← Back to the home page

Privacy Policy

Last updated: 22 October 2026

This is an English translation of the Bulgarian original. If the two differ, the Bulgarian version prevails.

Here I explain in plain words what personal data I process when you visit lucasgeorgiev.com or send me an enquiry, why I process it, how long I keep it and what rights you have.

1. Who processes the data

The data controller is Tsvetan Georgiev, an individual working as a wedding photographer under the name "Lucas Georgiev".

• Email for data protection questions: lucasgeorgiev@gmail.com
• Phone: 0896/22-86-22

2. What data I process and why

a) When you write to me through the form on the website

• Data: name and phone number (required so I can reply), optionally the date and place of the event, and anything else you choose to write.
• Purpose: to contact you, answer your enquiry and discuss photographing your wedding or event.
• Legal basis: taking steps at your request before entering into a contract (Art. 6(1)(b) of Regulation (EU) 2016/679, the GDPR).
• How it reaches me: the form sends an email to info@lucasgeorgiev.com. The website does not store it in a database.

b) When you call or email me

• I process your phone number or email address and the content of your message only to reply and agree on the details.

c1) When you ask the website assistant a question

• Data: the text of your question (please do not include personal data) and your IP address, which is used only for a short-term limit on the number of questions. The question text is not stored on the website.
• Purpose: to answer your question about the services. The assistant is an AI.
• Processor: the question is sent to Anthropic (USA) to generate the answer; Anthropic processes it only to provide the service.
• Legal basis: your request (Art. 6(1)(b) GDPR) and legitimate interest (Art. 6(1)(f)).

c) Visit statistics (Google Analytics) and advertising (Google Ads) – only with your consent

• Data: which pages you view, how long you stay, your device and browser, your approximate location (city or country), where you came from, including whether you arrived through a Google ad, and whether you sent an enquiry or tapped a call or email link.
• Purpose: to understand how the website is used and whether my ads bring enquiries.
• Legal basis: your consent (Art. 6(1)(a) GDPR), given through the cookie banner. Without consent these tools are not loaded and no data is sent to Google for statistics and advertising.
• I do not sell personal data and I do not make decisions that affect you based solely on automated processing.

d) Technical data from the web server

• The hosting provider records technical data such as IP address and the date and time of the request, so the website works and is protected from abuse.
• Legal basis: legitimate interest (Art. 6(1)(f) GDPR) – a secure and working website.

3. How long I keep the data

• Enquiries that do not lead to a contract: up to 12 months after our last contact, after which I delete them from my mailbox.
• If we sign a contract: for the term of the contract and afterwards as long as the law requires (for example for accounting and tax purposes).
• Google Analytics: user and event data are kept for the period set in Google Analytics (2 or 14 months), after which Google deletes them automatically.
• Cookies: durations are in the table below.

4. Cookies

Cookies are small text files that the website stores in your browser. On your first visit the banner asks whether you allow cookies for statistics and advertising. If you decline, the website works the same way and those cookies are not stored. You can change your choice at any time from the link below or from "Cookie settings" at the bottom of every page.

Change cookie settings

Google Analytics and Google Ads cookies are stored only if you have given consent.

5. Who I share data with

• Hosting and email providers (Hostinger, and Google when email is forwarded to Gmail): they technically store the website and messages and process data only to provide the service.
• Google (Google Analytics and Google Ads): receives data about visits and ads only if you have given consent. More about how Google uses data: Google Privacy Policy. Google may process data outside the European Economic Area; the safeguards it applies are described in its terms.
• CookieYes: the provider of the cookie banner, which stores your choice.
• I do not pass data to anyone else unless the law requires it.

6. Your rights

You have the right to request:

• access to the data I hold about you;
• correction of inaccurate data;
• erasure of your data;
• restriction of processing;
• transfer of your data to another controller, where applicable;
• to object to processing based on legitimate interest.

You can withdraw your cookie consent at any time, without affecting processing before the withdrawal. To exercise a right, write to lucasgeorgiev@gmail.com. I will reply within one month at the latest.

7. Right to complain

If you believe your data is processed unlawfully, you can complain to the Bulgarian Commission for Personal Data Protection (CPDP): 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, www.cpdp.bg, email kzld@cpdp.bg.

8. Changes

If I change how I process data, I will update this page and the date at the top.