Privacy policy

What personal data sodik.eu handles, why, and what you can ask me to do with it. The site is built to collect as little as possible.

Last updated

Who is responsible

The controller of your personal data is Sodik Tursunboev, Warsaw, Poland. Email: hello@sodik.eu. There is no data protection officer; write to me directly about anything on this page.

What the site handles, and why

Visiting the site

Cloudflare hosts and delivers the site. To send you a page and protect the site from attacks, Cloudflare processes your IP address, the address you request, your browser’s user agent and the time of the request. I see only totals and security events, never a log of individual visitors. Legal basis: my legitimate interest in running a secure website (Article 6(1)(f) GDPR).

Visitor statistics

Cloudflare Web Analytics counts page views, referring sites, countries and device types. It sets no cookies, stores nothing in your browser and does not follow you across other sites; I only ever see totals. Legal basis: my legitimate interest in knowing which pages are read (Article 6(1)(f) GDPR).

The contact form

The form sends your name, email address and message, together with the page you wrote from and the site’s language, to FormSubmit (formsubmit.co), a form service that forwards them to my inbox. I use them only to read and answer your message. Legal basis: my legitimate interest in answering messages sent to me (Article 6(1)(f) GDPR) and, when you write about working together, steps you ask for before a possible contract (Article 6(1)(b) GDPR).

Email

Messages to hello@sodik.eu, including those the form forwards, are stored in a mailbox hosted by Dynadot. They are used for the same purposes, on the same legal bases, as the form.

Storage in your browser

When you choose a language, the site remembers it in your browser’s local storage (under sodik-lang) so later pages open in that language. Once you have seen the clouds part at the start of the flight on the ARGUS case study, it remembers that there too (under sodik-flight), so next time the flight starts under a clear sky. In session storage, which your browser empties when you close the tab, it notes that the UV light has passed over the credential on the homepage (under sodik-uv), so it passes only once, and when you switch language on a case study or a write-up it keeps your reading position there and deletes it as soon as the translated page opens. None of this leaves your device or is used to track you. It serves only features of the site you use, so it needs no consent, and you can clear it in your browser’s settings at any time.

The site sets no cookies of its own. Cloudflare may set a strictly necessary security cookie (__cf_bm) when it needs to tell people from automated traffic; it holds no profile of you and expires after 30 minutes.

Who receives data

  • Cloudflare, Inc. (United States): hosting, delivery, security and visitor statistics.
  • FormSubmit (formsubmit.co): relays contact-form messages to my inbox.
  • Dynadot (United States): the domain and the hello@sodik.eu mailbox.

Each acts on my behalf, only for the purposes above. I don’t sell personal data or share it for advertising, and I would disclose it to authorities only where the law requires it.

Transfers outside the EEA

Cloudflare and Dynadot are based in the United States, and FormSubmit may process messages outside the European Economic Area. Where a provider is certified under the EU-US Data Privacy Framework, as Cloudflare is, the transfer relies on that framework; otherwise it relies on the safeguards the provider offers, such as the European Commission’s standard contractual clauses. You can ask me which safeguard applies to a particular service.

How long data is kept

  • Messages and emails: as long as it takes to answer and follow up, and no longer than 12 months after our last exchange, unless we are working together or the law requires otherwise.
  • Request data at Cloudflare: kept by Cloudflare for a short time for security, under its own policy.
  • Visitor statistics: totals only, with no record of you.
  • Language choice: until you clear your browser’s storage. The reading position is deleted as soon as it has been used, and at the latest when you close the tab.

Your rights

Under the GDPR you can ask me to:

  • give you a copy of the data I hold about you (access);
  • correct it (rectification) or delete it (erasure);
  • limit how I use it (restriction);
  • send it to you or to another service in a common format (portability);
  • stop using it where I rely on my legitimate interests (objection).

Write to hello@sodik.eu; I’ll answer within one month. You can also complain to a supervisory authority: in Poland, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl), or the authority in the country where you live or work.

Giving me your data is voluntary, but without an email address I can’t reply to you.

Everything else

No automated decisions

Nothing on the site makes automated decisions about you or builds a profile of you.

Links to other sites

Links to GitHub, LinkedIn, Medium, TryHackMe, Telegram, Instagram, EC-Council and other sites lead to services with their own privacy policies. Nothing is loaded from them until you follow a link: fonts, images and videos come from sodik.eu itself.

Children

The site is not directed at children under 16, and I don’t knowingly collect their data.

Security

The site is served only over HTTPS, with a strict Content Security Policy. To report a security problem, see the security disclosure policy.

Changes

If the way the site handles data changes, I’ll update this page and the date at the top. The English version is authoritative; the Uzbek and Russian versions are translations.