Privacy policy
How ESGinsider collects and uses personal data.
Sample text for the prototype. Replace with text reviewed by a lawyer before launch.
Controller
The controller is [Company legal name, address]. For privacy questions, write to [email protected].
What we collect
If you sign up for the newsletter, we collect your email address, the topics you choose, your frequency, the date and source of your consent, and the version of the terms you accepted.
When you use the site, we keep technical logs and strictly necessary cookies. Details of those cookies are on the Cookies page.
Why and legal basis
We send the newsletter on the basis of your consent, Art. 6(1)(a) GDPR. We process technical logs and strictly necessary cookies to keep the site secure and operating, on the basis of legitimate interest, Art. 6(1)(f) GDPR.
Confirmation and preference links
We send a confirmation email before any newsletter is delivered. Links to change preferences are single-use and expire after 24 hours. We do not reveal whether an address is subscribed.
How long we keep data
We keep newsletter data until you unsubscribe. Unconfirmed sign-ups are deleted after 30 days. We keep consent records for as long as we need them to prove that consent was given.
Processors
Email is sent through [Email delivery provider]. The site is hosted by [Hosting provider].
Your rights
You can ask for access, rectification, erasure, restriction, or a portable copy of your data. You can object to processing based on legitimate interest, and you can withdraw consent at any time. You can also complain to a supervisory authority.
Changes
If this policy changes, we will publish the new version on this page.