Data privacy policy (and a few additional terms!)
Who
This is the personal website of Vagelis Papakonstantinou (Professor of Law, VUB / Attorney at law, MPLegal). Contact: vagelis@papakonstantinou.me
What this site collects
- Server logs (standard web server logs: IP address, user agent, pages visited, timestamps) for security and diagnostics.
- Contact form messages: the data You submit (name, email, message).
- No user accounts are provided on this site.
Analytics
This site uses Plausible Analytics, a privacy-friendly, cookie-free analytics service. Plausible does not use cookies, does not store personal data, and aggregates anonymous usage statistics. Learn more at plausible.io. If Plausible is ever replaced, it will be replaced by a similarly privacy-friendly app to the greatest extent possible.
Embedded content
Pages may include embedded content from third-party services (e.g., YouTube, X/Twitter). Viewing embedded content is subject to the privacy policy of the provider and may set cookies. Where possible, embeds are replaced with simple links.
On content in general
This is a personal website, consequently there is absolutely no warranty as to accuracy of its content or fitness for whatever purpose. You can find no advice of any kind or guidance in this website. In addition, You are specifically encouraged to view the date of each post, because it reflects the at that time but not necessarily current state of my mind.
Intellectual property rights
You can re-use freely material from this website, always with attribution. If You feel that any of Your intellectual property rights are infringed in this (non-commercial, personal) website, you should let me know and I will remove any infringing content immediately.
Cookies
This site aims to avoid cookies. Some third-party embeds may set cookies; these are used only when You choose to play/view the embed.
Legal basis (GDPR)
Processing of minimal technical data (server logs/analytics) is based on the legitimate interests of operating and securing the site (Art. 6(1)(f) GDPR). If/when a contact form is provided, processing of your message is based on your request (Art. 6(1)(b)).
Data sharing
I (of course!) do not sell or share personal data. Technical service providers (hosting, security, analytics) may process limited data as processors under appropriate agreements.
Retention
- Server logs: up to 12 months (security/diagnostics).
- Contact form submissions: as long as needed to respond and for record-keeping, then deleted.
- Analytics: aggregated, non-personal.
Your rights
You may request access, correction, deletion, or restriction of your personal data, and You may object to processing where applicable. To exercise rights, see the contact details above. You also have the right to lodge a complaint with your local Data Protection Authority.
Changes
This policy may be updated from time to time. Material changes will be reflected on this page.
Effective date
October 2025