Privacy
Who is responsible
The controller for this website is Frank Drescher, trading as Frank Drescher Photography, Via del Topazio, 1, 96100 Siracusa, Italy.
Email: info@frankdrescher.com. VAT / Partita IVA: IT02078000896.
What this notice covers
frankdrescher.com is a photography portfolio. It does not run a shop, a newsletter, or a member login. This page is written at build time from the tools actually present in the site and its DNS. If a tool is added or removed, the next deploy rewrites the list.
Contact form
If you write via the form we process your name, email address and message in order to read and answer you. There is no newsletter opt-in and no extra profiling.
Legal basis: Art. 6(1)(b) GDPR (your request) and Art. 6(1)(f) GDPR. We keep the correspondence in the studio mailbox until the matter is closed, and longer where Italian tax or limitation rules require it.
The mailbox provider for that address is named below, from the domain’s live MX records.
Hosting and delivery
The site is served by Cloudflare Workers and Cloudflare’s content network (Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA).
For each request Cloudflare processes technical data such as IP address, date and time, requested URL, referrer, browser and device data, and a coarse location derived from the IP. This is required to deliver the pages, keep the service available, and absorb abuse.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a working, secure website). Cloudflare acts as processor under its customer terms and Data Processing Addendum. Data may be processed in the EEA and in the United States under Cloudflare’s transfer safeguards.
Cloudflare privacy policy: https://www.cloudflare.com/privacypolicy/
Server logs
Worker observability is enabled. Cloudflare stores request traces and error logs for the site operator (URL, timing, response status, and similar technical fields). These logs are not used for advertising and are kept only as long as needed to run and debug the service.
Legal basis: Art. 6(1)(f) GDPR.
Bot protection (Turnstile)
The contact form is protected by Cloudflare Turnstile in an invisible mode: there is no puzzle to solve. Cloudflare processes technical signals (including IP address, TLS fingerprint, user-agent and the site key) to tell people from bots, then returns a one-time token that the server checks with Cloudflare’s siteverify API.
Turnstile is configured here without a visible widget. Cloudflare does not use those signals to advertise to you. See the Turnstile Privacy Addendum: https://www.cloudflare.com/turnstile-privacy-policy/
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in keeping the form usable and free of automated abuse).
Sending the contact form
When you submit the contact form, the Worker sends your name, email address and message with Cloudflare Email Sending to the studio mailbox. The From address is a domain mailbox used only for this site; replies go to the address you entered.
Legal basis: Art. 6(1)(b) GDPR (steps at your request before a possible contract) and Art. 6(1)(f) GDPR (answering mail).
Cloudflare Email Sending privacy information is covered by Cloudflare’s customer DPA: https://www.cloudflare.com/cloudflare-customer-dpa/
Studio mailbox
DNS for this domain points incoming mail at Google. Messages delivered to the studio address are therefore stored and processed by Google Ireland Limited / Google LLC as the mailbox provider, according to Google’s customer terms for that account.
Legal basis: Art. 6(1)(b) and (f) GDPR. Google privacy: https://policies.google.com/privacy
Google Search Console
The domain is verified in Google Search Console (DNS TXT). Search Console has no script and sets no cookies on visitors. Google’s crawler may request public pages so they can appear in Search. Aggregated search queries and impressions are visible to the studio in Search Console; that data is processed by Google as search engine, not collected by a pixel on this site.
Legal basis: Art. 6(1)(f) GDPR (finding the site in Search, and understanding that). Google privacy: https://policies.google.com/privacy
Web fonts
Type is loaded from Bunny Fonts (BunnyWay d.o.o., Slovenia, EU) so the pages use the same typeface everywhere. Your browser requests the font files from fonts.bunny.net. Bunny Fonts states that it does not log or track end users and does not set cookies for this service.
A connection still takes place, so the provider can see that a browser asked for a font (typically including the IP address at that moment). Fonts are not loaded from Google.
Legal basis: Art. 6(1)(f) GDPR. About Bunny Fonts: https://fonts.bunny.net/about/ — privacy: https://bunny.net/privacy/
Google Analytics
This build loads Google Analytics 4 (gtag.js) so the studio can see page views and traffic sources in the existing frankdrescher.com Analytics property. Google LLC processes IP address, device data, pages viewed and approximate location on our behalf.
Legal basis: Art. 6(1)(f) GDPR (understanding whether the site is used). Google privacy: https://policies.google.com/privacy
Cloudflare Web Analytics
This build loads Cloudflare Web Analytics (a small beacon from static.cloudflareinsights.com). It counts visits and basic performance without advertising cookies and without following people across sites. Cloudflare uses technical data such as IP address for a coarse location, then discards it rather than storing a lasting visitor id.
Legal basis: Art. 6(1)(f) GDPR (understanding whether the site is used, without a marketing tracker). Cloudflare privacy: https://www.cloudflare.com/privacypolicy/
Cookies
Google Analytics may set first-party cookies such as _ga so visits stay in the same property Squarespace used. Cloudflare Web Analytics does not set advertising cookies. There is no advertising pixel.
Turnstile on the contact form is an invisible check. Cloudflare may still set strictly necessary security cookies to deliver and protect the site.
There is still no cookie banner on this build. You can block Analytics with browser tracking protection or write to the studio.
Your rights
You may request access, rectification, erasure, restriction, objection, and (where applicable) portability of your personal data, and you may lodge a complaint with a supervisory authority. For this studio that is the Garante per la protezione dei dati personali (Italy), Piazza Venezia 11, 00187 Roma, https://www.garanteprivacy.it/. You may also contact the authority of your EU/EEA country of residence.
To exercise rights, write to info@frankdrescher.com.
Tools not used in this build
The generator looked for common trackers and did not find: Google Fonts, Google Tag Manager, Meta Pixel, Plausible Analytics. Links to Instagram, Facebook, WhatsApp or the Leica gallery are ordinary links; they are not pixels or embeds.