Privacy

Who is responsible

Dimo Dimov, an independent photographer based in Uusikaupunki, Finland, is responsible for this website and the personal data processed through it. For any privacy question or request, use the contact form on the About page.

What I collect, and why

• Contact form. Your name, email address and message are sent to my email inbox so I can reply to you. I use them only for that conversation and never for marketing. Legal basis: your request (GDPR Art. 6(1)(b)) and my legitimate interest in answering it (Art. 6(1)(f)).
• Spam protection. To stop automated spam, the form limits how many messages can be sent from one IP address in a short time. If a message is blocked as spam, its IP address and email address are written to the server log.
• Server logs. Like any web server, it records each request (IP address, page, browser) in its access log, and the site keeps technical logs (errors, and a note of who sent an inquiry: name and email, without the message). Both are deleted automatically after 14 days.
• Visitor statistics. To see how many people visit, the site counts page views without cookies and without storing IP addresses. Each visit is saved only as the date, the page, the website you came from (e.g. google.com) and an anonymous code that changes every day, so a visitor cannot be identified or followed from one day to the next.
• Likes. Liking a photo only increases an anonymous counter. Nothing about you is stored.

How long I keep it

Inquiries stay in my inbox for as long as our conversation or a resulting project needs them, and I delete them on request. Server logs are removed after 14 days. Spam-protection counters reset within minutes.

Cookies

The site sets only two strictly necessary cookies: a session cookie and a security token (XSRF-TOKEN) that protects the contact form from forged submissions. Both expire after two hours of inactivity. (The site owner's own devices also get a cookie that keeps their visits out of the statistics; visitors never receive it.) There are no analytics, advertising or social-media cookies, which is why there is no cookie banner.

Third-party services

Everything you load here — pages, photos, fonts, icons and scripts — comes from this site's own server. Your browser does not connect to Google, CDNs or any other outside service while you browse.

The only exception is email: contact-form messages are delivered to my Gmail inbox (Google), which may process data outside the EU under its own safeguards.

Your rights

Everything I have about you is in my email inbox: your name, your email address and the messages you sent. If you'd like to see it, correct it or have it deleted, just ask through the contact form and I'll take care of it within one month. Server logs clear themselves after 14 days.

If you believe your data is handled unlawfully, you can also file a complaint with the Finnish Data Protection Ombudsman at tietosuoja.fi.