Privacy & Cookie Policy
Last updated: October 12, 2026
1. Data controller
sbgid solutions ("we", "us"), the development team operating this website (sbgid.com), is the data controller for personal data processed through this site.
Contact for all privacy matters: contact@sbgid.com.
2. Personal data we collect
| Source | Data | Provided by |
|---|---|---|
| Project request form | Name (optional), contact handle — email, Telegram username or phone number, selected service, message text | You |
| Client account | Username, display name, password (stored only as a cryptographic hash) | You |
| Orders and messages | Content of orders, service requests and messages you submit in the client area | You |
| Server logs | IP address, user agent, requested URLs, timestamps | Automatically |
We do not collect or process special categories of personal data.
3. Purposes and legal bases (GDPR Art. 6)
| Purpose | Legal basis |
|---|---|
| Responding to your project request and communicating with you | Art. 6(1)(b) — steps prior to a contract; Art. 6(1)(a) — consent |
| Creating and operating your client account, managing orders | Art. 6(1)(b) — performance of a contract |
| Security, anti-spam and abuse prevention, error diagnostics | Art. 6(1)(f) — legitimate interest |
| Complying with legal obligations (e.g. tax or accounting, where applicable) | Art. 6(1)(c) — legal obligation |
4. Cookies and similar technologies
This website uses only strictly necessary storage technologies:
| Name | Type | Purpose | Lifetime |
|---|---|---|---|
PHPSESSID |
Cookie | Maintains your session: sign-in state and CSRF security tokens for forms | Until the browser is closed |
sbgid_cookie_consent |
Local storage | Remembers your cookie-banner choice so it is not shown again | Until cleared in the browser |
We do not use advertising, analytics or other third-party tracking cookies. Strictly necessary technologies are exempt from prior consent under Art. 5(3) of the ePrivacy Directive, so the banner is informational: you may accept it or limit storage to essentials — either way no non-essential cookies are set.
5. Third-party content requests
Pages load fonts (fonts.googleapis.com, fonts.gstatic.com) and, on some pages, icon libraries (unpkg.com) directly in your browser. When this happens your IP address and browser details are technically transmitted to those providers. They process it under their own privacy policies — we do not receive any data back from these requests.
6. Recipients and international transfers
| Recipient | Role | Location / safeguards |
|---|---|---|
| Hetzner Online GmbH — hosting provider | Server infrastructure | Germany (EU) |
| Google LLC — Gmail | Delivery of contact-form messages to our mailbox | USA — EU–US Data Privacy Framework / Standard Contractual Clauses |
We do not sell, rent or otherwise disclose your personal data to third parties for their own purposes.
7. Data retention
- Contact-form submissions are kept in our mailbox for as long as needed to handle your request and follow-up communication, then deleted on request or when no longer required.
- Account data is kept while your account is active. You may ask us to delete the account and associated data at any time.
- Server logs are rotated automatically and retained for a limited period required for security diagnostics.
8. Security measures
- HTTPS encryption for all traffic;
- CSRF tokens, honeypot and rate limiting on public forms;
- Passwords stored only as hashes;
- Access to production systems restricted by key-based SSH and role separation;
- Signed outgoing mail (SPF, DKIM) reducing spoofing risk.
No method of transmission or storage is 100% secure, but we apply appropriate technical and organisational measures as required by GDPR Art. 32.
9. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you;
- rectification of inaccurate or incomplete data;
- erasure ("right to be forgotten");
- restriction of or objection to processing;
- data portability in a structured, machine-readable format;
- withdraw consent at any time, without affecting the lawfulness of prior processing;
- lodge a complaint with your local data-protection supervisory authority.
To exercise any right, write to contact@sbgid.com. We respond within one month.
10. Automated decision-making
We do not make decisions based solely on automated processing and do not profile you.
11. Children
This site is intended for business audiences and is not directed at children under 16. We do not knowingly collect their data.
12. Changes to this policy
We may update this policy when the site or applicable law changes. The current version is always published on this page with the date of the last update.