Privacy Policy

Last updated: 27 September 2026

1. Data Controller

As the Data Controller, I determine the purposes and means of processing your personal data. You may contact me at any time regarding your data rights or this policy.

2. Scope of This Policy

This policy covers personal data collected through:

• This website (www.petrohrys.com) and all subpages
• All mobile applications published by Petro Hrys on the Apple App Store and Google Play Store
• Any email communications with me

3. Core Privacy Principles

All apps I build are designed around privacy by default and privacy by design (Article 25 GDPR):

• No user accounts required to use any app
• Files and documents are processed locally on your device and never uploaded to my servers
• No advertising SDKs, no tracking pixels, no behavioural profiling
• No sale or transfer of personal data to third parties for commercial purposes
• Data minimisation: I collect only what is strictly necessary

4. What Personal Data I Collect and Why

4.1 Website Analytics (www.petrohrys.com)

This website uses Google Analytics 4 (Google Ireland Ltd.) to understand how visitors use the site. The following data is collected automatically:

Google Analytics is configured with IP anonymisation enabled. Data is processed under Google's Data Processing Agreement. You can opt out at any time by installing the Google Analytics Opt-out Browser Add-on.

4.2 Email Communications

When you contact me by email, I process your email address and any personal data you include in your message. This data is used solely to respond to your enquiry. The legal basis is Art. 6(1)(b) GDPR (performance of a contract or pre-contractual steps) or Art. 6(1)(f) (legitimate interest in responding to communications).

4.3 App Usage Data

My apps process files and data entirely on your device. No file content, document data, or personally identifiable information is transmitted to my servers during normal app use. Where an app integrates with Apple's CloudKit or similar device-native services, data is governed by Apple's own privacy policy, not mine.

Some apps may use Apple's crash-reporting framework (CrashKit / TestFlight diagnostics) if you have enabled "Share with App Developers" in your iOS settings. This data is anonymised and governed by Apple's privacy policy.

4.4 In-App Purchases

All payment transactions are handled exclusively by Apple (App Store) or Google (Google Play). I do not receive, store, or process your payment card details. Purchase receipts may be validated with Apple/Google servers to confirm entitlements.

4.5 Weather in the Homepage Header (HELPERG)

The homepages show a weather card in the header, with its details in a section just below it, that uses the weather service of HELPERG (HELPERG LLC, helperg.com), with forecast data from MET Norway (Norwegian Meteorological Institute, CC BY 4.0).

• When anything is sent. Opening a homepage makes the weather card contact HELPERG only if you chose a city here before or accepted analytics on this website. (WebmasterID, an analytics tool also provided by HELPERG, runs only if you accept analytics; see sections 5 and 6.) Your device’s time zone is read in your browser only to suggest a city by name; the time zone itself is never sent or saved, and the suggested city is never saved as your city. The suggested city’s weather is requested when you ask for it or, if you accepted analytics, as soon as a homepage opens: accepting analytics in the banner also turns this on, and declining or withdrawing it through “Cookie settings” turns it off. Otherwise the weather card contacts HELPERG only after you act — you choose a city, ask for the suggested city’s weather, or press “Use my location” — or, if you chose a city here before, each time you open a homepage. Your position is never read automatically, whether or not you accepted analytics.
• What is sent. Your browser loads HELPERG’s city list and weather script (the script runs on this page) and sends a request with a point and your °C/°F choice. The point is the chosen city’s coordinates or — only after you press “Use my location” and allow it in your browser — your position rounded to about 1 km; if your position is within about 15 km of a listed city, that city’s coordinates are sent instead. These requests carry no cookies and no referrer, but like any web request they show HELPERG and its hosting provider your IP address, your browser details and that the request came from this website. HELPERG and its host keep standard request logs, as described in HELPERG’s privacy policy. When HELPERG has no fresh copy of the forecast, it asks MET Norway using the coordinates only; your IP address is not passed on. HELPERG is based in the United States, and the request may be processed there. HELPERG handles these requests, and its logs, under its own privacy policy.
• Detailed forecast. The detailed-forecast buttons open HELPERG’s weather page as an ordinary visit to helperg.com. For a city you chose from the list, its short name is part of that page’s address (for example ?place=berlin), so HELPERG and its host receive it and may keep it in their request logs. A time-zone suggestion, a position from “Use my location” and the listed city it matched are never put in the address. From then on HELPERG’s own cookies, consent and analytics rules apply.
• Stored in your browser. The short name of a city you choose from the list (local storage, until you press “Forget saved city” or clear site data; it then loads each time you open a homepage), your °C/°F choice if you change it (local storage, until you clear site data), and the last reading for a city you chose or a suggested city whose weather was loaded (session storage: reused without a new request for 10 minutes, then shown as “last known” while a new reading loads; removed when the tab closes). A position from “Use my location”, and the listed city it matched, are kept in the page’s memory only and never stored.
• Analytics. The weather card’s code sends nothing to Google Analytics or WebmasterID. If you have accepted analytics, both tools record your use of the page as usual: Google Analytics may record that a detailed-forecast form was used, with the address of HELPERG’s weather page (for example https://helperg.com/data/weather/), and WebmasterID may record that buttons in the card were clicked and that the forecast form was sent to /data/weather/. When checked in September 2026, neither received the city, the coordinates or the time zone. Because WebmasterID is also provided by HELPERG, HELPERG receives these analytics events as well as the weather requests.
• Legal basis. Art. 6(1)(f) GDPR — my legitimate interest in providing a weather function you ask for. When the suggested city’s weather loads because you accepted analytics: your consent, Art. 6(1)(a) GDPR, which you can withdraw at any time through “Cookie settings” in the footer. The rest of the website works without it.

