Privacy & transparency
This policy explains what personal data I process when you visit this website or contact me, why I process it and which legal bases apply.
Privacy policy
The controller under the General Data Protection Regulation (GDPR) and other applicable data protection rules is:
GLEB ITUse these details to contact me directly with any privacy question.
Personal data is information that relates to an identified or identifiable person. I process it only as needed to operate this website, respond to enquiries, take steps before entering a contract or perform a contract.
You can withdraw consent at any time for future processing. This does not affect the lawfulness of processing carried out before withdrawal.
I retain personal data for as long as its purpose requires. I then delete or anonymise it, subject to statutory retention requirements, legitimate interests in preserving evidence or another lawful reason to keep it. In those cases I restrict processing to the relevant purpose.
I disclose data to service providers only as needed to run the website, communicate, make backups or perform a contract. Where required, providers act as processors under Article 28 GDPR. I disclose data to authorities only where legally obliged to do so.
Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus, provides the infrastructure that hosts and serves this website.
The web server may process and record your device’s IP address, date and time of access, requested page or file, amount of data transferred, referrer URL if your browser sends it, browser type and version, operating system, HTTP status code, and requesting provider or hostname.
I use this data to run the website securely and reliably, prevent abuse and diagnose errors. The legal basis is Article 6(1)(f) GDPR. My legitimate interest is keeping the website secure and functional. A data processing agreement with Hostinger applies where required. Hostinger privacy policy.
If you contact me by email or phone, I use the information you provide, including your name, contact details, message and any project information, to respond and continue the conversation.
Article 6(1)(b) GDPR applies to requests for a quote, steps before entering a contract and contractual communication. For other enquiries I rely on Article 6(1)(f) GDPR. My legitimate interest is responding appropriately. I delete the data when the enquiry is resolved unless a legal retention requirement or legitimate reason, such as establishing, exercising or defending a legal claim, requires me to keep it.
I use Fluent Forms, hosted on this website, for project enquiries and requests about Glebrio for Windows. The forms have no active connection to an external CRM, analytics, CAPTCHA or marketing service.
The English project form collects your full name, email address, project type, message and acknowledgement that you have read the privacy notice. You can also include your website or shop URL. The German project form can additionally collect an optional phone number, project status and desired start date. If you request a call, I use your phone number to respond. Automatic country selection and geolocation via ipinfo.io are disabled.
The Windows enquiry form asks for your name, email address and an optional message. It does not ask for other project details, a phone number or files. Submissions include the time and technical information needed for transmission. The fields marked as required let me identify and respond to your enquiry.
Form entries are kept in the WordPress database on the Hostinger web server. I receive a notification at mail@gleb-it.de. The project form also sends an acknowledgement to the email address you supply. I answer Windows enquiries personally.
Fluent Forms does not store IP addresses in form entries. Your IP address is still processed when your request is transmitted and as part of website hosting.
Article 6(1)(b) GDPR applies to requests about a quote, steps before entering a contract or contractual matters. For other enquiries I rely on Article 6(1)(f) GDPR. My legitimate interests are handling enquiries efficiently and identifying misuse. I keep entries only as needed to handle the enquiry, follow up, meet statutory obligations or defend legal claims. I then delete them.
The locally hosted WP Mail SMTP plugin and Hostinger’s SMTP server deliver website emails, including form notifications and acknowledgements, from mail@gleb-it.de.
Hostinger’s mail infrastructure processes the information needed for delivery. This includes addresses, sender and recipient information, subject, message contents, send time and technical delivery data. The legal basis is Article 6(1)(b) GDPR for pre-contractual or contractual correspondence and Article 6(1)(f) GDPR for secure, reliable handling of other messages.
This site may link to WhatsApp as an optional way to contact me. Your browser connects to WhatsApp when you open the link. The service provider for people in the European Economic Area (EEA) is WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.
WhatsApp may process your phone number, profile and device details, communication metadata and the content you share. According to WhatsApp, messages and calls are end-to-end encrypted. WhatsApp may process data outside the EEA and says it uses safeguards including standard contractual clauses.
