Privacy Policy
Last updated: 12 June 2025
1. Who We Are
[Site Name] (“we”, “us”, or “our”) is an online publication that provides informational content on justice and governance topics.
Data Controller: [Legal Entity / Natural Person] – Registered address: [Address]
Contact: [Controller Email]
2. Personal Data We Collect
| Category | Purpose | Legal Basis (GDPR) | Retention |
|---|---|---|---|
| Server logs (IP, user-agent, timestamp, URL) | Site security & troubleshooting | Art. 6 (1)(f) legitimate interest | 30 days |
| Contact-form data (name, e-mail, subject, message) | Responding to inquiries | Art. 6 (1)(b) pre-contractual | 12 months after ticket closed |
| Cookies & Analytics (_ga, _gid, gat) | Measure and improve site performance | Art. 6 (1)(a) consent | Up to 14 months |
We do not intentionally collect special-category data (Art. 9 GDPR) or data from children under 16.
3. How We Use Your Data
- Deliver and secure the website
- Analyse aggregated traffic and content performance
- Respond to your messages
We never sell or rent personal data.
4. Google Analytics
This site uses Google Analytics 4 with IP anonymisation enabled (anonymizeIp). The service is provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA, USA).
- GA4 sets the cookies
_ga(14 months),_gid(24 hours) and_gat(1 minute). - Data may be transferred to the United States under Google’s Standard Contractual Clauses (SCCs).
You can withdraw consent at any time via our cookie banner or install the Google Analytics Opt-out Add-on.
5. Cookies
| Type | Cookie Name | Purpose | Duration | Opt-in Needed |
|---|---|---|---|---|
| Strictly necessary | __cf_bm, cookie_consent | Security / store consent | Session – 1 year | No |
| Analytics | _ga, _gid, _gat | Traffic measurement | 1 minute – 14 months | Yes |
Manage preferences at any time by clicking the “Cookie Settings” link in the footer.
6. Data Sharing
We share data only with trusted processors who act on documented instructions and are bound by confidentiality agreements.
| Processor | Service | Location |
|---|---|---|
| Google LLC | Web analytics | USA / EU data centres |
| [Hosting Provider] | Web hosting & e-mail | [Country] |
7. International Transfers
When data is transferred outside the EEA, we rely on Standard Contractual Clauses approved by the European Commission (Art. 46 GDPR).
8. Your Rights
Under Articles 15-22 GDPR you may:
- Access your data
- Rectify inaccurate data
- Erase data (“right to be forgotten”)
- Restrict or object to processing
- Port your data in a structured format
- Withdraw consent at any time (analytics cookies)
To exercise any right, e-mail [Controller Email]. We will respond within 30 days.
9. Data Security
We employ TLS encryption, strict access controls and regular security audits to protect personal data against unauthorised access, alteration or loss.
10. Changes to This Policy
We may update this notice to reflect legal or technical changes. Any material amendments will be announced on this page with a new “Last updated” date.
11. Contact
Questions or concerns?
E-mail: [Controller Email]
You also have the right to lodge a complaint with your local Data Protection Authority in the EEA.