Privacy Notice

Last updated: July 16, 2026

This Privacy Notice explains how Gorskiy Favionics ("we", "us") collects and uses personal data when you use our website, account features, and order services.

1) Controller and contact

Controller: Gorskiy Favionics
Contact email: info@gorskiyfavionics.com

2) What we collect

  1. Account data: email, password hash, first name, last name, country, optional profile fields.
  2. Order and support data: order details, payment/shipping details, support messages.
  3. Security data: technical request and authentication events needed for abuse prevention and system integrity.
  4. Website traffic data: the page path you open (without query parameters or URL fragments), page views, a two-letter country code inferred by our infrastructure provider from the network request, and the number of seconds for which the page is open in the visible browser tab.
  5. For daily unique counting, we generate a short-lived pseudonymous server-side hash from the date, IP address, User-Agent, browser language, and a private salt. We do not store the IP address in our analytics tables.
  6. We do not collect precise location for website statistics, and this analytics feature does not record query parameters, keystrokes, clicks, page content, heatmaps, or session replays.

3) Why we process data and our legal bases

  1. To register and manage accounts, process orders, and provide requested support where this is necessary to perform a contract or take steps requested before entering into a contract.
  2. To protect the website, prevent fraud and abuse, and maintain network and information security based on our legitimate interests in operating a secure service.
  3. To produce limited first-party website statistics, understand which countries visitors come from and which pages are useful, and improve website performance and content. Where applicable, we rely on our legitimate interests in understanding and improving our service. We balance those interests against visitors' rights by minimising the data, excluding URL parameters, avoiding browser analytics IDs, and reporting only aggregated results to administrators.
  4. To comply with applicable legal obligations.

We do not use website traffic data for advertising or to build individual visitor profiles.

4) Cookies and similar technologies

  1. We use technical storage required for core website/account functionality.
  2. We do not use advertising trackers.
  3. We do not set analytics unique-visitor identifiers in browser cookies or localStorage; unique counting is done server-side.
  4. A small first-party script sends short active-time updates while the page is in the visible browser tab. Hidden tabs are not counted. This feature does not read or write an analytics identifier on your device.

5) Service providers, sharing, and international transfers

We share data only when needed for infrastructure, order/service operations, or legal compliance. Our website, API, security services, and database use Cloudflare infrastructure. Cloudflare processes network request metadata on our behalf and provides the country code used in our aggregate statistics. Other providers may process data when needed for email, order, or support services.

Providers may process data in countries other than your own. Where data-protection law requires it, we use an applicable transfer mechanism or other appropriate safeguards. You may contact us for more information about the safeguards relevant to your data.

6) Retention

We keep personal data only for as long as necessary for the purposes above, unless longer retention is required by law. Pseudonymous daily visitor hashes, including country-level unique-counting hashes, are automatically deleted after up to 35 days. Daily page-path, country, page-view, and active-time aggregates are retained for up to 24 months. Overall anonymous or aggregated totals that no longer identify a visitor may be retained longer for historical reporting.

7) Your rights

Depending on your location, you may have rights to request access, correction, deletion, restriction, objection, portability, and to file a complaint with a supervisory authority.

Your right to object: where we rely on legitimate interests, you may object to the processing of your personal data based on circumstances specific to you. Contact info@gorskiyfavionics.com. Because analytics identifiers are short-lived and pseudonymous, we may need information from you to determine whether a record can be linked to your request.

8) Automated decisions

We do not use the website traffic statistics described above to make decisions about individuals that have legal or similarly significant effects.

9) Updates

We may update this notice from time to time. The current version is always published on this page.

©2026 by Gorskiy Favionics · Privacy Notice