Privacy Notice

Who we are

Privacy Bench is the controller for the personal data described here. You can reach us at [email protected].

Site analytics

• We use Fathom Analytics to count visits and a few interactions, such as tool completions and newsletter sign-ups.
• Fathom is cookieless and does not store personal data. IP addresses are processed transiently to derive anonymised aggregate statistics and are not stored.
• Fathom's EU Isolation is enabled, so identifying data such as IP addresses is stripped in the EU before aggregate statistics are stored on Fathom's infrastructure in the United States.
• Because no cookies are set and no personal data is stored for analytics, the site does not show a consent banner.
• We do not use Google Analytics.
• Legal basis: legitimate interest (Art. 6(1)(f) GDPR) in understanding how the site is used.

Newsletter

• We only process your email address for the newsletter if you subscribe.
• Sign-up uses double opt-in: nothing is sent until you click the link in the confirmation email.
• The newsletter is sent with Brevo, an EU-based email provider.
• We store your email address, the time you confirmed your subscription, and a record of your consent.
• You can withdraw at any time with the unsubscribe link in every email, or by emailing us.
• We keep your data until you unsubscribe or ask for deletion. After that it is removed, except for a minimal record needed to honour the unsubscribe.
• Legal basis: your consent (Art. 6(1)(a) GDPR).

Contact by email

If you email us, we use your address and message only to reply. We keep the correspondence as long as needed to answer your request.

Hosting

The site is served through Cloudflare's edge network. Cloudflare may process IP addresses and request logs to deliver the site and protect it from abuse. Legal basis: our legitimate interest in operating a secure and available website (Art. 6(1)(f) GDPR).

Affiliate links

Some outbound links to vendors are affiliate links. We do not set tracking cookies for them; any tracking happens on the vendor's site under their own privacy policy. See our disclosure for how affiliate relationships work.

Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you
• have inaccurate data corrected (rectification)
• have your data erased
• restrict how we process your data
• object to processing based on legitimate interest
• receive your data in a portable format
• lodge a complaint with a data protection supervisory authority

To exercise any of these rights, email [email protected].