Data protection

1. Data controller
The website dth-photo.com is published and operated by:
Name: Dominique Thirot
Contact: Via the website’s contact form

2. Data collected
What the website does not collect:
No user accounts — no registration, no usernames, no passwords
No IP addresses recorded
No location data
No advertising or profiling trackers
No data shared with social media platforms (no share buttons, no tracking pixels)
No subscriptions

What the website collects:
PHP session cookie for the technical functioning of the website, deleted when the browser is closed
Anonymous view counter per image for the photographer’s internal statistics (most viewed image), no personal data associated

3. Cookies
The website uses a single cookie, strictly necessary for its operation:
Type: Session cookie (no expiry date)
Issuer: dth-photo.com
Purpose: Technical — strictly necessary
Deletion: Automatic upon closing the browser
This cookie contains no personal data. It is used solely to maintain the browsing state between pages:

No consent is required for this cookie, in accordance with the ePrivacy Directive: it is strictly necessary for the service to function and is not used for any commercial or analytical purposes.
No third-party cookies

The site does not load any external resources during execution:
All JavaScript libraries are hosted locally on the server
No calls to Google, Facebook, Twitter, Instagram or any other third-party service
No audience measurement tools are active

4. Contact form
When you use the contact form, the following data is processed:
Email address: used solely to enable the photographer to reply to you
Message: sent by email to the photographer
This data is sent directly by email and is not stored in a database. It is not resold, transferred or used for commercial marketing purposes.

5. Production hosting
The live website is hosted by:
Host: Infomaniak Network SA
Address: Chemin de l'Epinglier 2, 1227 Carouge (Geneva), Switzerland
Website: https://www.infomaniak.com

Switzerland benefits from an adequacy decision recognised by the European Commission regarding the protection of personal data. Any data passing through Infomaniak’s servers is processed in accordance with the Swiss Federal Data Protection Act (FADP) and the European GDPR.

6. Security
The following technical measures are in place to protect data and communications:
HTTPS / TLS: All communications between the browser and the server are encrypted
CSRF protection: Random token verified with every form submission

7. Your rights
In accordance with the General Data Protection Regulation (GDPR — EU 2016/679), you have the following rights:
Access: To obtain confirmation that personal data concerning you is being processed and to receive a copy of it
Rectification: To request the correction of inaccurate data
Erasure: To request the deletion of your data
Objection: To object to the processing of your data
Restriction: To request the restriction of processing
Portability: To receive your data in a structured format

Given the nature of the website (no user accounts, no visitor database), the exercise of these rights mainly concerns any data that may be submitted via the contact form.
To exercise these rights, please contact the data controller via the website’s contact form or by sending an email to dth@dth-photo.com.

In the event of an unresolved complaint, you may refer the matter to the CNIL (Commission Nationale de l’Informatique et des Libertés):
Website: https://www.cnil.fr
Address: 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07

8. Changes to this policy
This privacy policy may be updated to reflect changes to the website or to regulations. The date of the last update is shown at the top of this page.