Legal notice
& privacy.

01Publisher

Vass.psv — Vassily Rado, photographer and videographer
Legal status: [sole trader / micro-enterprise / company — to be completed]
SIRET: [to be completed] · VAT number: [to be completed]
Address: [business address — to be completed], Paris – La Défense
Email: contact@vasspsv.com · Phone: 07 62 42 15 38
Publication director: Vassily Rado

Services are provided under the terms and conditions.

02Hosting

Cloudflare, Inc. — 101 Townsend St, San Francisco, CA 94107, United States — +1 (650) 319-8930 — www.cloudflare.com

03Intellectual property

All photographs, videos, texts and graphic elements on this site are the exclusive property of Vassily Rado, unless otherwise stated. Any reproduction, representation or distribution, in whole or in part, without prior written permission is prohibited (Articles L.111-1 and L.122-4 of the French Intellectual Property Code).

The people, places and vehicles photographed appear with the written consent of those concerned. Brands mentioned belong to their owners and imply no partnership. For any removal request, write to contact@vasspsv.com.

04Personal data

The information sent via the contact form (name, company, email, phone, message and the options you select) is used solely to respond to your request and, where applicable, to prepare a quote. It is never sold or passed on to third parties. Legal basis: pre-contractual measures taken at your request (Article 6(1)(b) GDPR).

The form only sends the fields you fill in: no browsing data (where your visit came from, pages viewed) is attached to it.

Retention period: three years from the last contact, unless there is a contractual relationship. Requests are forwarded by email through Resend (Plus Five Five, Inc., San Francisco), acting as a data processor, and recorded in the photographer’s private management tool, hosted by Cloudflare in the European Union. As Resend and the host, Cloudflare, Inc., are US companies, this data may be transferred to the United States; the transfer is covered by the EU–U.S. Data Privacy Framework, to which both companies adhere, and by the European Commission’s standard contractual clauses, included in their data processing agreements.

Bot protection. To block automated submissions, the form uses Cloudflare Turnstile (Cloudflare, Inc.), loaded only once you start filling it in. It checks that the request comes from a person using technical signals: IP address, browser and connection characteristics. Most of the time this happens without any action on your part; a checkbox only appears when in doubt. The content of your request is not sent to it, and the site keeps nothing from this check. Legal basis: legitimate interest in protecting the site and its mailbox from abusive submissions (Article 6(1)(f) GDPR). Cloudflare processes these signals as a data processor for the check and, according to its Turnstile privacy policy, as a controller to improve its bot detection, without seeking to identify or profile anyone. Any transfer to the United States is covered as described in the previous paragraph.

Moodboard. It is optional. The images you add are resized by your browser before they are sent (1,600 pixels on the longest side), which strips their metadata, including location. They are attached to the email of your request, sent through Resend, and stored with it in the photographer’s private management tool, hosted by Cloudflare in the European Union; the site does not keep them. Links are recorded with your message. The moodboard follows the same purpose, legal basis and retention period as the request.

Client area. If you are a client, your contact details, projects, appointments, quotes, invoices and galleries are kept in a private management tool, hosted by Cloudflare in the European Union and accessible only to the photographer. They are used to prepare and deliver your shoots (legal basis: the contract, Article 6(1)(b) GDPR) and are kept for the duration of the relationship, then three years after the last contact; invoices are kept for ten years, as required by law (Article L.123-22 of the French Commercial Code), and galleries are deleted thirty days after their expiry date. To protect the work (legitimate interest, Article 6(1)(f)), views and downloads are logged for twelve months, with a hashed IP address that is never stored in clear, and photos may carry a watermark unique to each recipient, kept for the duration of the licensed rights and then five years.

Sign-in codes and notices about your project are sent by email through Resend. Your guests only see what you open to them; by adding them, you agree to inform them. Cloudflare and Resend act as data processors, under the framework described above.

Profile photo. It is optional. It appears next to your name in your client area and in the photographer’s management tool, and nobody else sees it. Your browser resizes it before sending it (512 pixels per side); it is stored in the European Union and you can remove it at any time from your client area (legal basis: your consent, Article 6(1)(a) GDPR). It is deleted along with your account.

In accordance with the GDPR and the French Data Protection Act (loi Informatique et Libertés), you have the right of access, rectification, erasure, restriction, objection and portability. To exercise these rights: contact@vasspsv.com. You may also lodge a complaint with the CNIL (cnil.fr).

05Cookies and local storage

This site sets no advertising cookies, no social media trackers and no cross-site tracking. Its only cookie is the client area session, strictly necessary for signing in and therefore exempt from consent (Article 82 of the French Data Protection Act). It also keeps a few technical items in your browser, listed below; most are deleted when you close the tab.

Audience measurement only runs if you accept it in the cookie banner shown on your first visit (legal basis: your consent). Nothing is measured before you choose, nor after you decline. Your choice is kept for six months, then you are asked again. You can change your mind at any time with the “Cookies” link at the bottom of every page, or here: manage my choices.

Once accepted, audience measurement is handled by the photographer’s private management tool, hosted by Cloudflare in the European Union. It is anonymous and cookie-free: your IP address and browser are only used to compute an anonymous fingerprint with a key that changes every day and is deleted the next day; they are never stored. It produces visit statistics only (pages viewed, where the visit came from, device type, browser family, country), is never linked to quote requests and does not identify you. Visit details are deleted after 90 days, totals after 25 months. It stays off if your browser sends a “Do Not Track” or “Global Privacy Control” signal, whatever you choose. The same visit statistics are also sent to Umami (by Umami Software, Inc.), which is also cookie-free; your choice applies to it too.

Online booking is provided by a third-party service (Pixieset), subject to its own privacy policy and which may set its own cookies.