This wording still needs a lawyer's review. It is not legal advice.
Privacy
This note is written for the EU General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (nFADP). It describes the email list on this site.
Who is responsible
Heart Onward is a brand of Züst Works. For the email list on this site, Züst Works is the controller.
- [email protected]
- Postal address
- Postal address available on request at [email protected]
What the form collects
The form collects your email address. We store that address in lowercase, the time you signed up, and a flag that you agreed to hear from us. We do not ask for your name.
A hidden field is there to catch automated signups. If it is filled in, we drop the signup. We do not store that field.
Why we collect it
We use the address to send the 7-day notes when they are ready, and to say when Running with Llamas is available. We do not sell the address. This site does not pass it to an email-sending service yet. It only keeps the list.
Legal basis
Consent, under the GDPR and the nFADP. You can take consent back at any time. Doing so does not change the fact that we stored the address before then.
Where it is stored
The list is stored in a Cloudflare KV namespace, on Cloudflare. Cloudflare may process it in more than one country. The signup record is the email, the time, and the consent flag. Cloudflare can also see ordinary connection data, such as an IP address, while serving the site. That data is not written into the signup list.
How long we keep it
We keep the address until you ask us to delete it, or until we no longer need it for those notes. This draft does not set a fixed number of months.
How to unsubscribe or delete
Write to [email protected] from the address you used, and ask to be removed. We will delete that address from the list.
Your rights
- Ask for a copy of the address we hold.
- Ask us to correct it.
- Ask us to delete it.
- Complain to a supervisory authority. In Switzerland that is the Federal Data Protection and Information Commissioner (FDPIC). If the GDPR applies to you, you can also complain to your local authority.
What this site does not do
This site does not use third-party trackers, advertising cookies, or fonts loaded from another company.