Privacy Policy
Last updated
This is a personal CV site. It has no accounts, no ads and no tracking profiles. The only time it handles anything personal is when you deliberately send me a message. Here's the full picture, in plain language.
Who's responsible
Dionysis Balaskas, based in Greece. You can reach me at dionysisbalaskas@gmail.com for anything in this policy, including the requests listed under Your rights.
I'm the data controller for this site under the GDPR.
The contact form
If you fill in the contact form, I receive the name, email address and message you typed. That's it — there are no hidden fields beyond a honeypot input that only automated spam bots ever fill in, and whose contents I discard.
I use this solely to read your message and reply to you. The legal basis is my legitimate interest in responding to people who contact me (Art. 6(1)(f)), or taking steps at your request before a possible working arrangement (Art. 6(1)(b)).
Your message is delivered by Resend, an email provider based in the United States, acting as my processor. Sending the form means your name, email and message pass through their infrastructure, which involves a transfer outside the EEA.
If you would rather not use the form, just email me directly.
When delivery fails
If Resend can't deliver your message — or the form is temporarily misconfigured — my server writes your name and email address to its error log so that your message isn't silently lost and I can follow up. Those logs live on my server only. They are capped and rotated automatically, so old entries are overwritten rather than kept indefinitely, and they never reach a database or a third party.
IP addresses
To stop the contact form being abused, the server counts recent submissions per IP address. That counter is held in the server's memory only, inside a short sliding time window, and each entry is dropped as soon as the window passes. Your IP is never written to disk, never stored in a database, and is not used to identify or profile you.
Legal basis: my legitimate interest in keeping the form usable and spam-free (Art. 6(1)(f)).
Analytics
I run Umami on my own server to see roughly how many people visit and which pages they read. It's deliberately chosen because it's privacy-friendly:
- it sets no cookies and stores nothing on your device
- it builds no cross-site profile and follows you nowhere else
- I only ever see aggregate numbers, never anything tied to you
No analytics data is sold or shared with anyone.
Cookies
This site sets exactly one cookie, first-party, and only after you change a setting:
| Cookie | What it does |
|---|---|
nuxt-color-mode | Remembers whether you chose the light or dark theme |
It exists purely to keep the site looking the way you left it. There are no advertising, tracking or third-party cookies here — which is exactly why you haven't been nagged by a cookie banner. If you'd like it gone, clear it in your browser settings; the site works fine without it.
How long things are kept
- Your message: kept in my mailbox for as long as our correspondence is relevant, then deleted.
- Rate-limiting data: minutes at most, in memory only.
- Error logs: automatically rotated and overwritten; not archived.
- Analytics: aggregate statistics only, with nothing identifying you.
Your rights
Under the GDPR you can ask me to:
- confirm what personal data of yours I hold, and get a copy of it
- correct anything inaccurate
- delete it
- restrict or object to how I use it
- send it to you, or to someone else, in a portable format
Email me and I'll deal with it — realistically within a few days, and in any case within the one month the GDPR allows.
If you think I've handled your data badly, you're entitled to complain to the Hellenic Data Protection Authority at dpa.gr.
Changes
If this policy changes, I'll update it here and move the date at the top of the page. There's no mailing list to notify, since I don't keep one.