Legal
Privacy Notice
Last updated: 3 August 2026
This site is a static CV. It has no accounts, no forms, no comments, no shopping cart and no analytics. It sets no cookies at all, and it loads nothing from a third-party server — no fonts from a CDN, no embedded videos, no trackers. In practical terms, browsing it tells me nothing about you beyond what the web server unavoidably writes to its log.
Who is responsible
The controller for the processing described here is Oleksandr Subtselnyi, acting in a personal capacity, 02600 Espoo, Finland. This site is not operated by BARADATA Oy; see the Imprint for full provider details.
Contact for any privacy question or request: alex.subtselnyi@baradata.com. No Data Protection Officer is appointed; none is required at this scale of processing.
What is stored on your device
One item, and it never leaves your browser:
| Name | Type | Purpose | Expires |
|---|---|---|---|
subtselnyi-theme |
localStorage | Remembers whether you chose the light or the dark colour scheme, so the site does not flip back on your next visit. Written only when you use the theme switch. | Until you clear your browser storage |
It holds the literal text light or dark. It contains no
identifier, it is never transmitted to me or to anyone else, and it cannot be used to
recognise you. Because it exists solely to deliver a setting you asked for, it is exempt
from the consent requirement in Article 5(3) of the ePrivacy Directive — which is why
this site shows you no cookie banner. You can delete it at any time through your browser
settings, and the site will simply follow your operating system's colour scheme again.
What the server records
Like every web server, the host serving this site writes technical request logs. These typically contain your IP address, the time of the request, the page or file requested, the referring page and your browser's user-agent string. An IP address is personal data under the GDPR, so it is disclosed here even though I do not use it to identify anyone.
- Purpose: keeping the site online, secure and functioning, and diagnosing faults or abuse.
- Legal basis: legitimate interest, Article 6(1)(f) GDPR — operating and protecting my own website.
- Hosting provider (processor): DigitalOcean Holdings, Inc, Headquarters: United States (based in New York / Broomfield, Colorado). Data is stored inside the EEA (Frankfurt servers, Germany)
- Retention: 90 days
I do not read these logs routinely, do not build profiles from them, and do not combine them with any other source.
What is not happening here
Stated plainly, because the absence is the point:
- No cookies — of any kind, including "necessary" ones.
- No analytics or measurement of any kind. No Google Analytics, no Plausible, no pixels, no heatmaps, no session recording.
- No advertising, retargeting or marketing tags.
- No third-party scripts, iframes or embeds. The typefaces, images, video and 3D model are all served from this domain.
- No contact form. The contact section offers a plain email address and messenger links, so nothing is submitted to this site.
- No profiling and no automated decision-making within the meaning of Article 22 GDPR.
- No special-category data, and nothing is knowingly collected from children.
Links to other sites
This site links out to LinkedIn, Telegram, Instagram, baradata.com and hiweber.com, and to a small number of project sites. Nothing is loaded from any of them while you read this site — no data reaches them until you click a link and go there yourself. Once you do, that site's own privacy policy applies, and I have no control over it.
If you contact me
If you email me or message me on a linked platform, I process what you send — your name, your address or handle, and the content of your message — in order to reply.
- Legal basis: Article 6(1)(b) GDPR where the message concerns a possible working relationship, otherwise legitimate interest under Article 6(1)(f) in responding to correspondence.
- Where it is held: my mailbox at Google Workspace and data location in EEA.
- Retention: until request to conclude and delete.
Your rights
Under the GDPR you may request access to the personal data I hold about you, its rectification or erasure, restriction of processing, or portability, and you may object to processing based on legitimate interest. Given how little this site collects, in most cases the honest answer to an access request will be that I hold nothing beyond server logs I cannot link to you, plus any correspondence you sent me.
Write to alex.subtselnyi@baradata.com to exercise any of these. You also have the right to lodge a complaint with a data protection supervisory authority — in Finland, this is the Office of the Data Protection Ombudsman, tietosuoja.fi.
Changes to this notice
If the site gains a feature that processes data differently — a contact form, analytics, an embedded video — this notice will be updated before that feature goes live, and the date at the top will change. There is no mailing list, so there is no notification to send; the current version is always the one on this page.