Communication takes place at your request. Depending on the content, my legal basis is Article 6(1)(b) or 6(1)(f) GDPR. WhatsApp privacy policy.
I use statistics hosted on this web server for selected WordPress pages. Statistics help me understand which pages and contact options people use. Collection begins only if you allow website statistics in the consent banner. The website and the enquiry form are available without statistics consent.
I count permitted page views, clicks on selected buttons and successful submissions on expressly configured forms where you consented to statistics. A visit counts as a bounce after it ends if it recorded fewer than 15 visible seconds, no second distinct measured page and no selected click or form action. After consent, a random key in browser session storage (gleb_it_kpi_visit_v1) links measured views in the same tab. It expires after 30 minutes without recorded activity. Other tabs and the standalone Glebrio app are treated separately. Depending on the browser, a duplicated tab may initially inherit the session storage.
The statistics use neither fingerprinting nor cross-site tracking. Form contents, names, email addresses, full URLs with query strings, IP addresses and browser characteristics are excluded from the statistics records. Daily counters can count repeated views or clicks, so the totals do not represent distinct people. Processing your enquiry is separate.
Statistics rely on consent under Article 6(1)(a) GDPR and, where optional data is stored on or read from your device, Section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG).
For open visits the server temporarily keeps a protected hash of the random key, the start date, internal entry-page ID, last recorded activity and interaction status. After 30 minutes without recorded activity and up to 30 seconds of extra transmission time, the next maintenance run closes the visit and adds it to daily counts. It then removes the start date, page ID, activity time and interaction status from the temporary record. The hash and completion time remain temporarily to prevent late duplicate counting. The next maintenance run from 24 hours after completion removes them.
Daily counts hold a date, internal page or form ID, event type and count. They are removed from the active dataset at the next cleanup after 90 days. Visit maintenance is scheduled hourly. WordPress tasks depend on site visits, so outages or a lack of visits can delay finalisation and physical deletion. Backups follow the separate rules in Security and backups.
I do not send statistics to Google, Meta or other advertising or analytics services. Internal reports may send aggregated counts to an address I configure, using the existing email system. They contain no form contents. This website does not use Google Analytics, Google Ads conversion tracking, Meta Pixel or LinkedIn Insight Tag. Normal connection data still arises as described under Hosting and server logs.
I use Complianz on this web server to manage consent. Cookies with the prefix cmplz_ keep your choice and consent version, including statistics preferences, essential functions, banner status and policy version, for up to 180 days. Session storage keeps the banner configuration during the browser session. This necessary storage respects your decision and is not used for advertising profiles. The legal bases are Section 25(2)(2) TDDDG and Article 6(1)(f) GDPR. My legitimate interest is reliably applying your choice.
You can use the cookie settings to change your choice and withdraw consent for future processing. This stops collection and removes the active visit key. Without statistics consent, the site does not read a previously stored visit key. Opting in again starts a new measurement session. Withdrawal does not affect the lawfulness of earlier processing. Daily counters contain no visitor identifier and cannot be attributed to a person retrospectively. The site also respects Do Not Track and Global Privacy Control.
Signing into WordPress uses essential cookies. Technical security features and functions you expressly request are separate from analytics and advertising. Browser data used for these functions does not create advertising profiles. Essential storage or access relies on Section 25(2)(2) TDDDG. Any related processing of personal data relies on Article 6(1)(f) GDPR or Article 6(1)(b) GDPR where needed for a requested service.
Connection data is processed even without analytics or marketing cookies. The website serves its own fonts. Your browser does not connect to Google Fonts or another external font service to load them.
Some links lead to client projects, social networks or ProvenExpert. These links do not embed the providers’ content. When you follow a link, the destination’s privacy policy applies. Public pages currently do not embed external Google sign-in, videos, maps, appointment booking systems or CAPTCHA services. The website has no public comments, so its installed antispam system does not process public comment data.
