Privacy Policy

Last updated: 12 October 2026

Who is responsible for your data

The controller under the GDPR is:

Marios Sofokleous
Tel.: +357 99 111844
Email: [email protected]

What data I process and why

1. Visiting this website

When you visit msof.me, your browser automatically sends technical data: IP address, date and time, requested page, browser and operating system (user agent), and referrer. This data is processed to deliver the website, protect it against abuse (e.g. rate limiting, bot and DDoS protection), and fix errors.

Legal basis: Art. 6(1)(f) GDPR. My legitimate interest is operating a secure, functioning website.
Retention: Server logs are deleted after [14] days, unless needed to investigate a specific security incident.

2. Contact form

When you use the contact form, I process:

Your email address
Your message, and any personal data you choose to include in it
The time you submitted the form and your acknowledgement of this policy

I use this data only to reply to your inquiry and to continue the conversation you started.

Legal basis: Art. 6(1)(b) GDPR where your inquiry relates to a possible job, project or contract; otherwise Art. 6(1)(f) GDPR. My legitimate interest is answering messages sent to me.
Is it required? No, but without an email address I can't reply.
Retention: Deleted 6 months after our last communication, unless we enter a working relationship or I'm legally required to keep it. Deleted data may remain in encrypted backups for up to [30] days until they are overwritten.

3. Emailing me directly

If you email [email protected], the same purposes, legal basis and retention apply as for the contact form.

Cookies

This website does not use cookies for analytics, advertising or tracking. Cloudflare may set strictly necessary security cookies (e.g. __cf_bm) to distinguish humans from bots. These are exempt from consent because they are needed to provide the service securely.

Service providers (processors)

I don't sell your data or share it with anyone for their own purposes. The following providers process data on my behalf, under data processing agreements:

Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany: server hosting; data stored in Germany.
Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA: DNS, secure connection (tunnel), and protection against attacks and spam. All website traffic, including form submissions, passes through Cloudflare's network.
Heinlein Hosting GmbH, Schwedter Straße 8/9A, 10119 Berlin, Germany: email hosting for [email protected]; data stored in Germany.

Transfers outside the EU

Cloudflare is based in the USA and may process data outside the EU/EEA. Cloudflare is certified under the EU-US Data Privacy Framework (European Commission adequacy decision, 10 July 2023). Standard Contractual Clauses also form part of its data processing agreement.

Security

This site is served only over HTTPS. The server has no publicly open web or SSH ports, administrative access is restricted to a VPN, and backups are encrypted. No system is completely secure, but I take reasonable technical and organisational measures to protect your data.

Automated decisions

No automated decision-making or profiling takes place.

Your rights

Under the GDPR you have the right to:

Right to Access: You can request a copy of the personal data I hold about you.
Right to Rectification: You can ask me to correct any inaccuracies in your personal data.
Right to Erasure: You can request that I delete your personal data.
Right to Restrict Processing: You can request the restriction of the processing of your personal data.
Right to Data Portability: You can request to receive your personal data in a structured, commonly used, and machine-readable format.
Right to Object: You can object to the processing of your personal data at any time.

To exercise any of these rights, email [email protected]. I'll respond within one month.

Right to lodge a complaint

You can complain to a data protection supervisory authority, in particular in the EU member state where you live, work, or where the alleged infringement took place. In Cyprus, this is the Office of the Commissioner for Personal Data Protection, Iasonos 1, 1082 Nicosia, [email protected], www.dataprotection.gov.cy.

Links to other websites

This site links to external websites (e.g. GitHub, LinkedIn, X). I'm not responsible for their privacy practices, so please read their privacy policies.

Children

This website is not directed at children. If you believe a child has sent me personal data, contact me and I'll delete it.

Changes to this privacy policy

I may update this policy when my website or services change. The current version is always available on this page, with the date of the last update at the top.