Privacy policy.

1. Website operator

This website is a personal portfolio presenting my education, professional experience, technical skills and software projects. It is operated by Orestis Georgiou, a private individual, who is the controller responsible for the processing of personal data on this website within the meaning of the EU General Data Protection Regulation (GDPR).

Country of operation: Cyprus. Email: orestisg.cy@gmail.com. Website: https://orestisg.com. I have not appointed a data protection officer.

The website has no user accounts, registration, contact forms, comment functions or newsletter.

2. Hosting and technical data processing

This website is a static website hosted on Cloudflare Pages, a service of Cloudflare, Inc. When you open a page, your browser sends a request to Cloudflare’s servers. To deliver the page, this request necessarily contains technical data such as your IP address, the requested address, the date and time of the request, and information sent by your browser, such as its type and version and, where applicable, the referring page. Your browser has to send this data for the website to load.

Cloudflare processes this data on my behalf, as my processor under its Data Processing Addendum (opens in a new tab), to deliver the website and to protect it against attacks and misuse. Cloudflare also shows me aggregated statistics derived from this data, such as the number of requests, unique visitors and the main countries of origin; these do not identify individual visitors and no analytics script runs in your browser. I do not use this data to identify visitors and do not combine it with other data. Further information is available in Cloudflare’s privacy policy (opens in a new tab).

The legal basis is Art. 6(1)(f) GDPR. My legitimate interest is to deliver this website to you reliably and to protect it and its visitors against attacks and misuse.

3. Cookies and analytics

This website does not set cookies or use similar technologies such as local storage. It does not use analytics, advertising or tracking tools, and Cloudflare features that would set cookies or add scripts to the website, such as bot challenges and Cloudflare Web Analytics, are not enabled for it.

All fonts and scripts are served from this website’s own domain, and the résumé is a PDF file served from the same domain; downloading it is not tracked. No third-party font, script or content services are loaded when you visit the website.

4. Contact by email

If you contact me by email, I process the information you provide, typically your email address, your name and the content of your message, to read and reply to your message and to continue the conversation, for example about a job or internship opportunity you raise.

The legal basis is Art. 6(1)(f) GDPR. My legitimate interest is to respond to the messages people choose to send me and to follow up on them.

Contacting me is voluntary. You are not required by law or contract to provide personal data; if you do not, I cannot reply to you.

My mailbox is a Gmail account provided by Google Ireland Limited. This is a consumer email service: there is no data processing agreement between Google and me, and Google stores and processes the messages in it under its own terms and privacy policy. See Google’s privacy policy (opens in a new tab).

5. External links

This website contains links to external websites, such as GitHub. These are ordinary links: the website does not embed content, images or widgets from GitHub or other third parties, and no data is sent to those websites unless you follow a link. Once you do, the privacy policy of the respective provider applies.

6. Legal bases and your rights

All processing described in this policy is based on Art. 6(1)(f) GDPR (legitimate interests), as explained in sections 2 and 4. No automated decision-making, including profiling, takes place.

Under the GDPR you have the right to access your personal data (Art. 15), to rectification (Art. 16), to erasure (Art. 17) and to restriction of processing (Art. 18). The right to data portability (Art. 20) applies only to processing based on consent or a contract, so it does not apply to the processing described here. To exercise your rights, contact me at orestisg.cy@gmail.com.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the EU member state of your habitual residence, your place of work or the place of the alleged infringement. In Cyprus, this is the Office of the Commissioner for Personal Data Protection (opens in a new tab).

7. Data retention and international processing

I do not keep visitor logs or run analytics of my own on this website. How long Cloudflare keeps the technical data described in section 2 is determined by Cloudflare, as described in Cloudflare’s privacy policy (opens in a new tab).

I keep email correspondence only for as long as it is needed to handle your enquiry, any recruitment discussion it relates to and relevant follow-up. I delete messages once they are no longer needed for these purposes, unless a legal obligation or another justified reason, such as establishing, exercising or defending legal claims, requires me to keep them longer.

Cloudflare, Inc. is based in the United States, and technical data may be processed there and in other countries where Cloudflare operates. Cloudflare’s Data Processing Addendum provides for such transfers under the EU-U.S. Data Privacy Framework and, where that does not apply, under the European Commission’s standard contractual clauses.

Google may also process messages in my mailbox outside the EU/EEA, including in the United States. In its privacy documentation, Google states that it complies with the EU-U.S. Data Privacy Framework and relies on standard contractual clauses where required.

8. Changes to this privacy policy

I may update this privacy policy if the website or the applicable legal requirements change. The current version is always available on this page, and the date of the last update is shown below.