This Privacy Policy explains how Todor Stoyanov (“I”, “me”, “TSTO”) collects, uses, and protects personal data when you visit todorstoyanov.com and related pages (including Bulgarian versions under /bg/).
Controller
Website operator / data controller: Todor Stoyanov
Location: Sofia, Bulgaria
Email: hi@todorstoyanov.com
Website: https://www.todorstoyanov.com/
For EU/EEA visitors, I act as the controller of personal data processed through this website under the GDPR and applicable Bulgarian law.
What data I collect
- Contact form data — name, email address, and message you submit through the site contact form. Messages are delivered by email to me. The form uses a honeypot field and basic rate limiting to reduce spam.
- Newsletter data — email address if you subscribe via the footer newsletter form (when that form is active).
- Technical / analytics data — only when you allow analytics: approximate usage data such as pages viewed, referrer, device/browser information, and related identifiers processed by Google Analytics (via Google Site Kit).
- Preference data — your cookie/analytics choice and (if you use it) color theme preference, stored in your browser (see Cookie Policy).
- Comments — if comments are enabled on a page or post, the fields you submit plus spam-prevention metadata (IP address and user agent).
- Server logs — standard web-server logs (IP address, request time, user agent) may be created by the hosting environment for security and reliability.
Why I process data (purposes & legal bases)
- Respond to enquiries / projects — to reply to contact messages and discuss potential work (legitimate interests / steps prior to a contract; or consent where required).
- Newsletter — to send updates you opted into (consent; you can unsubscribe anytime).
- Analytics — to understand traffic and improve the site (consent via Cookie Settings).
- Security & abuse prevention — to protect the site and forms (legitimate interests).
- Legal obligations — where I must keep or disclose information under law.
Cookies and similar technologies
I use necessary storage for basic site functions and optional analytics only after you opt in. Preferences can be changed anytime with Cookie Settings in the footer. Full details: Cookie Policy.
Sharing and processors
I do not sell personal data. Data may be processed by trusted service providers only as needed to run the site:
- Web hosting — to store and serve the website.
- Email delivery — to receive contact-form messages and (if used) newsletter mail.
- Google (Site Kit / Analytics) — only if you grant analytics consent.
- Language / CMS plugins — WordPress and Polylang to publish EN/BG content.
These providers process data under their own terms and, where applicable, data-processing arrangements.
International transfers
If a provider processes data outside the EU/EEA (for example Google Analytics), transfers rely on appropriate safeguards such as Standard Contractual Clauses or the provider’s stated transfer mechanisms.
Retention
- Contact messages — kept as long as needed to handle your enquiry and related follow-up, then deleted or archived as appropriate.
- Newsletter — until you unsubscribe or ask for deletion.
- Analytics — according to the retention settings configured in Google Analytics / Site Kit.
- Server logs — typically for a short operational period set by the host.
Your rights
Depending on applicable law (including the GDPR), you may have the right to access, rectify, erase, restrict, or port your personal data, to object to certain processing, and to withdraw consent at any time without affecting prior lawful processing.
To exercise these rights, email hi@todorstoyanov.com. You also have the right to lodge a complaint with a supervisory authority. In Bulgaria this is the Commission for Personal Data Protection (CPDP).
Children
This site is not directed at children. I do not knowingly collect personal data from children under 16.
Updates
I may update this policy when the site, tools, or legal requirements change. The current version is always published on this page.
Last updated: 15 August 2026