Privacy

Scope

This page covers the personal website at pavlossta.com, including the home page, photography, music, CV, and other main-site pages. It does not cover the Tefteri app documentation pages, which have their own Privacy Policy and GDPR notice.

The site is operated by Pavlos Stathopoulos. For privacy questions or requests, emailprivacy@pavlossta.com.

Request Measurement And Hosting

The site has no accounts, comments, checkout or public contact form. It uses no browser analytics scripts, analytics cookies or analytics browser storage. Vercel Web Analytics and Speed Insights are not loaded.

When server request measurement is enabled, ordinary GET requests for the home page, CV, CV PDF, public photography pages and music page increment fixed daily totals. The measurement database stores only a public page category, UTC day and count. It receives no IP address, visitor or session identifier, referrer, URL query, device information, interaction history or page contents.

Repeat requests, bots and PDF range requests can increment these totals. They do not represent unique people, completed downloads, messages or music plays. Private health, family and time-capsule pages, legal pages, historical archive pages and other unlisted routes are excluded.

Hosting providers necessarily process technical connection data, including IP addresses and request information, to deliver and secure the site. Their operational logs are separate from these daily totals and are not imported into my analytics database.

External Links And Contact

Music videos open on YouTube through ordinary links. Cover preview images are hosted on this site; no YouTube-hosted thumbnails or embedded players are loaded here. GitHub, Spotify, LinkedIn and other external destinations process data under their own terms after you follow their links.

If you email me, I receive your email address and the message you choose to send. Please avoid sending unnecessary sensitive information.

Why Data Is Used

Daily request totals help me understand broad interest in my public portfolio and creative work. Hosting data supports delivery and security. Emails are used to respond to your enquiry.

Where personal data is processed for operation, security or responding to enquiries, I rely on legitimate interests, subject to necessity and balancing against your rights. Aggregate request measurement avoids additional browser storage or access for analytics. This does not make all server-side processing automatically exempt from privacy law.

Sharing And Processors

I do not sell personal data or share it with advertisers or data brokers. Limited data may be processed by service providers that help host, secure, measure, and operate the site, including Vercel and the infrastructure used for the first-party analytics backend. These providers may process data outside Greece or the European Economic Area under their own contractual and legal safeguards.

Retention

The retention target for new daily request totals is 12 calendar months. Automated enforcement is pending activation and verification. Earlier analytics records are kept separately while their retention is reviewed; they are not combined with new request totals. Hosting logs follow the provider's retention practices. Emails are kept as long as needed to respond and maintain a reasonable record of the conversation.

Your Rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to processing of your personal data. You may also have the right to data portability and the right to complain to your local data protection authority. In Greece, the competent authority is the Hellenic Data Protection Authority.

To make a request, emailprivacy@pavlossta.com. I may need enough information to identify the relevant records.

Changes

I may update this notice when the site, analytics setup, or service providers change. The current version will be posted on this page with the last-updated date above.