Revoking access. You can remove a project’s access at any time:

• Google: myaccount.google.com/permissions
• Apple: account.apple.com, under Sign-In and Security → Sign in with Apple
• Microsoft: account.live.com/consent/Manage
• GitHub: github.com/settings/applications
• Telegram: stop and block the bot

Or e-mail me, and I’ll delete your data.

Google user data

This section applies when a project accesses data through Google APIs.

The use and transfer of information received from Google APIs to any other app by my projects will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• Google user data is used only to provide or improve features you can see and use in the project.
• It is not transferred to anyone else, except as needed to provide those features, for security purposes, or to comply with the law.
• It is not used or sold for advertising, including personalised ads, and not used to determine creditworthiness or for lending.
• No person reads it, unless you give explicit consent for specific data, it is needed for security purposes such as investigating abuse, or the law requires it.
• It is not used to develop, improve or train generalised artificial intelligence or machine learning models.

Your rights

Under the GDPR you have the right to:

• access the data I hold about you (Art. 15);
• have it corrected (Art. 16) or deleted (Art. 17);
• restrict its processing (Art. 18);
• receive it in a portable format (Art. 20);
• object to processing based on legitimate interest (Art. 21);
• withdraw consent at any time (Art. 7(3)).

To use any of these rights, e-mail me at artem.negri@gmail.com. You can also complain to a data protection authority. Mine is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg.

Changes

I update this page when the site or my projects change. The date at the top shows when it was last changed.