Privacy Policy

Who is responsible

The party responsible for the personal data submitted through this site is the organization that operates Kirtova. You can reach it at contact@kirtova.com to exercise your rights or to request its full identifying details.

The data you submit

The information you voluntarily submit may include your name, email address, city, specialty, and the name or website of your practice, along with any comments you choose to add. We receive this data directly from you. We don’t ask for any data about your clients or your internal operations, and we don’t collect special categories of data (health, origin, beliefs) or data from minors.

What it’s used for

Submitted information may be used to: respond to your request; assess whether your spot — your specialty in your city — can be worked on; prepare and send you your free Snapshot; maintain communication related to Kirtova’s services; and operate and improve the site. We don’t sell your data and don’t share it with third parties for commercial purposes.

Legal basis

Where the GDPR or an equivalent law applies, we process your data: (i) to respond to your request and take pre-contractual steps, based on your consent; and (ii) to comply with legal obligations. You may withdraw consent at any time, without affecting the lawfulness of prior processing.

Automated decisions

We make no decisions based solely on automated processing, and we do no profiling, that produces legal effects concerning you or similarly significantly affects you.

What we work with

Kirtova’s work relies on publicly accessible information about your practice — what ChatGPT, Gemini, and Perplexity can consult before answering. It requires no access to your internal systems, private databases, or confidential information. If a formal engagement were to involve non-public information, confidentiality obligations would be addressed separately in a written agreement.

Sharing

We sell no personal or business data. Information may be processed by external infrastructure providers used to run the site — hosting, form handling, and communication. These providers process data under our instructions and in accordance with applicable law.

International transfers

Operating the site may involve processing data in countries other than yours. Where data protected by the GDPR is processed outside the European Economic Area, the transfer relies on an appropriate safeguard recognized under applicable law.

Retention

Contact details are kept only as long as reasonably necessary — as a rule, for the duration of the exchange and up to 12 months after the last contact — and are deleted earlier upon your request.

Cookies and analytics

This site uses only essential cookies, required for its basic operation. It uses no advertising cookies and no third-party analytics services, and therefore requires no consent banner. To display the name of your city, we use your browser’s time zone — never your IP address.

Your rights

Wherever you are, you can exercise the rights your applicable law grants you — generally: access, rectification, updating, deletion, restriction, objection, portability, and withdrawal of consent. To do so, write to contact@kirtova.com; we handle requests within the legally required timeframes.

• United States (including California — CCPA/CPRA): we do not sell or share your personal information, and you will not be penalized for exercising your rights.
• European Union / EEA and the United Kingdom: GDPR and UK GDPR rights apply, including the right to lodge a complaint with your supervisory authority.
• Switzerland: the rights under the Federal Act on Data Protection (FADP) apply, exercisable through the contact above.
• Mexico (LFPDPPP): you may exercise your ARCO rights — access, rectification, cancellation, and objection — and limit the use or disclosure of your data.
• Any other jurisdiction: the rights under your local law apply, exercisable through the contact above.

Minors

This site is aimed at a professional audience and is not intended for minors.

Security

Appropriate technical and organizational measures are applied to protect the information provided against unauthorized access, misuse, disclosure, or loss.

External services

This site may link to, or rely on, external platforms or infrastructure providers. Kirtova is not responsible for the content, availability, security practices, or privacy policies of those external services.

Updates

This policy may be updated from time to time to reflect operational, legal, technical, or organizational developments. Changes are indicated by updating the date shown above.