Privacy notice

Who is responsible

The controller under the GDPR is Panajotis Zamos. The address and the email address are in the Impressum.

What happens when you read a page

When your browser asks for a page, the server receives your IP address and the usual request data. That is the address of the page, the time, and the headers your browser sends, for example its type and the page you came from. The server needs this data to send the page to you. It uses the data for that purpose only. It stores no IP address.

The site runs behind a web server that passes each request to the site. That web server writes no access log for this site. If it cannot reach the site, it writes an error line. The error line holds the time, the page address, the status code and the error. It holds no IP address and no browser headers.

The site itself writes one log line for each request. The line holds the time, the method, the page address, the status code, the size of the response and the time it took to send. It holds no IP address, no browser type and no referring page. Nothing in the logs identifies a reader.

Your device

This site sets no cookies and writes nothing to local storage. It runs no analytics. It loads no fonts, scripts, images or other content from other sites. Everything comes from this domain. Nothing is stored on your device, so no consent is asked for.

Email

If you write to the email address in the Impressum, your address and your message are used only to answer you.

The operator uses a consumer Gmail account. In the European Economic Area, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, provides Gmail. Google stores your message. It processes the mail under its own terms of service and privacy policy.

Google’s privacy policy says that Google has servers around the world, and that it can process data outside the country where its user lives. Google lists data centres in the United States. Your message can therefore reach the United States. Google LLC, in the United States, takes part in the EU–US Data Privacy Framework. Its certification is listed as active at dataprivacyframework.gov.

The operator keeps an email conversation as long as it is needed, and deletes it at the latest 12 months after its last message. A message about a legal matter — a takedown notice or a request under the GDPR — is kept until that matter is closed.

Legal basis

The request data is processed under Art. 6 (1) (f) GDPR. The legitimate interest is to deliver the pages you ask for and to keep the site secure and working.

Email is processed under Art. 6 (1) (f) GDPR. The legitimate interest is to answer the message you sent.

A message about a legal matter is kept under Art. 6 (1) (f) GDPR. The legitimate interest is to settle that matter, and to establish or defend legal claims.

Hosting and recipients

The server is a virtual server of DigitalOcean, LLC, 105 Edgeview Drive, Ste. 425, Broomfield, CO 80021, USA. It is in DigitalOcean’s Frankfurt data centre (region FRA1), in Germany. DigitalOcean processes data for the operator under its Data Processing Agreement. That agreement is part of DigitalOcean’s terms of service.

DigitalOcean, LLC is a company in the United States. Its list of sub-processors names service providers in the United States for back-ups, platform security and customer support. Data can therefore reach the United States. The agreement bases such transfers on DigitalOcean’s certification under the EU–US Data Privacy Framework. The European Commission adopted an adequacy decision for that framework on 10 July 2023. It covers the companies that take part in it. If that certification ends, the agreement uses the EU standard contractual clauses. The certification is listed as active at dataprivacyframework.gov.

Apart from DigitalOcean, and Google for email you send to the operator, nobody receives data from this site. No data is sold, combined with other data, or used to profile readers.

How long data is kept

1. Request data is used while the page is sent. No IP address is stored.
2. The site’s log holds no personal data. Docker keeps at most three files of 10 MB and deletes the oldest when a new one starts.
3. The web server’s error lines hold no personal data.
4. The operator keeps an email conversation as long as it is needed, and deletes it at the latest 12 months after its last message. A message about a legal matter — a takedown notice or a request under the GDPR — is kept until that matter is closed.

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17) and restriction of processing (Art. 18). The site stores no data about readers. In practice, a request can concern only an email you sent. Write to the email address in the Impressum.

You also have the right to complain to a data protection supervisory authority (Art. 77 GDPR). You can complain in particular in the EU member state where you live, where you work, or where the alleged infringement took place.

Your right to object

You have the right to object at any time to processing of your personal data under Art. 6 (1) (f) GDPR. The objection must relate to your particular situation (Art. 21 GDPR). After an objection, the operator stops the processing unless there are compelling legitimate grounds for it, or it is needed for legal claims. Write to the email address in the Impressum.

Other points

No law or contract requires you to provide data. Without the request data, the server cannot send you a page. There is no automated decision-making and no profiling.