Legal
Privacy policy
This site is a portfolio. It has no accounts, no newsletter, no advertising and no profiling. This page explains the small amount of data that is processed when you visit it, why, and what you can do about it.
Version 1.0 · in force from 17 October 2026
In short
- Cookies set by this site — none. The site itself sets no cookies at all.
- Analytics — two tools. Umami is cookieless, stores nothing that identifies you and runs on every visit. Google Analytics 4 uses cookies and runs only if you accept it.
- If you reject — Google Analytics is never loaded. Rejecting is exactly as easy as accepting, and nothing is pre-selected.
- Contact form — it is a plain mailto link. Nothing you type is sent to or stored by this website; it opens your own email app.
- Fonts — served from this site's own domain. No request goes to Google Fonts.
- Video — YouTube and Vimeo players load only after you click play, and YouTube is loaded in its no-cookie mode.
- Your choice — you can change or withdraw it at any time via Cookie settings.
Who is responsible for your data
The controller — the person who decides what happens to your data — is:
- Controller — Roman Kantsir, natural person (cinematographer / director of photography), with bases in Bucharest, Romania and Chișinău, Moldova. Contact for anything in this policy: roman.cantir@gmail.com.
- Site — kantsir.eu, a portfolio for Roman Kantsir, cinematographer / director of photography (Bucharest · Chișinău).
- Privacy contact — roman.cantir@gmail.com and a@tarnovski.com
- Data Protection Officer — none appointed. This site is far below the scale at which EU law requires one, and the processing is not of the kind that triggers the requirement.
- EU representative (Article 27 GDPR) — not applicable. The controller is a natural person established in Romania, inside the EU/EEA, so no representative has to be appointed.
What this site is — and is not
This is a static website: plain HTML, CSS and JavaScript files served as they are. There is no application server, no database, no login, no comment function, no newsletter and no shop.
As a consequence, and this is deliberate:
- we do not create user accounts or profiles;
- we do not run advertising, retargeting or social plugins;
- we do not sell, rent or trade personal data, and we do not share it with data brokers;
- we do not make automated decisions about you, and there is no profiling within the meaning of Article 22 GDPR;
- the site is not directed at children and we do not knowingly process children's data.
What data is processed, why, and on what legal basis
Everything that follows is the complete list for this site. "Legal basis" refers to Article 6 GDPR.
3.1 Serving the website to your browser
- Data — your IP address, browser and device type (user-agent), the page you requested, the page you came from, and the date and time.
- Why — without your IP address the page cannot reach you. The same data is used, for a short time, to keep the site online and to block abuse.
- Legal basis — Article 6(1)(f) GDPR, our legitimate interest in operating a working and secure website. This processing is strictly necessary to show you the page you asked for.
- Recipient — our hosting provider, Cloudflare, as our processor.
- Retention — we keep no server logs and no log archive of our own: log archiving (Logpush) is not enabled on our hosting account (checked 17 October 2026). Connection data is processed by the provider only as needed to deliver the site and protect it from abuse.
3.2 Audience measurement with Umami — always on, cookieless
We use Umami, a privacy-focused analytics tool that we operate ourselves on our own server (analytics.tarnovski.com). It is cookieless and does not store personal data on the server.
- Data — the page path, the referring page, the site hostname, screen size, the browser's language setting, a coarse device / browser / operating-system class, a country derived from your IP address (the IP address itself is not stored), and a session token that is not linked to you and is not used to follow you across other websites.
- Why — to understand which work gets looked at, count visits, and see which pages break. Aggregate numbers only.
- Legal basis — Article 6(1)(f) GDPR, our legitimate interest in anonymous audience measurement. It sets no cookies and does not read or write information on your device beyond a session cache, so it does not require your consent under Article 5(3) of the ePrivacy Directive.
- Honest note — because our analytics server sits on a different domain (tarnovski.com), your browser does make a request to that server, which sees your IP address in transit, like any web server. Nothing about you is written down there.
- Recipient — us: we operate that server ourselves (see section 5).
- Your choice — Umami honours your browser's Do Not Track setting. You can also block it like any other script, and the site keeps working.
- Retention — aggregate counts only, nothing that identifies you; we keep them until we delete them, and they can be cleared from the instance at any time.
