Privacy Policy

Review draft — October 19, 2026

Before publication: provider agreements, international transfer safeguards and operational retention settings must be verified. This draft must not be treated as a completed compliance review.

1. Who is responsible

Pavel Basavets, using the Basmedia brand, is based in Poland and is the controller of personal data collected for partnership enquiries. Contact: pbasovets@gmail.com.

Postal address: ul. Cyprysowa 3/2, 64-030 Śmigiel, Poland. Basmedia is a brand used by an individual, not a representation that a registered company exists.

2. Information collected

• Video-review requests: your name, email, public channel/profile link, description of your audience and teaching topic, previous product experience, any optional questions or details, and confirmation of adulthood and acceptance of the website terms. The form provider may process submission timestamps, IP addresses and anti-spam information.
• Correspondence: messages, answers and information needed to assess a possible partnership. I may review the public professional content you link to, to prepare my response.
• Optional calls: if you follow the Calendly link and book a call, the details you provide for scheduling and the meeting. Calls are not recorded without a separate prior agreement.
• Technical information: Netlify may process IP addresses, request times, browser information and security logs to deliver and protect the website.

Please do not send passwords, financial credentials, health information or identifiable private information about your followers. Aggregate audience descriptions are enough.

3. Purposes and legal bases

• To assess and answer an enquiry you request, prepare a personal review where there is a suitable fit and discuss a possible agreement: steps at your request before a contract, where Article 6(1)(b) GDPR applies. When you represent another person or organisation, the basis is the legitimate interest in handling professional enquiries under Article 6(1)(f).
• To deliver and secure the website, prevent spam and maintain necessary correspondence records: legitimate interests under Article 6(1)(f).
• To meet applicable legal obligations: Article 6(1)(c), where relevant.

Submitting the form does not subscribe you to a newsletter or authorise unrelated marketing. Accepting the website terms is not consent to advertising. I do not make legally significant decisions about you based solely on automated processing.

4. Service providers

The intended website workflow uses Netlify for hosting and form submissions, Google/Gmail for email, Calendly for optional scheduling, and Loom for a personal video response where appropriate. Only information needed for the relevant task should be included in a video or shared with a provider. Professional advisers or authorities may receive information when necessary or legally required.

Calendly and Loom are not embedded in this website. Following their links takes you to their services, which have their own privacy notices and technologies. Their role as processor or independent controller depends on the service and purpose.

GoHighLevel and course platforms are not part of this website’s initial enquiry workflow. If they are introduced, the relevant notices and agreements must be updated before they process applicant or student data. I do not sell personal information or use it for cross-context behavioural advertising.

5. International processing

Some listed providers may process information outside the European Economic Area, including in the United States.

Required before activation: identify the relevant contracting entities and processing locations, confirm suitable data-processing terms, and document the applicable transfer mechanism for each provider where required. The final policy must describe the verified safeguards and how a copy or information about them can be obtained. This draft does not assert that every provider is covered by the EU–US Data Privacy Framework or Standard Contractual Clauses.

6. Retention

Proposed operating rule to implement before launch: keep unsuccessful or inactive enquiries and related review videos for no more than 12 months after the last meaningful contact, unless a longer period is necessary for a documented legal reason. If a partnership begins, contract, accounting and related records follow the applicable legal retention periods. Remove unnecessary copies from the form dashboard, email and video service as well, subject to provider backup and retention procedures.

Hosting security logs and provider backups follow the relevant service settings and retention policies. Confirm these settings before publishing the final policy. A minimal record of an objection may be kept where needed to respect it.

7. Your rights

Under applicable data-protection law, including GDPR where it applies, you may request access, correction, erasure, restriction or portability, and object to processing based on legitimate interests. If processing is based on consent, you may withdraw that consent without affecting earlier lawful processing. Rights are subject to applicable conditions and exceptions.

Email pbasovets@gmail.com to make a request. Under GDPR, requests are normally answered within one month; an extension may be available where the law permits, with notice of the extension and reasons. I may need proportionate information to verify identity. You may complain to the Polish supervisory authority, UODO, or another competent authority.

8. Cookies and site technologies

This prepared website version contains no analytics, advertising pixels, third-party embedded players or optional cookie-based tracking. The video and poster are hosted with the website; playback is initiated by you. The form uses a hidden anti-spam field, not a third-party CAPTCHA.

Netlify may process technical requests and operate security features. Any cookies or equivalent technologies introduced by the live hosting configuration must be checked before launch. Cookies and tracking on external Calendly or Loom pages are governed by those services.

No optional tracking consent banner is included in this build. If non-essential cookies or tracking technologies are added, the notice and consent controls must be updated and, where required, those technologies must remain blocked until consent is given, with a way to refuse and withdraw it.

9. Adults and security

This service is intended for professional enquiries from adults aged 18 or older, not children. If you believe a child submitted personal data, contact me so I can assess and remove it where appropriate. Use only information you are entitled to share. No website or transmission method can be guaranteed completely secure.

10. Updates and contact

Changes will be reflected in this policy and its update date; additional notice will be given where required. Privacy enquiries: pbasovets@gmail.com.