Last updated: 27 May 2026

This notice explains how personal data is handled on this site, currently being served as averello.info, under Regulation (EU) 2016/679 (GDPR).

The same content is served, under the same controller and the same processing terms, on the following domains:

• averello.info
• boumis.cy
• boumis.gr
• boumis.fr

All domains resolve to EU-based hosting infrastructure. This notice applies identically to each of them.

1. Controller

George (Georges) Boumis. To contact me, use the OpenPGP-protected email shown on the home page and sign your message with OpenPGP.

2. What is processed

This is a static personal CV. It does not set cookies, does not run analytics, does not embed third-party scripts or fonts, and does not host a contact form.

The web server keeps standard access and error logs for each request, including: source IP address, timestamp, requested URL, response status, bytes sent, Referer header and User-Agent header. No other request data is recorded, and no analytics or further enrichment runs on top of these logs.

3. Purposes and legal basis

Access logs are processed for the legitimate interest (Art. 6(1)(f) GDPR) of operating, securing, and troubleshooting the site. That interest is limited to availability and abuse prevention and does not override visitor rights.

4. Recipients and processors

Contabo GmbH (Aschheim, Germany) provides the VPS as a processor within the meaning of Art. 28 GDPR. Their infrastructure access is limited to operational and security purposes under their data processing addendum. No data is shared with any further recipient, sold, or used for marketing.

5. International transfers

The VPS is hosted in Contabo's German data centre, so all server-side processing takes place inside the European Union. Outbound links (LinkedIn, GitHub, X, Keybase, Stack Overflow, YouTube, Apple, Parrot, etc.) are user-initiated navigation: no data is sent to those services until you click a link.

6. Retention

Nginx access and error logs are rotated daily by logrotate and kept for 14 days, after which they are deleted. No off-server backups of these logs are kept.

7. Your rights

Under GDPR Articles 15-22 you have the right to access, rectification, erasure, restriction, portability, and to object to processing of your personal data. To exercise any of these rights, write to the controller (see section 1).

8. Right to lodge a complaint

You may lodge a complaint with the data protection supervisory authority of your EU/EEA member state of residence, work, or of the alleged infringement.

9. Automated decision-making

None. No profiling and no automated decisions are made on this site.

10. Third-party content on this CV

Where this CV credits former collaborators, names are shown as initials. If you are referenced on this site (by name, initials, or image) and want the reference removed or corrected, write to the controller and it will be handled without delay.