Privacy Policy

1. Who is responsible

This is the personal branding and portfolio site of Tamar Mkurnalidze MA MSc, Salzburg, Austria. I am the data controller for the small amount of personal information this site handles. You can reach me through the contact page or at tamaramkurnalidze@gmail.com.

The site sells nothing, so no payment or card data is ever collected — there is no checkout, subscription or order process.

2. What I collect, and why

• Messages you send me. If you use the contact form, I store your name, email address and message so I can reply. Legal basis: your consent, given by sending the message.
• Newsletter sign-ups. Your email address and the topics you choose, so I can send the newsletter you asked for. Every email contains a one-click unsubscribe link. Legal basis: consent.
• Basic usage data. Simple, privacy-friendly counts such as which pages were visited, device type and approximate region, so I know whether the portfolio is being read. No advertising trackers, ad networks or behavioural profiling pixels are used.
• Sign-in details. The private area of this site is for my own use only. It is protected by email verification and is not offered to the public.

3. Who else sees it

I do not sell, rent or trade your information — ever. The only parties that process it are the infrastructure providers that run the site on my behalf: hosting and database, authentication, and email delivery. They act on my instructions and may not use your data for their own marketing.

Where a provider sits outside the EEA, appropriate safeguards such as Standard Contractual Clauses or adequacy decisions apply.

4. How long I keep it

Contact messages are kept while the conversation is relevant, and deleted when you ask. Newsletter addresses are kept until you unsubscribe, and removed shortly afterwards. Usage counts are aggregated and not tied to you.

5. Your rights

Under the GDPR you can ask to access, correct, delete or export your information, object to processing, or withdraw consent at any time. You can also complain to the Austrian data protection authority (DSB). Write to the address above and I will respond within one month.

6. Cookies and local storage

Only what is technically needed: keeping a sign-in session and remembering simple preferences. No advertising or cross-site tracking cookies.

7. Security

Traffic is encrypted in transit (HTTPS), access is restricted to least privilege, and the private area is additionally gated by a one-time email code on new devices. No system is perfectly secure, but personal data is never used as a business asset here.

8. Children

This site is a professional portfolio and is not directed at children; I do not knowingly collect their information.

9. Changes

If this policy changes in a meaningful way, the date above is updated.

10. Contact

Privacy questions or requests: contact here.