Privacy policy

Last updated

Who is responsible

SAHA CONSULTANCY, of Gullvingeveien 131, Kristiansand, Norway, is the data controller for this website. For anything in this policy, write to [email protected].

What we collect, and why

This site does one thing with personal data: it takes a newsletter signup. There is no account, no profile and no tracking of you across other sites.

Everything this site stores about a visitor
WhatWhyKept for
Your email address To send you the Weaverdeck:Echo newsletter. Nothing else. Until you ask us to delete it
Your IP address To rate-limit the form. Without it the signup form is trivially flooded. Stored with the signup record
Timestamps — when you asked, when you confirmed To expire unconfirmed requests and to evidence your consent. Alongside the record

If you sign up and never confirm, the signup is deleted automatically after 48 hours. Nothing reaches our mailing list until you click the link in the confirmation email.

Legal basis

Consent for holding your email address and writing to you — given by confirming your address, and withdrawable at any time. Our legitimate interest in keeping the service available covers the short-lived IP record used to rate-limit the form.

Analytics

We use Umami Cloud to count visits. It sets no cookies, does not fingerprint your device, and does not follow you to other sites. What it records is the page viewed, where the visit came from, and coarse details such as country, browser and device type — none of which identify you individually. That is why you are not being asked to dismiss a cookie banner.

Umami Cloud is a hosted service, so this data is processed on our behalf rather than staying on our own servers. It is held on servers in the EU, and Umami is listed as a processor below.

Cookies

This site sets no cookies.

Who else sees your data

We use two processors, and share your data with nobody else:

The list itself is held only by us, in a database on our own server. It is not copied into any spreadsheet, mailing tool or other service.

We do not sell your data, and we do not share it for anyone else's marketing.

Umami Cloud stores our analytics on servers in the EU, so that data does not leave the European Economic Area.

Your email address does leave it. Resend is operated by Plus Five Five, Inc. in the United States, and those transfers are made under the EU Standard Contractual Clauses (Module Two, controller to processor); Resend additionally certifies under the EU–U.S. Data Privacy Framework.

Your rights

You can ask for a copy of what we hold, have it corrected or deleted, object to how we use it, or ask for it in a portable form. The quickest route to deletion is an email to [email protected] — we will remove the record and confirm. You may also complain to your supervisory authority, which in Norway is Datatilsynet, the Norwegian Data Protection Authority.

Changes

If this policy changes materially we will update the date above and, where the change affects how we use an address you have given us, tell you directly.