Legal
Privacy Policy
Last updated: 2026-08-28
This site (Georgi Naydenov’s portfolio, at georginaydenov.com) is operated by Georgi Naydenov. The Site has no advertising and does not use behavioural profiling. Optional Vercel Web Analytics is disabled until a visitor explicitly allows it.
1. Controller and contact
Georgi Naydenov is the controller for personal data processed through this Site. For privacy questions, access or deletion requests, use the Contact form linked in the header or footer, or reach out via LinkedIn.
2. Data and purposes
- Contact messages: your name, email address, and message are processed to respond to your enquiry.
- Interface preferences: your dark/light theme choice and text-size/spacing (“Aa”) settings are stored in your browser’s
localStorageso the Site remembers them on your next visit. These values are never transmitted anywhere and are used only to render the interface you selected. - Performance monitoring: Vercel Speed Insights measures page-load and rendering performance (e.g. Core Web Vitals) to help identify slow pages. It runs for every visitor and does not use cookies or collect personal identifiers.
- Optional analytics: after consent only, anonymized page-view and visitor statistics are processed as explained below.
3. Legal bases
Optional analytics is processed only on your consent under Article 6(1)(a) GDPR. You may refuse it or withdraw that consent at any time without affecting access to the Site.
Contact messages and performance monitoring are processed on the operator’s legitimate interests under Article 6(1)(f) GDPR in responding to correspondence and keeping the Site fast and reliable. Providing contact-form information is voluntary, but a response cannot be provided without it.
4. Analytics consent and storage
If you choose Allow analytics, the Site loads Vercel Web Analytics to understand aggregate traffic. Vercel reports pages visited, referrers, approximate country, browser, operating system and device type. Vercel states that Web Analytics does not use cookies, does not tie records to an individual or IP address, and identifies a visitor using a request-derived hash that resets daily.
Analytics is off by default and is not loaded unless you choose Allow analytics in Analytics settingsin the footer. Your preference is stored in localStorageso the Site can respect it; choosing Decline or changing it later prevents future analytics events from being sent.
Speed Insights is separate from Web Analytics and is not gated by this consent choice. It collects only anonymous, aggregate performance metrics, never page content or personal identifiers.
5. Processors and recipients
The Site uses Vercel for hosting, deployment, Speed Insights, and, only after consent, Web Analytics. Contact messages are delivered by email via the Site’s email provider so enquiries can be answered. The Site does not disclose form data to advertisers or third-party analytics tools.
6. Retention
Contact messages are retained only as long as needed to respond to and resolve your enquiry. Your analytics and interface preferences remain in your browser until you change them or clear browser storage. Vercel controls retention of Speed Insights data and any consented aggregate analytics under its applicable service configuration and policy.
7. Your rights and complaints
Subject to applicable law, you may request access, correction or deletion of your personal data, object to processing based on legitimate interests, and withdraw analytics consent at any time. Contact the controller using the details above to exercise those rights.
You also have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP), the Bulgarian supervisory authority, at cpdp.bg.
8. Security and abuse prevention
To limit how often the contact form and CV download can be used from a single source, the Site derives a short-lived, one-way hash of the request’s IP address and keeps it only for this purpose. The hash cannot be converted back into an IP address and is never used to identify you. This processing relies on the operator’s legitimate interest under Article 6(1)(f) GDPR in keeping the Site available and free of abuse.
9. Children and changes
The Site is not directed at children under 13 and does not knowingly solicit their personal data. Material changes to this policy will be reflected in the “Last updated” date above.
