Privacy Notice

Who controls the data

The data controller is Mikhail Varushichev, Belgrade, Serbia. The site is used for event, conference and corporate photography inquiries under the Light for Magic domain.

For privacy requests, contact me at [email protected].

What data is collected

When you use the lead form, I receive the details you choose to send: name, company or organization, email, phone or messenger contact, event date, event location, event type, estimated duration, preferred contact method and your message.

If you contact me directly by email, Telegram, WhatsApp or Viber, the data you send is processed by the relevant communication provider as well as by me.

If you arrive through a link with UTM campaign parameters, the site may store those UTM values in browser storage for up to 30 days and include them with a lead request so I can understand which contact path worked.

The server may process technical data such as IP address, request time and user agent for security, diagnostics and anti-spam rate limiting. Microsoft Clarity analytics is used only if you accept analytics cookies.

Why the data is used

Inquiry data is used to answer your request, check availability, discuss event details and prepare a quote or next step. This is treated as pre-contract communication requested by you.

Technical and anti-spam processing is used to keep the site reliable and prevent abuse. UTM attribution is used only to understand which campaign or link produced an inquiry. Optional analytics is used to understand which pages work well and how the site can be improved.

Who may receive the data

The site and messages may involve service providers needed to run the website and respond to inquiries: Hetzner for hosting, Cloudflare for DNS/CDN/security if enabled, Telegram for lead notifications, Google/Gmail for email, Microsoft Clarity for analytics after consent, WhatsApp/Meta and Viber/Rakuten for direct messenger contact.

These providers may process data in Serbia, the EEA or other countries under their own terms and transfer safeguards.

Retention

Lead requests and related correspondence are normally kept for up to 24 months, unless a longer period is needed for an active project, legal obligation or legitimate dispute record.

Server logs are intended to be kept for up to 90 days. The cookie consent preference stays in your browser until you change it, clear browser storage or the consent version is reset.

Portfolio and event photographs

The portfolio uses a curated selection of professional event photographs and references. If you appear in a photo and have a privacy concern, contact me and I will review the request.

Roscongress and other third-party contexts are used carefully as selected portfolio references or locally reviewed files, not as a bulk import without rights review.

Your rights

Depending on the situation, you may request access, correction, deletion, restriction, portability or object to processing. You can also withdraw analytics consent at any time through Cookie settings.

You may contact the Serbian Commissioner for Information of Public Importance and Personal Data Protection or a relevant EU supervisory authority if you believe your data rights were not handled properly.