3.3 Audience measurement with Google Analytics 4 — only with your consent
We may use Google Analytics 4 (property G-ZK27KKBJG3) to get a fuller picture of how the portfolio is used. It is cookie-based, so it is switched off until you actively accept it. If you reject it, or simply do not choose, the Google Analytics script is never downloaded to your browser at all — not even in a restricted form.
- Data — cookie identifiers, your IP address (used by Google to derive an approximate location and then discarded from storage), device and browser information, the pages and videos you view, how long you stay, how you arrived, and approximate location at city level.
- Why — to understand how visitors use the site, which sections are useful and where people leave.
- Legal basis — Article 6(1)(a) GDPR, your consent, together with Article 5(3) of the ePrivacy Directive for storing cookies on your device.
- Recipient — Google Ireland Limited, and Google LLC in the United States.
- Cookies — _ga and _ga_<property>, each with a lifetime of up to two years by default.
- Retention — event data is kept for the retention period configured in the property (2 months by default, up to a maximum of 14 months). We do not enable Google Signals, advertising personalisation or data sharing for this site.
- Withdrawing — open Cookie settings and reject. From that moment the script is not loaded again, and any existing Google Analytics cookies can be removed by clearing your browser data or through the settings you get from that link.
3.4 Writing to us, and the contact form
The contact form on this site is a plain email link. There is no form-handling service and no server-side logic behind it. When you press Send, your own email application opens with the fields pre-filled, and you send the message yourself from your own mailbox. Nothing you type into the form is transmitted to or stored by this website.
- Data — whatever you write in the email: typically your name, your email address and the content of your message, plus the technical information your email provider adds.
- Why — to answer your enquiry, discuss a project, and prepare a possible contract.
- Legal basis — Article 6(1)(b) GDPR, taking steps at your request before entering into a contract, and for general correspondence Article 6(1)(f) GDPR, our legitimate interest in answering people who write to us.
- Recipients — two mailboxes: roman.cantir@gmail.com (production) and a@tarnovski.com (project enquiries and quotes, handled together with our sales representative Andrei Tarnovski). Both are Google mailboxes — Google Workspace for the tarnovski.com address, Gmail for the other — operated by Google as our processor under Google's data processing terms and the EU–US Data Privacy Framework.
- Retention — we delete correspondence 24 months after the last exchange, unless a contract or a legal obligation requires us to keep it longer.
- Not used for marketing — we do not add you to any mailing list and we do not send newsletters.
3.5 Fonts
The typefaces on this site (Archivo, IBM Plex Mono, Instrument Serif) are served from this site's own domain. Your browser makes no request to Google Fonts or to any other font service, so no IP address or other data is disclosed to a font provider for the purpose of displaying text.
3.6 Video: YouTube and Vimeo
Videos on this site are not embedded on the page. A still frame appears instead, and the player loads only if you click it, in a lightbox on top of the page. Before you click, no request is made to YouTube or Vimeo and no cookies are set by them. YouTube videos are loaded from youtube-nocookie.com as an additional safeguard.
- What happens when you click — the player is loaded from youtube-nocookie.com or player.vimeo.com. From that moment the provider receives your IP address, device and browser information, and the video you watched, and it may store cookies or similar information on your device. Their own privacy policies then apply (Google's for YouTube, Vimeo's for Vimeo).
- Legal basis — Article 6(1)(a) GDPR. Clicking play is your consent to that specific transfer, which is why we never load a player without a click.
- Recipients — Google Ireland Limited / Google LLC (YouTube) and Vimeo, Inc.
- Retention — set by those providers, not by us.
- On-click notice — the caption shown with the player names the provider and points to this policy, so you always know which service you are loading.
3.7 Remembering your cookie choice
Your answer to the analytics question is stored in your browser's local storage under the key kantsir-consent, together with the date of your choice and the version of this notice. That is the only thing stored.
- Why — so that we do not ask you again on every page and so that Google Analytics is loaded or blocked according to your wish.
- Legal basis — Article 6(1)(c) and 6(1)(f) GDPR together with Article 5(3) of the ePrivacy Directive: storing this value is strictly necessary to record and honour the consent you gave, so it does not itself require consent.
- Retention — until you change your choice, clear your browser storage, or use the reset below.
- Not transmitted — this value never leaves your browser. It is not sent to us or to anyone else.
Cookies and local storage
- Cookies set by this site — none.
- Cookies set before you interact with anything — none.
