🔒 Политика конфиденциальности (Privacy Policy)

1. WHO WE ARE & DATA PROTECTION ROLES

Data Controller / Business: For personal data collected through our Site, general contact forms, and client billing/administration, the Company acts as the Data Controller (under GDPR/LGPD) or Business (under CCPA/CPRA).

Data Processor / Service Provider: For any personal data embedded within documents, graphics, CAD drawings, manuals, or files submitted by clients for DTP, layout, or localization processing, the Client acts as the Data Controller, and we act strictly as a Data Processor / Service Provider acting solely on documented instructions from the Client.

2. INFORMATION WE COLLECT

A. Information You Provide Directly

• Contact & Business Identifiers: Full name, business email, telephone number, job title, company name, country, and billing/tax details.
• Inquiries & Project Briefs: Scope of work, technical requirements, software preferences, and correspondence history.
• Project Files & Materials: Source files (e.g., InDesign, Illustrator, AutoCAD, PDF, Word, XML/HTML, image scans) uploaded or shared for estimation and processing. These may incidentally contain personal data (names, titles, signatures, photos, or references within the document content).

B. Information Collected Automatically

• Log and Device Data: IP address, browser type, operating system, referring URLs, access timestamps, and device identifiers.
• Cookies and Tracking Technologies: Session cookies necessary for site operation and, subject to your prior consent where required by law, analytical cookies (e.g., Google Analytics).

3. HOW WE USE YOUR INFORMATION & LEGAL BASES

We process personal data only when an applicable legal basis exists under global privacy frameworks:

• Performance of a Contract (or pre-contractual steps): Evaluating requests, calculating quotes, executing layout/prepress work, delivering finished deliverables, and invoicing.
• Legitimate Interests: Securing our infrastructure, preventing fraud, managing client relationships, and improving site performance.
• Legal Compliance: Complying with accounting, tax, and regulatory obligations in relevant jurisdictions.
• Consent: When you opt in to optional marketing communications or non-essential analytics cookies (which you may withdraw at any time).

🛡️ We do not sell personal information, nor do we share or use it for cross-context behavioral advertising.

4. CONFIDENTIALITY & PROJECT FILE HANDLING

Given our role in prepress and localization DTP:

• Strict Non-Disclosure: All client materials and technical assets are treated as confidential.
• Limited Processing: Source files are processed solely to deliver the agreed-upon DTP, engineering, or formatting services.
• Subcontractors & Contractors: Any external specialists (e.g., specialized layout artists or technical reviewers) engaged by us are bound by formal Non-Disclosure Agreements (NDAs) and data processing terms ensuring equivalent security standards.
• Retention of Project Archives: Project files and production assets are retained for 60 to 90 days following project delivery to facilitate requested revisions, quality assurance, or emergency re-exports, after which they are securely archived or purged, unless a different retention period is agreed upon in a Master Services Agreement (MSA) or DPA.

5. INTERNATIONAL DATA TRANSFERS

Because we serve clients globally, your information and files may be transferred to and processed in countries outside your jurisdiction of residence.

Where transfers occur from jurisdictions with strict data transfer rules (such as the European Economic Area (EEA), UK, Switzerland, Brazil, China, or Japan):

• We implement appropriate contractual safeguards, including Standard Contractual Clauses (SCCs) approved by the European Commission or equivalent transfer mechanisms recognized by local authorities.
• For clients subject to China's PIPL, data transfers abroad are handled strictly in accordance with cross-border assessment and contractual requirements.

6. DATA SECURITY

We employ industry-standard technical, operational, and organizational security measures:

• TLS/HTTPS encryption for web traffic and file transmission.
• Role-based access control (least privilege principle) for project files.
• Regularly updated systems, firewall protection, and isolated working environments.

7. YOUR GLOBAL PRIVACY RIGHTS

Depending on your jurisdiction, you have specific rights regarding your personal data:

• EEA, UK & Switzerland (GDPR / UK GDPR): The right to access, rectify, erase (“right to be forgotten”), restrict processing, data portability, and the right to object to processing.
• United States (California CCPA/CPRA, Virginia VCDPA, Colorado CPA, etc.):
  • Right to know what personal information has been collected, disclosed, or sold/shared.
  • Right to delete personal information.
  • Right to correct inaccurate personal information.
  • Right to opt out of the sale or sharing of personal information (Note: We do not sell or share personal data).
  • Right to non-discrimination for exercising your rights.
• Brazil (LGPD): Right to confirmation of processing, access, correction, anonymization, blocking, deletion, and revocation of consent.
• Japan (APPI): Right to request disclosure, correction, addition, deletion, or cessation of use of retained personal data.
• South Korea (PIPA): Right to inspect, correct, delete, or suspend processing of your personal data.
• China (PIPL): Right to know, decide, restrict, access, copy, rectify, or request deletion of personal information.

8. COOKIES & TRACKING TECHNOLOGIES

You can manage or disable cookies via your browser settings or via our cookie banner. Where local regulations mandate (such as the EU ePrivacy Directive), non-essential cookies will only be activated with your prior affirmative consent.

9. THIRD-PARTY SERVICES & INTEGRATIONS

We may utilize trusted third-party providers for hosting, file transfer, analytics, and accounting (e.g., cloud storage, payment processors). These providers are vetted and authorized to process data strictly on our instructions and for authorized purposes.

10. CHILDREN’S PRIVACY

Our Services and Site are directed solely to businesses and professionals. We do not knowingly collect personal data from individuals under 16 (or the legal age of majority in your jurisdiction).

11. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time to reflect operational or regulatory changes. The updated version will be indicated by the "Last updated" date at the top of this page.

12. CONTACT US & SUPERVISORY AUTHORITIES

For questions, requests, or privacy concerns:

• ✉️ Email: projects@dtp.solutions
• ⏰ Working Hours: Пн-Пт 09:00 - 18:00 CET

You also have the right to lodge a complaint with your local data protection supervisory authority (e.g., an EU Data Protection Authority, the Brazilian ANPD, Japan's PPC, South Korea's PIPC, or the California Privacy Protection Agency).