Privacy Policy | Pavel Istomin / Pika Group

Last updated: October 20, 2026

This Privacy Policy explains how personal data is collected, used, stored, and otherwise processed in connection with the website istomina.space (the "Website").
The Website is operated by DOO Pika Group, Montenegro, in connection with the personal and professional activities of Tatyana Istomina.
For privacy-related questions or requests, please contact gt4nko@gmail.com.

1. Data Controller
DOO Pika Group, Montenegro, acts as the data controller for personal data processed in connection with the operation of this Website and professional activities conducted through the company.
Tatyana Istomina is the person associated with the Website and the primary contact for privacy-related inquiries.
Independent websites, marketplaces, applications, and projects linked from the Website may have their own data controllers and privacy policies.

2. Personal Data We Collect
The Website is primarily informational and does not currently offer user accounts, registration, direct online checkout, or contact forms.
Depending on how you interact with the Website and its associated services, the following categories of information may be processed:
Technical and website usage data
When you visit the Website, technical information may be processed by our website hosting and infrastructure providers, including:

IP address
browser type and device information
operating system
pages requested and access times
technical logs and information necessary for website security and operation

Information you voluntarily provide
If you contact us directly, including by email or through an external communication service, we may receive:

your name or preferred form of address
email address or other contact details
the content of your message
information about your request or proposed consultation
other information you voluntarily choose to share

Information relating to professional services
Where an individual consultation or another professional service is agreed, additional information may be processed to organize and provide that service, maintain necessary communications, and comply with applicable legal obligations.
We ask that you share only information relevant to the purpose of your communication.

3. Purposes of Processing
Personal data may be processed for the following purposes:

operating, maintaining, and securing the Website
responding to inquiries and communications
discussing potential consultations or professional services
arranging and providing agreed services
managing necessary administrative and business records
complying with applicable legal and regulatory obligations
protecting legitimate rights and interests where permitted by law

We do not use information submitted for individual consultations for unrelated marketing purposes without an appropriate legal basis.

4. Legal Bases for Processing
Depending on the circumstances and applicable data protection law, personal data may be processed on one or more of the following grounds:
Pre-contractual steps and contractual necessity: to respond to a request for services, discuss arrangements, or fulfill an agreed engagement.
Legal obligations: to maintain records or comply with requirements imposed by applicable law.
Legitimate interests: to operate and protect the Website, maintain necessary professional communications, and manage legitimate business activities, where those interests are not overridden by applicable individual rights.
Consent: where consent is required for a particular processing activity, including certain optional cookies, marketing communications, or other uses of personal data.
Where processing relies on consent, you may withdraw that consent in accordance with applicable law.

5. Sensitive and Confidential Information
Some individual consultations or professional communications may involve personal or sensitive information.
Such information should be shared only where relevant and through an appropriate communication channel.
Where special categories of personal data are involved, they will be processed only where a valid legal basis and any additional conditions required by applicable law are satisfied.
We do not intentionally collect sensitive personal information from visitors merely browsing the Website.
Information received in connection with agreed professional services will be handled with appropriate confidentiality and access restrictions.

6. Third-Party Service Providers
The Website is built and hosted using Tilda.
Depending on the services used, personal data may be processed by providers supporting:

website hosting and technical infrastructure
email and communications
website security and maintenance
administration, accounting, and legal compliance

We may share personal data with service providers only to the extent reasonably necessary for the relevant purpose and subject to applicable legal requirements.
We do not sell personal data.

7. External Websites and Platforms
The Website may contain links to external services, including:

Etsy
Telegram
Google Drive
independent project websites and other third-party resources

When you follow an external link, the destination service may collect and process personal data under its own privacy policy.
We encourage you to review the privacy information of any external service you choose to use.
Where a separate project or service is operated independently of DOO Pika Group, its own privacy policy and data processing arrangements may apply.
If personal data is subsequently provided directly to DOO Pika Group in connection with an agreed service or transaction, that processing is subject to the applicable privacy information and legal requirements.

8. Cookies and Website Analytics
The Website may use cookies or similar technical mechanisms necessary for its operation, security, and functionality.
The website platform and its infrastructure providers may also process technical information associated with visits to the Website.
Any optional analytics, advertising, or tracking technologies must be assessed separately and, where required by applicable law, used only after obtaining the necessary consent.
If additional analytics, advertising pixels, embedded tools, or tracking technologies are introduced, this Privacy Policy and any relevant cookie notices or consent mechanisms will be updated accordingly.
You may also manage cookies through your browser settings, although disabling certain technical cookies may affect website functionality.

9. Data Retention
Personal data is retained only for as long as reasonably necessary for the purposes for which it was collected, subject to applicable legal obligations.
In particular:

technical records may be retained according to the operational and security requirements of the relevant infrastructure provider
general correspondence may be retained while an inquiry remains active and for a limited period afterward where necessary for legitimate administrative purposes
records relating to agreed services, payments, and business transactions may be retained for periods required by applicable accounting, tax, contractual, or other legal obligations
information no longer required for a legitimate purpose will be deleted or anonymized where reasonably practicable and legally permitted

You may request deletion of your personal data, subject to applicable legal exceptions and retention obligations.

10. International Data Transfers
Some service providers used in connection with the Website or professional communications may process information outside Montenegro or outside your country of residence.
Where international transfers are subject to applicable data protection requirements, we will use appropriate legal grounds and safeguards as required.
The specific processing locations and safeguards depend on the providers and services involved.

11. Your Privacy Rights
Depending on applicable law and the circumstances of processing, you may have the right to:

request access to your personal data
request correction of inaccurate or incomplete information
request deletion of personal data
object to certain processing activities
request restriction of processing
withdraw consent where processing is based on consent
request data portability where applicable
lodge a complaint with a competent data protection authority

To exercise your rights or ask a question about personal data processing, please contact gt4nko@gmail.com.
We may request reasonable information to verify your identity before responding to certain requests.

12. Data Security
We take reasonable technical and organizational measures to protect personal data against unauthorized access, accidental loss, misuse, alteration, or disclosure.
Access to personal information is limited according to the purposes for which it is processed.
However, no internet transmission, communication platform, or electronic storage system can be guaranteed to be completely secure.

13. Children's Privacy
The Website is intended for a general audience and is not specifically designed to collect personal data from children.
We do not knowingly solicit personal data from children through the Website.
Where services or activities involving minors are offered, any necessary parental or guardian authorization and additional data protection requirements will be addressed separately.

14. Changes to This Privacy Policy
This Privacy Policy may be updated to reflect changes in Website functionality, professional activities, service providers, or applicable legal requirements.
The latest version will be published on this page with an updated revision date.

15. Contact
For questions, requests, or concerns regarding personal data and this Privacy Policy, please contact:
Tatyana Istomina
DOO Pika Group, Montenegro
Email: gt4nko@gmail.com