Privacy

The short version: this site sets no cookies, runs no analytics, and loads nothing from anyone else. If you sign up for the newsletter, your address is used for the newsletter and nothing else.

1. Who is responsible

Dr. Erich W. Schreiner, IsarKiesel Verlag, Aufkirchner Straße 25 a, 82069 Hohenschäftlarn, Germany. Email: hello@josiehalyard.com.

2. Visiting this site

The site is static, hosted by Amazon Web Services (Amazon S3 behind the Amazon CloudFront content delivery network). Serving a page necessarily involves your IP address, and the server records the usual access data: IP address, time, the address requested, status, referrer and browser identification. It is used to deliver the site and to diagnose faults and abuse, on the basis of a legitimate interest in running a working, secure website (Art. 6(1)(f) GDPR), and deleted after 90 days. Storage is in the AWS Frankfurt region; CloudFront is a global network and serves you from a location near you.

3. What this site does not do

• No cookies, and nothing kept in your browser’s storage.
• No analytics, tracking pixels or social media plugins.
• No third-party requests. The typefaces are served from this domain, and loading a page makes no request to any other server.

Links to Amazon are plain links. Nothing is passed to Amazon unless you click one, and Amazon’s privacy notice applies on its pages.

4. The newsletter

If you sign up, you are sent a confirmation email, and nothing further happens until you click the link in it. The basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time, with effect for the future, through the unsubscribe link in every letter or by writing to hello@josiehalyard.com.

Until you confirm, your address goes to no one. Your address and, if you gave one, your first name are stored on our own infrastructure at Amazon Web Services in Frankfurt, Germany, only to complete the confirmation. The record is deleted when you confirm; if you never do, the link stops working after 72 hours and the record is removed within a week. The store keeps no backups. To stop the form being abused, a one-way hash of your IP address is counted for one hour; the address itself is not stored.

The confirmation email is sent through Amazon SES in Frankfurt. It has no tracking pixel and no redirected links.

Once you confirm, your address and first name are passed to Brevo, the service that sends the letters, with the date and time you confirmed, which is the record of your consent. Brevo is operated by Sendinblue SAS in France and processes data on servers in France and Germany, under a data processing agreement (Art. 28 GDPR). Brevo records whether a letter was opened and which links in it were clicked; that is part of what you agree to by subscribing, and it ends when you unsubscribe. Your address is kept until you unsubscribe and is never shared or sold.

5. Writing to us

Mail to an @josiehalyard.com address is received and stored in a mailbox hosted by IONOS in Germany. Correspondence is kept for as long as needed to deal with it and to meet statutory retention duties.

6. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), portability (Art. 20), and to object to processing based on legitimate interest (Art. 21). Write to hello@josiehalyard.com.

You can also complain to a supervisory authority. The one responsible here is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany.

7. Changes

This page changes when what the site does changes, and the date at the top says when.