Privacy policy
This site is operated personally by Dimitrios Rarras (demetriosrarras@gmail.com), a freelance full-stack developer based in Ioannina, Greece. This page explains what personal data the site collects, why, how long it's kept, and what rights you have under the EU General Data Protection Regulation (GDPR).
What I collect, and why
The site is a static portfolio. It does not run a database and does not create an account for visitors. There are only two ways your personal data can reach me through this site:
- Contact form submissions. If you fill in the form on
this site, you send me your name, email address, and message. I
receive these as an email at
demetriosrarras@gmail.comand use them only to reply to you. I do not pass them to any third party. - Analytics (only if you accept). If you accept analytics cookies via the banner, an aggregated, anonymous analytics script loads (Google Analytics 4 if configured, otherwise none). It tracks page views, referrer, and rough geographic region. It never captures your name, email, or anything you typed. If you decline analytics, no analytics script loads at all.
I do not run advertising trackers, marketing pixels, or session recording on this site.
Legal basis
- Contact form: your consent (you chose to submit it) plus my legitimate interest in replying to inquiries.
- Analytics: your explicit consent through the cookie banner. You can withdraw at any time by clearing the consent in your browser.
Retention
- Contact-form emails stay in my inbox while the conversation is active, then get archived. You can ask me to delete a message at any point.
- Analytics is aggregated and retained by the analytics provider per its own policy (typically 14 months for Google Analytics 4, configurable).
Third parties / sub-processors
- Email (Google / Gmail) — I receive contact-form messages via Gmail. Google's privacy terms apply: policies.google.com/privacy.
- Google Analytics 4 (optional) — applies only if you accepted analytics cookies. Google's terms as above.
- Static hosting — serves the static files. The hosting provider may keep transient access logs (IP, user agent, timestamps) per its own security policy.
No data is sold or shared with marketing partners.
Your rights
Under GDPR you have the right to:
- Request access to the data I hold about you
- Request correction of inaccurate data
- Request deletion ("right to be forgotten")
- Withdraw consent (you can revoke cookie consent in your browser at any time)
- Lodge a complaint with the Hellenic Data Protection Authority (dpa.gr/en)
To exercise any of these rights, email demetriosrarras@gmail.com. I respond within 30 days.
Changes to this policy
I update the "last updated" date above when the policy changes. Material changes also reset the cookie banner so existing visitors can review again.
Contact
Dimitrios Rarras
Ioannina, Greece
demetriosrarras@gmail.com