- Google Analytics 4 — _ga and _ga_<property>, up to two years, only after you accept.
- Umami — no cookies. A session token is kept in your browser's local storage so that repeat views in the same session are not counted twice.
- Local storage — kantsir-consent, your cookie choice, as described above.
- Video players — YouTube and Vimeo may set cookies or storage, but only from the moment you click play.
- Umami session cache — x-umami-cache, the session token mentioned above. It contains no personal data and is used only to group page views within one visit.
- How to remove all of it — clear cookies and site data for kantsir.eu in your browser settings. Rejecting analytics means no Google cookies are set in the first place.
Who your data is shared with
We do not share your data with anyone for their own purposes. The service providers below act on our instructions (processors) or receive data only because a request from your browser goes to them:
- Cloudflare — hosting and content delivery, security. Cloudflare, Inc. and its EU entities act as our processor under Cloudflare's data processing addendum, which incorporates the Standard Contractual Clauses.
- Google — Google Analytics 4 (only with your consent) and the Gmail mailbox you write to.
- Vimeo, Inc. — only when you click a Vimeo video.
- YouTube / Google — only when you click a YouTube video.
- Google Workspace — the mailbox that receives project enquiries (a@tarnovski.com), a Google service.
- Our own analytics server — analytics.tarnovski.com is operated by us on our own server in Germany (Hetzner, Falkenstein), inside the EU.
- No one else — no advertisers, no social networks, no data brokers, no analytics resellers. We do not sell personal data.
We may also have to disclose data if a law, a court or a competent authority requires it. That has never happened for this site.
Transfers outside the EU / EEA
Some of the providers above are based in the United States. Where personal data is transferred outside the European Economic Area, we rely on the safeguards that EU law requires:
- Google and Vimeo — transfers are covered by the EU–US Data Privacy Framework where the provider is certified, and otherwise by the European Commission's Standard Contractual Clauses together with additional measures.
- Cloudflare — transfers are covered by Standard Contractual Clauses in its data processing agreement.
- Analytics server — self-hosted on our own server in Germany (Hetzner, Falkenstein), inside the EU/EEA, so no transfer outside the EU takes place for analytics.
- What we do not do — we do not transfer data to any country without a lawful transfer mechanism in place.
How long we keep data
- Hosting and security logs — none of our own: we keep no server logs and no log archive (log archiving is not enabled). The hosting provider processes connection data only as needed to deliver the site.
- Umami statistics — aggregate only, nothing that identifies you; kept until we clear it.
- Google Analytics 4 — up to the event-retention setting of the property (2 months by default, 14 months maximum); cookies up to two years.
- Emails you send us — 24 months after the last exchange, longer only where a contract or a legal obligation requires it.
- Your cookie choice — until you change it or clear your browser storage.
When a retention period ends, the data is deleted. Because this site keeps no database of visitors, there is in practice almost nothing to delete: the only lasting record about a visit is aggregate statistics that are not linked to you.
Your rights
Under the GDPR you have the following rights regarding your personal data:
- Access (Article 15) — to be told whether we process data about you and to receive a copy of it.
- Rectification (Article 16) — to have inaccurate or incomplete data corrected.
- Erasure (Article 17) — to have your data deleted, for example an email you sent us once we no longer need it.
- Restriction (Article 18) — to have processing limited while a question about your data is being resolved.
- Portability (Article 20) — to receive the data you gave us in a structured, commonly used, machine-readable format.
- Objection (Article 21) — to object to processing based on our legitimate interests, including the analytics described above. We will stop unless we can show compelling grounds that override your interests.
- Withdraw consent (Article 7(3)) — where processing is based on your consent, you can withdraw it at any time, as easily as you gave it: open Cookie settings and reject. Withdrawing consent does not affect anything that happened lawfully before.
- No automated decisions (Article 22) — there is no automated decision-making about you on this site, and no profiling.
How to exercise them
Write to roman.cantir@gmail.com or a@tarnovski.com and tell us which right you want to use. We will answer within one month; if a request is unusually complex we may extend that by up to two further months, and we will tell you why. Exercising your rights is free of charge. If we cannot tell who you are from the request — for instance if you ask about an anonymous visit — we may ask you for information to identify you, but only for that purpose. Please note that because this site keeps no visitor database, in many cases there will be nothing on our side to hand over or delete; we will tell you honestly if that is the situation.
