Privacy and cookies

1. Controller and contact

The controller of this portfolio is Gaj Gorza, Maribor, Slovenia, creating under the name GORZA VISUALS. For privacy enquiries, rights requests or concerns about a published photograph, the current contact is Instagram @gorza_photography. Mention that your message concerns privacy or a photograph on this site. Do not send an identity document or unnecessary sensitive information in your initial message.

2. Technical information during a visit

To deliver the site and protect it against abuse, hosting provider Cloudflare processes technical information such as IP addresses, requested URLs, request times, browser and network information, and error or security event data. The purpose is to operate and secure the portfolio and keep it available. The legal basis for this processing in the operation of the site is the legitimate interest in a secure, functioning website under Article 6(1)(f) GDPR.

The site code does not create a separate visitor database, profile visitors or make automated decisions. Technical information is needed to establish a connection. Cloudflare retains it according to operational and security needs, incident handling and applicable legal requirements; further retention criteria appear in its privacy policy.

3. Messages and requests

If you contact me, I process your username, contact details you provide, message content and any attachments to respond and handle your request. Ordinary correspondence relies on the legitimate interest in responding under Article 6(1)(f) GDPR. Compliance with legal obligations and handling GDPR rights requests relies on Article 6(1)(c).

Information is retained until the enquiry is resolved and afterwards only as necessary to document its resolution, establish or defend legal claims, or meet a legal obligation. Information and attachments no longer needed for those purposes are deleted. Providing information is voluntary; without the details needed to understand and answer a request, it may not be possible to resolve it. Instagram's own rules also govern message retention on that platform.

4. Published photographs and removal requests

The photographs form an author's portfolio. Where a person is identifiable, their image and its context may be personal data. Publication of portraits and other identifiable-person photographs for which public-publication permission has been obtained relies on consent under Article 6(1)(a) GDPR. A child's legal representative provides permission for such publication. Permission to take a photograph does not by itself authorise every subsequent use.

A photograph remains published while it serves the portfolio's purpose and an appropriate basis for publication exists. Consent may be withdrawn at any time without affecting the lawfulness of earlier processing. For clarification, a removal request or a concern about your rights, contact the author with the gallery URL and a description of the photograph. Each request is reviewed in its circumstances. This notice does not limit personality or image rights.

Public photographs are accessible worldwide and may be found by search engines and other people. Removing an image from this portfolio does not automatically remove independent copies held by others.

5. Hosting and external links

Cloudflare, Inc. hosts and delivers this site through its global network. It acts as a processor for customer content and logs, and as a separate controller for certain network and security purposes. Processing may take place outside the European Economic Area. Cloudflare provides EU standard contractual clauses and appropriate additional safeguards for restricted transfers. Details and a copy of the provisions are available in its data processing addendum and privacy policy.

Photographs, fonts and application code load from the same website. Instagram is not embedded: it opens only when you select a link. Processing on that external platform, including messages sent there, is governed by Instagram / Meta's privacy rules. Information is disclosed to competent authorities where required by law.

6. Cookies and similar technologies

This portfolio's own code does not set cookies or use browser local or session storage. There is no Google Analytics, advertising pixel, embedded social-media feed, newsletter sign-up or contact form. Consent for those optional technologies is therefore not currently collected.

Cloudflare may use its technical security mechanisms where necessary. Their purpose and any strictly necessary security cookies are described in Cloudflare's cookie documentation. If optional tracking technologies are introduced later, this notice and consent arrangements will be updated before their use.

7. Your rights

Subject to the GDPR's conditions, you have rights of access, rectification, erasure, restriction, portability and objection to processing based on legitimate interests. Consent may be withdrawn at any time. Rights are not unlimited in every circumstance. Send a request through the contact above. A response is normally provided within one month; where a lawful extension applies, you will be told why and for how long.

If you believe processing infringes applicable rules, you may complain to the Information Commissioner of the Republic of Slovenia or another competent supervisory authority. Judicial remedies remain available.