Privacy & Cookie Policy

Who runs this website

This website, www.briandasilvasantos.com, is a personal, non-commercial portfolio of my photography. I, Brian da Silva Santos, am responsible for it and for any personal data processed through it (the "controller" under the EU General Data Protection Regulation, GDPR).

You can contact me about this policy or your data at dsbrian247@gmail.com.

The site only shows photos. It has no contact form, newsletter, user accounts, comments or online shop, so I collect very little about you.

What data is collected when you visit

When you visit the site, your browser automatically sends some technical data to the servers of Squarespace, the platform that hosts it.

  • Technical data: your IP address, browser type, device type, operating system, the pages you view, the time of your visit and the website that referred you.

  • Visit statistics: Squarespace's built-in analytics use this data to show me aggregate figures, such as how many people visited, which photos were viewed and which countries visitors came from. I cannot identify individual visitors from these reports.

This data is processed so the site can be delivered securely and so I can understand, in general terms, how it is used. The legal basis is my legitimate interest in running and improving my website (Article 6(1)(f) GDPR). Analytics cookies are only placed if you accept them in the cookie banner (see below).

I do not sell your data, use it for advertising, or use Google Analytics or other third-party tracking tools.

Cookies

This site uses a small number of first-party cookies set by Squarespace. Cookies are small text files stored on your device. There are two kinds here:

  • Functional cookies are needed for the site to work and stay secure. They are always on and do not need your consent.

  • Analytics cookies count visits and sessions for Squarespace's built-in statistics. They are only placed if you click "Accept" in the cookie banner.

No advertising, marketing or social media cookies are used.

Changing your choice: you can change or withdraw your consent at any time through the cookie preferences link on the site. You can also delete or block cookies in your browser settings; the site will still work without analytics cookies.

Emailing me and visiting Instagram

Email: if you email me via the link on the site, I receive your email address, name (if included) and whatever you write. I use this only to reply to you. The legal basis is my legitimate interest in answering messages sent to me (Article 6(1)(f) GDPR). Emails are handled by Google (Gmail) under its own privacy terms.

Instagram: the site links to my Instagram profile. It does not embed Instagram content, so no data is sent to Instagram just by visiting this site. Once you click the link and open Instagram, Meta's privacy policy applies.

Who else processes your data

The site is hosted by Squarespace, which processes the technical and analytics data described above on my behalf as a data processor. Squarespace may store and process data outside the European Economic Area, including in the United States. Such transfers are covered by safeguards recognised under the GDPR, such as the EU Standard Contractual Clauses or the EU-US Data Privacy Framework. See Squarespace's privacy policy for details.

I do not share your data with anyone else, unless I am legally required to.

How long data is kept

  • Analytics and technical data: kept by Squarespace for as long as its standard retention periods require; I only see aggregate statistics.

  • Cookies: kept for the durations in the cookie table above, unless you delete them sooner.

  • Emails: kept only as long as needed to handle your message, and deleted when no longer needed or when you ask me to.

Your rights

Under the GDPR you have the right to:

  • access the personal data I hold about you

  • have incorrect data corrected

  • have your data deleted

  • restrict or object to how your data is processed

  • receive your data in a portable format

  • withdraw your cookie consent at any time, without affecting earlier processing

To use any of these rights, email me at dsbrian247@gmail.com. I will reply within one month.

If you think your data is being handled wrongly, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, or to the authority in your own EU country.

Changes to this policy

I will update this policy if the website changes, for example if I add a contact form or start selling prints. The date at the top shows when it was last updated.

Last updated: 2 November 2026