Privacy Policy
Last updated: February 16, 2025
Who we are
I am George Bugakov, operating from Leuven, Belgium. I collect and process personal data to send postcards to people who request them.
Contact Information
- Email: [email protected]
- Data Protection Authority:
Gegevensbeschermingsautoriteit (GBA)
Drukpersstraat 35, 1000 Brussel
Tel: +32 (0)2 274 48 00
Email: [email protected]
What data we collect
I collect and process the following personal data:
- Your name
- Your email address
- Your postal address
How we use your data
This data is used exclusively to:
- Send you postcards
- Communicate with you about your postcard request
- Comply with legal obligations
Legal basis for processing
I process your data based on:
- Your consent when you submit the postcard request form
- The need to fulfill our agreement to send you postcards
Data sharing
Your data is shared only with:
- bpost (postal service) for international postcard delivery
This may involve transferring your data outside the EU, as necessary for international delivery.
Data retention
I keep your personal data for 1 year after your last postcard request, after which it is securely deleted unless required to be kept longer by law.
Your rights
Under GDPR, you have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion of your data
- Withdraw your consent
- Request data portability
- Object to processing
- File a complaint with the GBA
To exercise these rights, email [email protected]. I will respond to your request within 30 days.
Security
I implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction, however you have to understand that once I write your address and name on a postcard, and put it in a postbox, it’s pretty much out of my control.
Changes to this policy
I may update this privacy policy occasionally. The latest version will always be available at https://md.gbgk.me/postcards/privacy.