Privacy Policy
Last updated: October 2026
Who is the data controller?
- Controller:
- Inna Hiliarovska (Inna Web Studio)
- Location:
- Lloret de Mar (Girona), Spain
- Email:
- info@innawebstudio.com
What data do we collect and why?
Contact form
- Data:
- first name, last name, email, package of interest and a description of your project.
- Purpose:
- to reply to your request and, if you ask for it, prepare a quote.
- Legal basis:
- your consent and steps taken at your request prior to entering into a contract (Art. 6(1)(a) and 6(1)(b) GDPR).
- Retention:
- as long as needed to handle your request. If we don't end up working together, the data is deleted within 12 months at most.
Review form
- Data:
- name, contact details, type of service, your website URL, rating and comment.
- Purpose:
- to publish your review on this website. Your name, type of service, rating, comment and the link to your website are published. Your contact details are not published: they are only used if I need to ask you something about the review.
- Legal basis:
- your consent (Art. 6(1)(a) GDPR).
- Retention:
- for as long as the review is published. You can ask for it to be removed at any time.
Newsletter subscription
- Data:
- email address.
- Purpose:
- to send you news, tips and articles about web design.
- Legal basis:
- your consent (Art. 6(1)(a) GDPR and Art. 21 of the Spanish LSSI-CE).
- Retention:
- until you unsubscribe. Every email includes a one-click unsubscribe link.
Client account
- Data:
- name, email, phone (optional), language, your project information (description, quotes, domain details, messages, questionnaire answers and the files you upload, such as logo, photos or texts) and an account security log (date, IP address and browser of each sign-in and change).
- Purpose:
- giving you access to your client area and protecting your account against unauthorised access.
- Legal basis:
- your consent and pre-contractual or contractual measures taken at your request (art. 6.1.a and 6.1.b GDPR); for the security log, the legitimate interest in protecting the account (art. 6.1.f GDPR).
- Retention:
- for as long as you keep the account. You can download your data or delete the account at any time from "My details". The security log is kept for 12 months.
Who do we share your data with?
We do not sell or hand over your data to third parties. Only the providers we need to run this website have access to it, as data processors:
- Hetzner Online GmbH (Germany, EU): website and database hosting.
- Hostinger (EU): email.
- Resend, Inc. (United States): newsletter delivery. This involves an international data transfer, carried out under the safeguards provided for in Chapter V of the GDPR.
- Google (Google Fonts and YouTube): when some pages load, your browser connects to Google servers to fetch fonts and, on project pages with a video, the YouTube player. Google may receive your IP address.
What are your rights?
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability at any time, and withdraw your consent, by writing to: info@innawebstudio.com. I will reply within one month at the latest.
If you believe your rights have not been respected, you can lodge a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es.
Minors
This website is not intended for children under 14, and we do not knowingly collect their data.
Security
We apply appropriate technical and organisational measures to protect your data: encrypted connection (HTTPS), restricted access to the admin panel and servers located in the European Union.
Changes to this policy
We may update this policy. The date of the latest update is shown at the top of the page.