Legal
Privacy Policy
Last updated:
This Privacy Policy explains how Arsen Hambardzumyan ("I", "me", or "my") collects, uses, and protects information when you visit https://arsenhambardzumyan.dev(the "Site"). I am committed to protecting your privacy and complying with applicable data protection laws, including the EU General Data Protection Regulation (GDPR).
1. Data Controller
The data controller responsible for your personal data is:
2. What Data I Collect
a) Contact Form
When you submit the contact form, I collect: your name, email address, and the message you provide. Optional fields include company name, phone number, project type, and budget range. This data is used solely to respond to your inquiry and is never sold to third parties.
b) Analytics
With your consent, I use Google Analytics 4 and Microsoft Clarity to understand how visitors interact with the Site (pages visited, session duration, device type). These tools may set cookies and collect anonymized usage data. No personally identifiable information is shared with these services without your consent.
c) Automatically Collected Data
When you visit the Site, standard web server logs may record your IP address, browser type, operating system, referring URL, and timestamps. This data is used for security and operational purposes and is not linked to your identity.
3. Legal Basis for Processing (GDPR)
- Consent:Analytics cookies (Google Analytics, Microsoft Clarity). You may withdraw consent at any time via the cookie banner.
- Legitimate interest:Server logs for security and fraud prevention.
- Contract performance:Processing contact form submissions to respond to your business inquiry.
4. Cookies
The Site uses cookies only with your explicit consent (except strictly necessary cookies required for operation). You can accept or decline analytics cookies via the cookie consent banner shown on your first visit. You can also change your preferences at any time by clearing your browser cookies and revisiting the Site.
Strictly necessary
Cookie consent preference storage. No consent required. Expires: 1 year.
Google Analytics (_ga, _gid)
Site usage analytics. Requires consent. Expires: Up to 2 years.
Microsoft Clarity (_clsk, _clck)
Session recording and heatmaps. Requires consent. Expires: Up to 1 year.
5. Data Sharing
I do not sell, rent, or trade your personal data. Data may be shared with the following third-party service providers strictly to operate the Site:
- —Resend (email delivery) — contact form submissions are relayed via Resend's API
- —Google Analytics — usage analytics (consent-gated)
- —Microsoft Clarity — session analytics (consent-gated)
- —Vercel — hosting provider; processes server requests
All third-party providers are contractually bound to protect your data and may not use it for their own purposes.
6. Data Retention
Contact form submissions are retained for as long as necessary to complete the business relationship (typically up to 2 years), after which they are deleted. Analytics data is retained per each provider's default policy (Google Analytics: 14 months; Microsoft Clarity: 13 months).
7. Your Rights (GDPR)
If you are in the EU/EEA, you have the following rights:
- ✓Right of access — request a copy of your personal data
- ✓Right to rectification — correct inaccurate data
- ✓Right to erasure — request deletion of your data
- ✓Right to restriction — limit how I process your data
- ✓Right to data portability — receive your data in a structured format
- ✓Right to object — object to processing based on legitimate interest
- ✓Right to withdraw consent — at any time for consent-based processing
To exercise any of these rights, contact me at [email protected]. I will respond within 30 days.
8. Data Security
The Site uses HTTPS (TLS) for all data in transit. Contact form data is transmitted via encrypted API calls. I implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, or disclosure.
9. International Transfers
Your data may be processed outside your country of residence (e.g., US-based servers via Vercel or Google). Where required, appropriate safeguards such as Standard Contractual Clauses (SCCs) are in place.
10. Changes to This Policy
I may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the Site after changes constitutes acceptance of the updated policy.
11. Contact
For any privacy-related questions or to exercise your rights, contact me at: [email protected]