Privacy Notice
What happens to personal data on this site, described as the site is built.
Last updated · Version 1.0
Who is responsible
This site is run by Viktor Yotzev, an individual based in Sofia, Bulgaria. It is not operated by a registered company.
For any question about your personal data, or to use any of the rights listed below, write to [email protected].
What the site collects while you browse
Nothing.
Reading yotzev.com leaves no record of you, on your device or anywhere else:
- The site sets no cookies.
- It writes nothing to localStorage, sessionStorage, IndexedDB or Cache Storage.
- It registers no service worker.
- There is no analytics, no tag manager, and no tracking.
- Loading a page makes zero requests to third-party servers. Every asset comes from this domain.
Open your browser developer tools and check the Network and Application panels yourself.
The contact form
The contact form is the only part of the site that collects personal data, and it collects only what you type into it:
- Your name
- Your email address
- The free-text message you write
The form has no hidden fields, and I attach nothing else to the submission.
Why this data is processed
- Art. 6(1)(b) GDPR: taking steps at your request before entering into a contract, where your message is a project enquiry.
- Art. 6(1)(f) GDPR: my legitimate interest in reading and answering correspondence sent to me.
Who else handles your message
EmailJS delivers form submissions to me, acting as a processor on my behalf. All EmailJS servers run on Amazon Web Services in the United States, so submitting the form transfers your name, email address and message to the USA. Those transfers rely on Standard Contractual Clauses.
EmailJS retains request and email history, including metadata, for 30 days.
EmailJS uses the following subprocessors, all located in the United States:
- Amazon Web Services
- Cloudflare
- Zendesk
- Redis
- Sentry
- Coralogix
Hosting and server logs
The site is served by an Apache origin server behind the Cloudflare CDN. As with any web server, both produce standard request logs, and those logs include IP addresses. I use them for security and abuse prevention.
How long data is kept
- EmailJS: 30 days for request and email history and metadata.
- My mailbox: a message stays there for as long as I need it to deal with your enquiry. If you ask me to delete it, I will.
Your rights
In relation to your personal data you can ask for:
- Access: a copy of the personal data I hold about you.
- Rectification: correction of anything that is wrong or incomplete.
- Erasure: deletion of your data.
- Restriction: a pause on processing while something is being checked.
- Portability: your data in a structured, commonly used, machine-readable format.
- Objection: an objection to processing based on legitimate interest.
Email [email protected] to use any of them.
You can also lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP), the supervisory authority for Bulgaria: cpdp.bg.
Changes to this notice
This is version 1.0 of the notice, last updated . If the way this site handles data changes, I update this notice and change the version and date above.