Legal
Privacy Policy
How we collect, use and protect personal data when you contact us, book our services or visit sashabarin.com.
1. Data controller
The controller of your personal data is ODESSENSE LTD, a company registered in the Republic of Cyprus, Reg. No. HE 497696, registered office: Nikou & Desponas Pattichi, 105 UMG HOUSE, Flat/Office 1-2, 3070 Limassol, Cyprus (the "Company", "we"). The Company operates the website sashabarin.com and provides services under the Sasha Barin brand.
For any privacy question or request, write to Odessense.cy@gmail.com or call +357 99 958285. We process personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, "GDPR") and the data protection laws of the Republic of Cyprus.
2. Data we collect
- Contact data: name, email, phone number, messenger username, company and job title.
- Event data: date, location, format and programme of the event, and information about speakers or participants that you choose to share so that we can prepare the programme.
- Billing and payment data: invoice details, billing address, company registration and VAT number, amounts and transaction references. Card payments are processed by a licensed payment service provider: we do not receive or store full card numbers or CVV codes, only the payment confirmation and, where provided, the card type and last four digits.
- Communications: the content of your emails and messages to us.
- Technical data: IP address, browser type and request logs, processed by our hosting and security provider when you visit the website.
We collect data directly from you or from your company when it books services for its event.
3. Purposes and legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Replying to inquiries and preparing proposals | Steps at your request before entering into a contract - Art. 6(1)(b) |
| Planning, producing and delivering the services, coordinating vendors | Performance of a contract - Art. 6(1)(b) |
| Invoicing, payments, accounting and tax reporting | Legal obligation - Art. 6(1)(c); contract - Art. 6(1)(b) |
| Preventing fraud, securing the website and payments | Legitimate interests - Art. 6(1)(f) |
| Using event photos and videos in our portfolio | Consent - Art. 6(1)(a), which you may withdraw at any time |
| Establishing or defending legal claims | Legitimate interests - Art. 6(1)(f) |
We do not use your data for automated decision-making or profiling, and we do not sell personal data.
4. Who receives the data
- Payment service providers and banks - to process card payments, bank transfers and refunds.
- Vendors engaged for your event (venue, technical team, artists) - only the data they need to perform their part.
- IT service providers - email (Google), website hosting, content delivery and security (Cloudflare), and the messengers you choose to contact us with (WhatsApp, Telegram).
- Accountants, auditors and legal advisers bound by confidentiality.
- Public authorities - where required by law.
5. International transfers
Some of our service providers may process data outside the European Economic Area. In that case we rely on an adequacy decision of the European Commission (for example, the EU-US Data Privacy Framework) or on the Standard Contractual Clauses approved by the European Commission.
6. Retention
- Inquiries that did not lead to a contract - up to 12 months after the last contact.
- Contracts, invoices and payment records - for the period required by Cypriot tax and accounting legislation (at least six years).
- Photos and videos used with your consent - until you withdraw consent.
- Technical logs - for a short period determined by our hosting and security provider.
7. Cookies and local storage
We do not use advertising or analytics cookies. The website saves your language choice in your browser's local storage so that it does not redirect you again. Pages with embedded videos load content from YouTube, Vimeo and the Embedly embedding service, and fonts are loaded from Google Fonts; these providers may set their own cookies or receive your IP address under their own privacy policies.
8. Your rights
Under the GDPR you have the right to access your data, have it corrected or deleted, restrict or object to its processing, receive it in a portable format and withdraw your consent at any time. To exercise these rights, write to Odessense.cy@gmail.com. We reply within one month, free of charge.
You also have the right to lodge a complaint with the supervisory authority: the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus (www.dataprotection.gov.cy).
9. Security
The website works only over an encrypted HTTPS connection. Access to client data is limited to people who need it for the services. Card data is handled only by licensed payment service providers.
10. Children
Our services are intended for adults and organisations. We do not knowingly collect personal data of children under 16 without the consent of a parent or guardian.
11. Changes and contact
We may update this Policy; the current version is always published on this page with its date. Contact: ODESSENSE LTD, Nikou & Desponas Pattichi, 105 UMG HOUSE, Flat/Office 1-2, 3070 Limassol, Cyprus, email Odessense.cy@gmail.com, phone +357 99 958285.
This Policy is published in English, Russian and Ukrainian. In case of discrepancy, the English version prevails.
Contact us
Questions about a booking, an invoice or a payment - we usually reply the same business day.
Reg. No. HE 497696
Nikou & Desponas Pattichi, 105 UMG HOUSE, Flat/Office 1-2, 3070 Limassol, Cyprus
Odessense.cy@gmail.com · +357 99 958285