Privacy Policy – Elizaveta Tolstova
Last updated: 11.11.2025

1. Introduction
This Privacy Policy describes how Elizaveta Tolstova collects, uses, stores, and protects personal data when you visit https://etolstova.com/ or otherwise communicate with us.

We are committed to safeguarding your privacy and ensuring compliance with the EU General Data Protection Regulation (GDPR) and Spanish data-protection law (Ley Orgánica 3/2018, de Protección de Datos Personales y garantía de los derechos digitales). By using our website or services, you acknowledge and agree to the terms of this Privacy Policy.

2. Data Controller

Name

Elizaveta Tolstova

Address

Barcelona, Spain

Email

elizatolstova.marketing@gmail.com


3. Personal Data We Collect
We may collect and process the following categories of personal data:
- Contact details – name, email address, phone number, company name.
- Project details – information you voluntarily provide about your brand, design, or marketing requirements.
- Usage data – IP address, browser type, device information, referral source, and browsing patterns (collected via Tilda or integrated analytics tools).
- Communication data – content of emails, messages, or other correspondence exchanged with us.

4. Purposes and Legal Bases for Processing

Responding to inquiries and communicating with you

Performance of a contract / Legitimate interest

Preparing proposals, contracts, and delivering services

Performance of a contract

Improving website functionality and analysing traffic (where consented)

Consent / Legitimate interest

Complying with legal, fiscal, and accounting obligations

Legal obligation


5. Data Sharing
We may share personal data only with trusted third parties under strict confidentiality and data-protection terms, including:
- Service providers, such as hosting platforms (Tilda), analytics tools, and email-marketing services, necessary for the operation of our website and business.
- Public authorities, when disclosure is required by applicable law or regulation.

We never sell or rent personal data to third parties.

6. International Data Transfers
If your personal data is transferred outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place, such as the EU Standard Contractual Clauses (SCCs) or other legally recognized mechanisms guaranteeing an equivalent level of protection.

7. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable laws and regulations. When data is no longer needed, it will be securely deleted, anonymised, or archived in accordance with legal retention obligations.

8. Your Rights under the GDPR
You have the right to:
- Access your personal data.
- Rectify inaccurate or incomplete data.
- Erase your data (“right to be forgotten”).
- Restrict or object to certain processing activities.
- Withdraw consent at any time, without affecting prior lawful processing.
- Receive your data in a structured, commonly used, and machine-readable format (data portability).
- Lodge a complaint with the Spanish Data Protection Agency (AEPD) – https://www.aepd.es.

To exercise any of these rights, please contact us at elizatolstova.marketing@gmail.com.

9. Updates to this Policy
We may update this Privacy Policy from time to time to reflect changes in legal requirements or our processing practices. The latest version will always be available on our website, with the “Last updated” date shown at the top.