Glebrio lets you convert, crop and resize images in your browser. Your device processes image files, file names and results locally. The web app does not upload them to GLEB IT or another server. The editing session is held in browser memory and is lost when you close or reload the app. Files you download stay on your device.
Brightness and colour saturation adjustments and cropping transparent PNGs to their content also run locally. They require no uploads or AI. PDF creation and the separate SVG optimiser run locally too. The web app does not upload the selected SVGs, image contents or generated PDF, SVG and ZIP files. JPG, PNG, WebP and AVIF exports remove metadata. The separate SVG optimiser preserves existing metadata, IDs and text spacing. Download any results you want before closing or reloading the app.
The web app does not require an account. It does not set cookies or use analytics, marketing, telemetry or remote error reporting. It does not retain images or editing sessions in persistent browser storage.
If you save or change an export preset, the app saves its name, output settings and any naming pattern in your browser’s local storage under bildwerk.vorlagen.v1. A preset name or naming pattern can contain personal details you enter. The app saves no image files, pixels, computed results or full sessions there. Presets are read on startup and stay in your browser until you delete them in the app or clear the website’s browser data. They are not sent to a server.
Your browser downloads the app files, locally hosted fonts and necessary processing components from this web server. This involves connection data such as your IP address, access time, requested file and browser details. See Hosting and server logs. Section 25(2)(2) TDDDG applies to access to your device that is necessary for the image processing you request.
If you expressly start processing with AI background removal enabled, your browser downloads an AI model of around 176 MB from this web server if needed. Switching on the option alone does not start the download. The model processes images locally. It does not send image files or results to an AI provider. Downloading the model involves the technical connection data described above. See Enquiry forms for requests about the Windows app.
You can support Glebrio’s development with an amount of your choice. The link opens a payment page run by PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg. This website does not embed PayPal scripts or payment forms. PayPal processes connection, device and payment data under its own responsibility after you open the link. Processing may take place outside the EEA. PayPal privacy policy.
If you pay, PayPal may provide me with your name, email, amount, currency, date, transaction ID and any payment reference. I use these details to identify and manage payments under Article 6(1)(f) GDPR. My legitimate interest is maintaining accurate records of incoming support. Article 6(1)(c) GDPR applies where statutory accounting and retention duties require it. The relevant statutory retention periods and the general retention rules apply.
This website uses SSL/TLS encryption, indicated by https://, to protect data in transit against unauthorised access.
I create website backups manually with UpdraftPlus and store them within Hostinger’s infrastructure. There is currently no automatic backup schedule. Older backups can be removed automatically under the configured retention limits, except for copies explicitly protected from removal. Backups may contain the same personal data as the live website. I use them only for restoration, troubleshooting and keeping the website operational. The legal basis is Article 6(1)(f) GDPR. My legitimate interests are availability, integrity and recovery.
Simple History logs WordPress administration and security events such as logins, content changes and plugin updates. IP addresses are masked before storage. Records remain personal data because they include a user identifier, time and the recorded change. They are kept for 60 days and then deleted automatically. Under Article 6(1)(f) GDPR I use them for security, troubleshooting and accountability for administrative changes. They do not measure general visitor behaviour.
Subject to the applicable legal conditions, you can request access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction (Article 18) and data portability (Article 20). You can object to processing based on legitimate interests under Article 21.
When processing relies on Article 6(1)(f) GDPR, you can object at any time for reasons relating to your particular situation. I will stop processing the relevant data unless I have compelling legitimate grounds or need it to establish, exercise or defend legal claims.
To exercise your rights, email mail@gleb-it.de. I may ask for appropriate proof of identity to prevent unauthorised disclosure.
You can lodge a complaint with a supervisory authority. The authority for the location of GLEB IT is Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD), Holstenstraße 98, 24103 Kiel, Germany. Phone +49 431 988-1200, email mail@datenschutzzentrum.de, website.
I do not carry out solely automated decision-making, including profiling, within the meaning of Article 22 GDPR.
I update this policy when the website, its services or legal requirements change. The version published on this page applies. Ask me a privacy question.