Complaining about how we handle your data
You have the right to lodge a complaint with a data protection supervisory authority (Article 77 GDPR) — in the country where you live, where you work, or where the alleged infringement happened. We would of course prefer you to contact us first, and we will try to fix the problem.
In Romania, the supervisory authority is the National Supervisory Authority for Personal Data Processing (ANSPDCP):
- Address — B-dul G-ral. Gheorghe Magheru 28–30, Sector 1, cod poștal 010336, București, România
- Email — anspdcp@dataprotection.ro
- Telephone — +40 318 059 211
- Website — www.dataprotection.ro
If you are in the Republic of Moldova, you may also contact the National Centre for Personal Data Protection (CNPDCP): 48 Serghei Lazo Street, MD-2004, Chișinău — centru@datepersonale.md — +373 22 820 801 — datepersonale.md.
How the site is protected
The site is served over HTTPS, so traffic between your browser and us is encrypted. It is a static site, which means there is no login and no database of users to steal. Access to the hosting account and to the mailboxes is protected by strong authentication, and the hosting provider filters malicious traffic at the edge. No system is perfect, but the amount of data at risk here is very small by design — that is the point of the choices described on this page.
Changes to this policy
If the way this site handles data changes — a new tool, a new embed, a new provider — this page is updated and the version number and date at the top change with it. If a change affects what you have agreed to, the consent notice will ask you again rather than assuming your earlier answer still stands.
Current version: 1.0, in force from 17 October 2026.
Contact
- Privacy questions and requests — roman.cantir@gmail.com
- Project enquiries, together with sales — a@tarnovski.com
- Change your cookie choice — Cookie settings
Rezumat în română
Pe scurt, în română
Textul de mai sus, în engleză, este versiunea completă și de referință a acestei politici. Mai jos este un rezumat în română, pentru claritate. Dacă apar neconcordanțe, versiunea în engleză prevalează.
- Operator de date — [DE CONFIRMAT: numele operatorului — persoana fizică Roman Kantsir sau denumirea completă a firmei, forma juridică și sediul; se adaugă numărul de înregistrare / CUI dacă operatorul este o societate.]
- Contact pentru protecția datelor — roman.cantir@gmail.com și a@tarnovski.com
- Fără cont, fără newsletter, fără reclame — site-ul este static, nu are bază de date și nu creează profiluri de utilizatori.
- Cookie-uri puse de site — niciunul. Site-ul nu setează niciun cookie.
- Formular de contact — este un simplu link mailto. Nimic din ce scrieți nu ajunge pe site; se deschide propria aplicație de e-mail, iar mesajul îl trimiteți dumneavoastră către roman.cantir@gmail.com sau a@tarnovski.com.
- Umami (măsurare audiență) — fără cookie-uri, nu stochează date personale, rulează la fiecare vizită. Temei — interes legitim (art. 6 alin. 1 lit. f GDPR).
- Google Analytics 4 — folosește cookie-uri și rulează doar dacă acceptați. Temei — consimțământ (art. 6 alin. 1 lit. a GDPR). Dacă refuzați, scriptul nu este descărcat deloc.
- Fonturi — găzduite pe acest domeniu; nu se face nicio cerere către Google Fonts.
- Video — YouTube și Vimeo se încarcă doar după click; YouTube folosește modul youtube-nocookie.com.
- Transferuri în afara UE/SEE — unii furnizori (Google, Vimeo) sunt în SUA; transferurile se bazează pe EU–US Data Privacy Framework și/sau pe clauzele contractuale standard.
- Drepturile dumneavoastră — acces (art. 15), rectificare (art. 16), ștergere (art. 17), restricționare (art. 18), portabilitate (art. 20), opoziție (art. 21) și retragerea consimțământului (art. 7 alin. 3).
- Cum le exercitați — scrieți la cele două adrese de e-mail de mai sus. Răspundem în cel mult o lună, iar exercitarea drepturilor este gratuită.
- Retragerea acordului — oricând, din Setări cookie.
- Plângeri — vă puteți adresa autorității de supraveghere: ANSPDCP (România) — anspdcp@dataprotection.ro, +40 318 059 211, dataprotection.ro; în Republica Moldova — CNPDCP — centru@datepersonale.md, +373 22 820 801, datepersonale.md.
- Versiune — 1.0, în vigoare din 17 octombrie 2026.