This notice describes how MaksIT processes personal data on this website (maks-it.com and language hosts).

EU GDPR and the Italian Privacy Code (Legislative Decree 196/2003, as amended) apply.

Who we are

Controller: Maksym Sadovnychyy, operating this website as MaksIT
Email: privacy@maks-it.com

This website is a public catalog of MaksIT software. A listing may be a desktop application, web-service source code, a library, or software with hosted features. Hosted-service data are processed only if you buy such a service. The site also provides for the MaksIT blog, with our articles, and a shop.

This website

Browsing the public pages does not require an account. We may process:

• Language cookie (maksit_ui_locale): first-party cookie that stores the interface language you choose, for up to one year. Legitimate interest in keeping the site in the language you selected — Art. 6(1)(f).
• Account, if you register: username, email address if you provide one, and a salted hash of your password, to create and run the account — Art. 6(1)(b). The password itself is not stored.
• Sign-in data (maksit_identity cookie and local storage on your device): only if you sign in. It holds the session until the refresh token expires, or until you sign out — Art. 6(1)(b).
• Cart cookie (maksit_cart): HttpOnly, only when you use the shop or cart. It identifies a guest cart for up to 30 days — Art. 6(1)(b).
• Blog comments, if you post one: your username and the comment text, shown to other visitors. If you delete a comment, the text is removed. Your username can remain on that entry — Art. 6(1)(b).
• Shop reviews, if you write one: your username, rating, and review text, shown to other visitors until you delete the review — Art. 6(1)(b).
• Purchases, if you buy: checkout email, order contents, and payment identifiers, to perform the contract — Art. 6(1)(b). If you buy a hosted service, such as PaaS, the subscription is kept until you cancel it or ask us to delete it, subject to retention required by law (for example accounting).
• Contact if you email us (your email address and the message) so we can reply. If the message is about a purchase or an account, Art. 6(1)(b). Otherwise, legitimate interest in answering you — Art. 6(1)(f). We do not run a newsletter and we do not send promotional messages.
• Server logs (IP address, user agent, time, URL) for security and abuse detection. Legitimate interest in protecting the site and its users — Art. 6(1)(f). Kept only as long as needed for that purpose.

There is no advertising pixel, no profiling cookie, and no Google Analytics.

If you send us personal data about someone else, you need a lawful basis to do so.

Giving contact details is optional, except where we need them to answer you, to run an account, or to complete a purchase. Without them we cannot do that thing.

Stripe processes payment and may process that data outside the European Economic Area, including in the United States, under the safeguards in its data-processing terms (standard contractual clauses where a transfer requires them).

We do not use your data for automated decisions that produce legal or similar effects.

Sharing

We do not sell personal data. Processors may include hosting in Italy / the EEA for this website. Comments and reviews are visible to other visitors. Browsing data is not passed to advertising or analytics networks.

Google and Microsoft are independent controllers when you use their sign-in on Identity Hub (Postclient). They may process that data outside the EEA under their own terms. That processing is described in the Postclient notice and in the Identity Hub privacy statement.

Storage and security

Website data are processed on systems we control, in Italy or the EEA, except for the payment and sign-in transfers described above, and only for the purposes above. Access is limited to operating the site and answering you.

Your rights

You may request access, rectification, erasure, restriction, and portability, object to processing based on legitimate interests, and withdraw consent where processing is based on consent. Contact privacy@maks-it.com. You may lodge a complaint with the Italian Data Protection Authority or another supervisory authority in the European Economic Area.