Privacy policy

Last updated October 12, 2026

This policy explains which personal data is processed when you visit growthbyvs.web.app, why, and what rights you have under the General Data Protection Regulation (GDPR).

1. Controller

Vadim Shein, email vadim51299de@gmail.com. The postal address is in the imprint.

I'm not required to appoint a data protection officer.

2. Hosting and server logs

The site is hosted on Firebase Hosting, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When you open a page, the hosting servers process technical data your browser sends automatically: IP address, date and time, the page requested, referrer, browser and operating system. This is needed to deliver the site and keep it secure.

Legal basis: Art. 6 (1) (f) GDPR, my legitimate interest in a working and secure website. Google may process data in the USA; Google LLC is certified under the EU-US Data Privacy Framework, which the European Commission recognizes as providing adequate protection (Art. 45 GDPR).

3. Browser storage that's always on

The site stores two entries in your browser's local storage: your cookie choice (cookie_consent) and your language (vs_lang). They never leave your device.

Legal basis: § 25 (2) no. 2 TDDDG, as they're strictly necessary to provide the site the way you set it.

4. Google Analytics 4 and Google Tag Manager

Only with your consent. If you allow analytics, the site uses Google Analytics 4 by Google Ireland Limited (address above) to measure which pages and cases are read, how visitors arrive, and which links they click, such as the call booking link. Google Tag Manager loads the analytics tag; it sets no cookies of its own.

  • Cookies: _ga and _ga_<ID>, stored for up to 2 years
  • Data: pseudonymous device ID, pages viewed, clicks, approximate location (country, city), device and browser type, referrer
  • IP addresses: Google Analytics 4 doesn't log or store IP addresses of visitors in the EU
  • Retention: analytics data is deleted after 14 months

Before you decide, and if you decline, the site uses Google Consent Mode: analytics runs without cookies and without identifiers, and Google only receives anonymous signals, for example that a page was viewed.

Legal basis: your consent, Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. You can withdraw it at any time with effect for the future: . Data may be transferred to Google LLC in the USA on the basis of the EU-US Data Privacy Framework (Art. 45 GDPR). Google's privacy policy: policies.google.com/privacy.

5. Booking a call

The "Book a 30-minute call" buttons link to Cal.com, operated by Cal.com, Inc., USA. Nothing is sent to Cal.com until you open the link. If you book, Cal.com processes the name, email address and any notes you enter and passes them to me so the call can take place.

Legal basis: Art. 6 (1) (b) GDPR, steps taken at your request before a possible contract. Cal.com's privacy policy: cal.com/privacy.

When a booking is made, a notification with your name, email address, the time of the call and your notes is forwarded to me through Make (make.com, a Celonis company, EU data center) and delivered to my Telegram account, so I can prepare and reply quickly. Telegram may process this data outside the EU. Legal basis: Art. 6 (1) (b) GDPR. Privacy policies: Make, Telegram.

6. Contact by email

If you email me, I process your address and the content of your message to reply. Legal basis: Art. 6 (1) (b) GDPR if your message concerns a possible project, otherwise Art. 6 (1) (f) GDPR. I delete the correspondence once it's no longer needed, unless tax or commercial law requires me to keep it longer.

7. Links to social networks and client sites

Links to LinkedIn, Instagram and client websites are plain links. No data goes to these services until you click one; after that, their own privacy policies apply.

8. Fonts

All fonts are served from this site's own server. Your browser doesn't connect to Google Fonts or any other font service.

9. Your rights

You have the right to:

  • access the data I hold about you (Art. 15 GDPR)
  • have it corrected (Art. 16) or deleted (Art. 17)
  • restrict its processing (Art. 18)
  • receive it in a portable format (Art. 20)
  • object to processing based on legitimate interests (Art. 21)
  • withdraw consent at any time, with effect for the future (Art. 7 (3))

To use any of these rights, email vadim51299de@gmail.com.

You can also complain to a data protection supervisory authority. The one responsible for me is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Alt-Moabit 59–61, 10555 Berlin, Germany.

10. Other points

You aren't required to provide any personal data to use this site. There's no automated decision-making or profiling within the meaning of Art. 22 GDPR.

I update this policy when the site changes. The current version is always on this page. See also the cookie settings and the imprint.