Privacy & Cookie Policy
Last updated: 14 November 2026
Your cookie choice for all 54ka sites: not set
This policy applies to 54ka.org, blog.54ka.org (PhotoBlog), sketch.54ka.org (SketchBook) and stockphoto.54ka.org (StockPhoto shop). They are one website split into four parts, run by the same person, so one cookie choice is valid for all of them.
Who is responsible
The sites are run by Dimitar Hristov (54ka), photographer and artist, who is the data controller for the data described here. For any question about your data, or to use your rights, write via the contact form.
In short
- You can browse all sites without accounts, registration or comments. Personal data is needed only when you buy in the StockPhoto shop or send a message.
- Statistics (Google Analytics) are used only if you click “Accept”. If you reject, no statistics cookies are set.
- No advertising, no selling of data, no profiling for ads.
- You can change your choice at any time with the button above or the “Cookie settings” link at the bottom of the sites.
What data is used and why
1. Statistics – Google Analytics 4 (only with your consent)
If you accept, Google Analytics shows which pages and photos are viewed, roughly where visitors come from (country / city), what kind of device and browser they use, and how the photo viewer is used (opening a gallery, zooming, sharing). This helps decide what to publish and how to improve the sites. The information is shown only as statistics – the sites do not try to identify you.
- Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time; withdrawing does not affect use before that.
- Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, acting as processor. Data may be transferred to Google LLC in the USA, which is certified under the EU–U.S. Data Privacy Framework.
- Settings: statistics only – no advertising features, no ad personalisation, no Google signals. Google Analytics 4 does not log or store IP addresses.
- More info: Google Privacy Policy, Google Analytics opt-out add-on.
2. Server logs (always)
Like every website, the server records technical data on each request: IP address, date and time, requested page, browser and referring page. This is needed to deliver the pages and protect the sites from attacks and abuse.
- Legal basis: legitimate interest in running a secure website (Art. 6(1)(f) GDPR).
- Storage: by the hosting provider, for a short time, and then deleted automatically.
3. Contact form
When you send a message, your name, e-mail address and message are sent by e-mail so that you can get a reply. They are not used for newsletters or advertising and are not given to third parties.
- Legal basis: your request (Art. 6(1)(b) GDPR) and legitimate interest in answering it (Art. 6(1)(f) GDPR).
- Storage: as long as needed to handle your request and any related correspondence.
4. Online shop – stockphoto.54ka.org
When you buy an image, the order needs your first name, last name and e-mail address (and an order note, if you write one). The shop also saves the IP address and browser used for the order, to prevent fraud. The e-mail address is used to send the order confirmation and the download links.
- Payment: through PayPal. You pay on PayPal's own pages – card or bank details never reach the shop. The shop receives only the payment confirmation, the transaction number and the PayPal e-mail address. PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg, is responsible for its own processing – see the PayPal Privacy Statement.
- Customer account (optional): you can create an account at checkout. It keeps your name, e-mail, password (stored encrypted) and order history, so you can download your purchases again. You can ask for the account to be deleted at any time.
- Legal basis: performing the purchase contract (Art. 6(1)(b) GDPR), legal obligations for accounting and taxes (Art. 6(1)(c) GDPR) and legitimate interest in preventing fraud (Art. 6(1)(f) GDPR).
- Storage: order data is kept as long as accounting and tax law requires; other data is deleted when no longer needed.
5. Embedded videos and links to other sites
Some posts contain YouTube or Vimeo videos. They are embedded in privacy-enhanced mode (youtube-nocookie.com / Vimeo “do not track”), but when you start a video, the video service receives your IP address and its own privacy policy applies. Links to social networks, the print shop (54ka.eu) and other sites lead to services with their own privacy policies.
Cookies
A cookie is a small text file stored by your browser. The 54ka sites use the following:
| Cookie | Purpose | Type | Duration |
|---|---|---|---|
ffka_consent | Remembers your cookie choice for all four 54ka sites (domain .54ka.org). | Necessary | 6 months |
PHPSESSID | Protects the contact form on 54ka.org from spam and forged requests. | Necessary | Until the browser is closed |
woocommerce_cart_hash, woocommerce_items_in_cart | StockPhoto shop – remembers what is in your cart. | Necessary | Until the browser is closed |
wp_woocommerce_session_* | StockPhoto shop – keeps your cart and checkout session. | Necessary | 2 days |
wordpress_logged_in_*, wordpress_sec_*, wordpress_test_cookie | StockPhoto shop – only if you log in to your customer account. | Necessary | Until the browser is closed, or 14 days with “Remember me” |
_ga | Google Analytics – tells apart visitors (random ID, not your name). | Statistics – only with consent | 2 years |
_ga_* | Google Analytics – keeps the state of a visit. | Statistics – only with consent | 2 years |
Necessary cookies do not need consent because the sites cannot work properly without them. Your choice is asked again after 6 months or when this policy changes in an important way. You can also delete cookies at any time in your browser settings.
Your rights
Under the GDPR you have the right to:
- get information about and a copy of your data (access);
- have wrong data corrected, or your data deleted;
- restrict or object to the use of your data;
- receive your data in a portable format;
- withdraw your consent at any time – for statistics simply use “Change cookie settings”.
To use your rights, write via the contact form. You also have the right to complain to a data protection authority – in Bulgaria this is the Commission for Personal Data Protection (2 Prof. Tsvetan Lazarov Blvd., Sofia 1592), or the authority in the country where you live.
Changes to this policy
This policy may be updated when the sites change. The date at the top always shows the latest version.