Skip to content

This website is still under development, so some information may not be accurate yet.Under development · details may not be accurate

Stefan Borisov
Get in touch

Privacy Policy

Last updated 9 August 2026

1. Who I Am

This website (stefanborisov.com) is operated by Stefan Borisov, based in Bulgaria. For the purposes of the General Data Protection Regulation (GDPR), I am the data controller for any personal data described in this policy. You can reach me at stefbborisov@gmail.com.

2. What I Collect

I collect very little, and only in two situations.

  • Contact form. If you send me a message, I receive the name, email address and message you type in.
  • Analytics. When you view a page, I receive aggregated statistics about the visit — see section 5.

I do not ask for or collect anything else. There are no accounts, no advertising, and no profiling.

3. Why I Process It, and My Legal Basis

Under Article 6 of the GDPR I must have a lawful basis for processing personal data. Mine is legitimate interests (Article 6(1)(f)) in both cases:

  • To reply to your message. You contacted me and expect an answer; I cannot give you one without your email address.
  • To understand how the site is used. Knowing which pages are read helps me maintain and improve the site. This is measured in aggregate and does not identify you.

In both cases I have considered whether my interest is outweighed by your privacy rights. Because the data is minimal, is never sold or used for advertising, and is not used to build a profile of you, I consider the balance appropriate. You can object at any time — see section 8.

4. Cookies and Local Storage

This website sets no tracking or advertising cookies, and the analytics described below use no cookies at all.

The contact form does save the name and email address you type into your browser's local storage, so the fields are already filled in if you come back to write again. This stays on your device, is never sent anywhere as a result of being stored, and holds nothing you did not type yourself. Clearing your browser's site data removes it.

5. Analytics

This site uses Umami, a privacy-focused analytics service. Umami sets no cookies, stores nothing on your device, and does not track you across other websites.

It records the page visited, the referring site, and your browser, operating system, device type and country. Your country is derived from your IP address, which is not stored. Your visit is identified by a value derived from a daily-rotating key, so the same visitor cannot be recognised from one day to the next.

It also counts interactions such as CV downloads, clicks through to a project's code or live site, and contact form submissions. These are counts only — they record that something was clicked, not who clicked it.

6. Who Else Handles Your Data

I use a small number of service providers who process data on my behalf. I do not sell, trade, or rent your information to anyone.

  • Brevo — delivers contact form messages to my inbox.
  • Umami — provides the analytics described above.
  • My hosting provider — serves the website and keeps standard server logs.

Some of these providers may process data outside the European Economic Area. Where that happens, it is covered by the safeguards those providers put in place, such as Standard Contractual Clauses or an adequacy decision.

7. How Long I Keep It

  • Contact messages — as long as needed to deal with your enquiry and any follow-up, then deleted.
  • Analytics — retained for up to 6 months, in aggregate form.
  • Local storage — until you clear your browser's site data.

8. Your Rights

Under the GDPR you have the right to access your personal data, to have it corrected or erased, to restrict or object to how it is processed, and to receive it in a portable format. Because I process so little, most requests amount to asking me to delete an email you sent.

To exercise any of these rights, email me at stefbborisov@gmail.com. I will respond within one month.

If you believe I have handled your data improperly, you also have the right to complain to a supervisory authority — in Bulgaria, the Commission for Personal Data Protection (cpdp.bg), or the authority in your own country of residence.

9. Security

This site is served over HTTPS, and access to the inbox that receives contact messages is protected by strong authentication. No system is perfectly secure, so please do not send sensitive personal information through the contact form.

10. Changes to This Policy

I may update this policy from time to time. The date at the top of this page shows when it was last changed.

11. Contact

If you have any questions about this Privacy Policy, you can reach me at stefbborisov@gmail.com.