This Policy sets out how personal data of users of the website sava.team is processed and protected in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”).

1. Data controller

Name: Vladimir Savrov (autónomo)
NIF/NIE: ESZ3683284T
Address: Alicante, Spain
Email: privacy@sava.team

2. Categories of data we process

first and last name;
email address;
phone number;
IP address, cookie data, user agent;
messages and the content of contact forms;
promo codes and marketing campaign data.

3. Purposes of processing

entering into and performing a service agreement;
consultations and replies to enquiries;
sending news and marketing materials (with your consent);
analytics and improving the quality of our services;
complying with obligations under EU and Spanish law.

4. Legal bases

your consent (Art. 6(1)(a) GDPR);
performance of a contract (Art. 6(1)(b) GDPR);
our legitimate interests (Art. 6(1)(f) GDPR);
compliance with a legal obligation (Art. 6(1)(c) GDPR).

5. Retention

We keep personal data no longer than the purposes of processing require. Client data is kept for the term of the agreement and for 3 (three) years after it ends. Data for marketing subscriptions is kept until you withdraw your consent.

6. Your rights

to obtain information about the processing of your data;
to have your data rectified, restricted or erased;
to withdraw your consent at any time (Art. 7 GDPR);
to restrict processing (Art. 18 GDPR);
to data portability (Art. 20 GDPR);
to lodge a complaint with a supervisory authority — in Spain, the Agencia Española de Protección de Datos (AEPD).

To exercise your rights, write to i@sava.team. We reply within 30 days.

7. Where data is stored and who receives it

Data submitted by visitors outside Russia and Belarus is stored on servers located in the European Union. We share data only with the following recipients and only as far as needed for the purposes above:

Hosting provider (EU) — stores the Website and the data you submit, as a processor under Art. 28 GDPR.
Cloudflare, Inc. (USA) — Turnstile bot protection on forms receives your IP address and browser data at the moment you submit a form. Transfer: EU–US Data Privacy Framework.
Telegram (Telegram Messenger Inc.) — our team is notified of a new request with its content so that we can reply quickly. The transfer outside the EU is necessary to take the steps you requested before entering into a contract (Art. 49(1)(b) GDPR).
Email service — delivery of our replies and request notifications, as a processor.
Google Ireland Ltd / Google LLC — Google Analytics, unless you opt out — our legitimate interest in understanding how the site is used (Art. 6(1)(f) GDPR) (see the Cookie Policy). Transfer: EU–US Data Privacy Framework.

Any other transfer outside the EU is made only to countries with an adequate level of protection (Art. 45 GDPR) or under Standard Contractual Clauses (Art. 46 GDPR). We do not sell personal data.

8. Security measures

encryption in transit (TLS 1.3);
access restricted on the principle of least privilege;
regular backups and audit logs;
information security training for staff.

9. Cookies

The use of cookies is governed by our Cookie Policy.

10. Changes to this Policy

We may update this Policy. The current version is always available on this page.

11. Contact

Questions about the processing of personal data: privacy@sava.team or i@sava.team.