Privacy policy

1. Who processes your data

The data controller and owner of this site is a private individual working under the name Restored by Alex (“I”, “me”). The postal address is given below; the email address for enquiries is in section 11.

2. What this policy covers

Everything you send through the order form on this site, any correspondence that follows about your request, and the visitor statistics for the site.

Processing is governed by the Serbian Law on Personal Data Protection (Official Gazette of the Republic of Serbia No. 87/2018). If you are in the European Union or the European Economic Area, the EU General Data Protection Regulation (GDPR) also applies, and in the United Kingdom the UK GDPR. Data of Russian citizens is processed in compliance with Russian Federal Law No. 152-FZ of 27 July 2006 “On Personal Data”.

3. What I receive

What you enter yourself when sending a request:

• your email address — without it I have nowhere to send the quote;
• your name or how you would like to be addressed — optional; the field can be left blank;
• the description of the job, in your own words;
• the photograph files you attach;
• technical details of the request: date and time, file sizes and formats;
• your IP address — used only to protect the form against automated submissions and not stored with the request.

Visitor statistics are also collected by Yandex Metrica — see section 6.

4. A note on the photographs

Old photographs almost always show people, often people who have died. I understand what that means and handle them accordingly.

Photographs are processed for one purpose only: to carry out your order — to assess the work, restore the image and show you the result. I do not use them to identify anyone, I do not pass them on to third parties, and I do not upload them to third-party automated processing services.

I will only publish your photographs among the examples on this site or on social media with your separate, explicit consent, which I will ask you for directly. Silence does not count as consent.

5. Why I need your data and on what legal basis

• to reply to your request with a price and timescale — steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR);
• to carry out the order, deliver the finished file, correspond with you and make revisions — performance of a contract with you (Art. 6(1)(b) GDPR);
• to protect the form against automated submissions and to keep a record of completed orders — my legitimate interest (Art. 6(1)(f) GDPR);
• to collect visitor statistics — my legitimate interest in knowing whether the site works well for its visitors (Art. 6(1)(f) GDPR).

By sending the form you also consent to the processing of your data: the form cannot be sent without ticking the consent box. You may withdraw your consent at any time; this does not affect the lawfulness of processing carried out before you withdrew it.

Your email address, a description of the job and at least one photograph are required; your name is optional. I do not make decisions about you based solely on automated processing, and I do not send marketing emails.

6. Visitor statistics and cookies

This site uses Yandex Metrica, an analytics service provided by Yandex LLC (Russia). It sets cookies in your browser and collects information about your visit: device and browser, approximate location based on your IP address, where you came from and which pages you viewed. Its Session Replay feature records scrolling and clicks on the page; anything you type into the form, and the names of attached files, are excluded from the recording.

You can opt out of Yandex Metrica by blocking cookies for this site in your browser settings or by installing the Yandex opt-out add-on: yandex.com/support/metrica/en/general/opt-out. The site and the form work just as well if you opt out.

7. How long I keep your data

• if you upload files but never send the form, they are deleted within two days;
• if you never reply to my quote, the files and correspondence are deleted after 90 days;
• once the work is complete, the source files and the result are kept for 12 months so that you can come back for another copy, and are then deleted;
• at your request, I will delete everything sooner, at any time.

8. Who I share your data with

I do not sell, rent out or hand over your data to third parties for their own purposes.

For technical reasons, your data passes through service providers (data processors) without which the site and my email could not run: Cloudflare, Inc. (USA) — site hosting and protection of the form against automated submissions; Yandex LLC (Russia) — the Yandex Disk cloud storage where uploaded files are kept, the mailbox I correspond from, and Yandex Metrica.

For visitors from the EU, this is a transfer of data outside the EU. There is no European Commission adequacy decision for Russia, so files and correspondence are transferred there only to the extent necessary to carry out your request (Art. 49(1)(b) GDPR). Cloudflare participates in the EU–U.S. Data Privacy Framework.

9. How I protect your data

• the site runs over an encrypted HTTPS connection;
• uploaded files are kept in storage with no public access: they can only be opened from my own account;
• nobody but me has access to requests;
• the form is protected against automated submissions.

10. Your rights

At any time you may:

• find out what data I hold about you and get a copy of it;
• have inaccurate data corrected;
• have your data and the files you sent deleted;
• ask me to restrict processing, or object to it;
• receive your data in a machine-readable format;
• withdraw your consent to processing.

You also have the right to lodge a complaint with a supervisory authority: in Serbia, the Commissioner for Information of Public Importance and Personal Data Protection; in the EU, the data protection authority of your country; in the UK, the Information Commissioner’s Office (ICO); in Russia, Roskomnadzor. It is usually quicker, though, to write to me first.

11. How to reach me

For any question about this policy, or to have your data deleted or withdraw your consent, send me an email. I reply within 30 days; deletion requests are usually dealt with on the same or the next working day.

imgrestore@yandex.ru

12. Changes to this policy

If this policy changes, I will publish the new version on this page and update the date at the top. Changes do not apply retroactively: the version in force when you sent your request is the one that governs it.