Privacy Policy

When you open a page, the hosting provider's web server records a log entry. This is technically necessary to deliver the site and to keep it secure.

• your IP address, shortened or in full depending on the server configuration

• the date and time of the request

• the page requested and the HTTP status returned

• the referring page, where your browser sends one

• your browser and operating system identifier

Legal basis: Art. 6 (1) (f) GDPR. The legitimate interest is operating the site reliably and defending against attacks.

Retention: log entries are deleted or anonymized after 52 days. They are not combined with other data and are not used to identify individual visitors.

The site is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, acting as a processor under Art. 28 GDPR.

Visitor statistics are collected with Fathom Analytics, a privacy-focused analytics service operated by Conva Ventures Inc., Victoria, Canada, and only on the live site. Data from visitors in the EU is processed on EU infrastructure. Canada is covered by an adequacy decision of the European Commission.

Fathom sets no cookies, creates no persistent identifier, and does not track visitors across websites. Data is aggregated so that individual people cannot be identified. No personal profile is built and no data is sold or passed to advertisers.

Legal basis: Art. 6 (1) (f) GDPR. The legitimate interest is understanding which pages are useful, using the least intrusive method available.

You can read what Fathom collects at usefathom.com/privacy.

There is no contact form. If you email me, your address and the content of your message are processed in order to reply, and stored in the mailbox of the email provider used for business correspondence.

Legal basis: Art. 6 (1) (b) GDPR where the inquiry concerns a contract or its initiation, otherwise Art. 6 (1) (f) GDPR.

Retention: correspondence is kept for as long as the matter requires and thereafter for the statutory retention periods that apply to business letters.

Under the GDPR you have the right to:

• access the personal data held about you (Art. 15)

• have inaccurate data corrected (Art. 16)

• have data erased (Art. 17)

• restrict processing (Art. 18)

• receive your data in a portable format (Art. 20)

• object to processing based on legitimate interests (Art. 21)

To exercise any of these, email alex@stoffel.io. No processing on this site involves automated decision-making or profiling within the meaning of Art. 22 GDPR.

You also have the right to lodge a complaint with a supervisory authority. For this company that is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee); you may also complain to the authority where you live or work.