5. Cookies and Tracking Technologies

This website uses the following cookies:

Analytics is off until you accept it. On your first visit a banner asks; nothing analytic is loaded or requested unless you agree, and declining loads nothing at all. Accepting also makes the homepages load the weather for the city your time zone suggests, from HELPERG (see 4.5). You can change your mind at any time through the Cookie settings link in the footer of every page. Only the choice itself is stored, in your browser, and it is never sent anywhere. You can also control cookies through your browser settings. Disabling analytics will not affect your ability to use this website.

6. Third-Party Services and Data Processors

I have Data Processing Agreements (or equivalent contractual safeguards) in place with all data processors. Where data is transferred outside the European Economic Area (EEA), such transfers are covered by Standard Contractual Clauses (SCCs) approved by the European Commission. The weather card is listed for completeness: your browser contacts HELPERG directly, HELPERG handles those requests under its own privacy policy (see 4.5), and the agreements and clauses described in this paragraph are not claimed for it.

7. Data Retention

When data is no longer needed for its stated purpose and retention period, it is securely deleted or anonymised.

8. Your Rights Under the GDPR

If you are located in the European Economic Area (EEA), UK, or Switzerland, you have the following rights under applicable data protection law:

• Right of access (Art. 15 GDPR): Request a copy of the personal data I hold about you.
• Right to rectification (Art. 16 GDPR): Request correction of inaccurate or incomplete data.
• Right to erasure / "right to be forgotten" (Art. 17 GDPR): Request deletion of your personal data, subject to legal retention obligations.
• Right to restriction of processing (Art. 18 GDPR): Request that I limit processing while a dispute is resolved.
• Right to data portability (Art. 20 GDPR): Receive your data in a structured, machine-readable format.
• Right to object (Art. 21 GDPR): Object to processing based on legitimate interests; I must cease unless I can demonstrate compelling legitimate grounds.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
• Rights related to automated decision-making (Art. 22 GDPR): I do not use automated decision-making or profiling that produces legal or similarly significant effects.

To exercise any of these rights, contact me at hrhelperg@gmail.com. I will respond within 30 days as required by Art. 12 GDPR. I may need to verify your identity before fulfilling a request.

9. Right to Lodge a Complaint

If you believe I have processed your personal data unlawfully, you have the right to lodge a complaint with a data protection supervisory authority. In the EU, you may contact the authority in your country of residence or the authority where the alleged infringement took place. A list of EU supervisory authorities is available at edpb.europa.eu.

10. Children's Privacy

My services are not directed to children under 16 years of age (or the applicable minimum age in the relevant EU member state). I do not knowingly collect personal data from children. If you believe a child has provided personal data to me, please contact me immediately at hrhelperg@gmail.com and I will delete it promptly.

11. Data Security

I implement appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These include:

• HTTPS encryption for all web traffic (TLS 1.2+)
• Local-only data processing in apps (no server transmission)
• Access controls limiting who can access any data I do hold
• Regular review of third-party data processors and their security practices

No method of transmission or storage is 100% secure. In the event of a data breach that is likely to result in high risk to your rights and freedoms, I will notify you and the relevant supervisory authority within the timeframes required by law.

12. International Data Transfers

Some third-party services (e.g. Google Analytics) may transfer data to servers located outside the EEA, including the United States. Such transfers are safeguarded by Standard Contractual Clauses (SCCs) or other approved transfer mechanisms under Chapter V GDPR. You may request information about these safeguards by contacting me. The weather card’s requests go from your browser directly to HELPERG, which is based in the United States; see 4.5. No transfer safeguard under Chapter V GDPR is claimed for them.

13. Changes to This Policy

I may update this Privacy Policy from time to time to reflect changes in my services, legal obligations, or data practices. The "Last updated" date at the top of this page indicates when the policy was last revised. Material changes will be communicated via a notice on this website. Continued use of my services after the effective date constitutes acceptance of the updated policy.

14. Contact