Privacy policy

1. Data controller

The controller for the processing described here, within the meaning of Article 4(7) GDPR (Regulation (EU) 2016/679), is:

We have not appointed a Data Protection Officer. We are not required to under Article 37 GDPR: we are a small publisher, we carry out no large-scale monitoring and we process no special category data. Data protection questions go to the address above and are handled by Linda Jones.

2. What we do not do

So that there is no ambiguity, this site does not:

• Set any cookie, of any kind, including so-called “necessary” ones. There is no consent cookie either, because there is no consent banner.
• Use localStorage, sessionStorage, IndexedDB, the Cache API or any other client-side storage.
• Run any analytics — no Google Analytics, no Matomo, no Plausible, no server-side analytics product, nothing.
• Load any advertising or conversion pixel, tag manager or remarketing tag.
• Attempt any form of fingerprinting — no canvas, font, audio or device-enumeration techniques.
• Load any third-party resource. No web fonts, no CDN-hosted libraries, no embedded video, no social widgets, no remote images. Every font is a system font already on your device, and every file is served from this domain.
• Operate any contact, newsletter or comment form. There is nowhere on this site to type anything.
• Sell, rent or share personal data with anyone for their own purposes.

There is exactly one JavaScript file on this site. It copies advertising campaign parameters that are already in the address bar of the page you are on onto an outgoing partner link, so the retailer can attribute the click. It makes no network request, and it writes nothing to your device. You can read it in full at /js/cta.js.

3. What is processed, and on what legal basis

3.1 Server logs

Fetching any page from any website necessarily discloses your IP address to the server. Our web server records, for each request: the IP address, the date and time, the path requested, the HTTP status code, the number of bytes sent, the user-agent string your browser sends, and the referring URL if your browser sends one.

3.2 Email you send us

If you write to info@veratis.online we process your email address, your name if you give it, and whatever you put in the message, in order to read it and reply.

3.3 What happens when you follow a partner link

This is the one place where a third party becomes involved, and we want to be precise about where our responsibility ends.

When you click a link marked “partner link”, your browser leaves this site and goes to a vendor, retailer or affiliate network. At that moment they become the controller of their own processing, not us. They will typically set their own cookies and record the click in order to attribute a possible sale. We do not control that, we have no access to it, and we cannot switch it off for you.

What we do: our links carry referrerpolicy="strict-origin-when-cross-origin", which means the destination is told you came from https://veratis.online but not which specific page. Where an advertising campaign parameter such as a click identifier is already present in the address of the page you are reading, it is copied onto the outgoing link; that happens in your browser, and we neither store nor receive it.

What we receive back: the affiliate network reports aggregate statistics to us — numbers of clicks and of resulting sales, and the commission owed. These reports do not identify individual readers to us, and we do not seek any report that would.

Before following such a link, read the privacy policy of the destination site. It is a different company with different practices.

4. No automated decision-making, no profiling

We carry out no automated decision-making producing legal or similarly significant effects within the meaning of Article 22 GDPR, and we build no profiles.

5. Transfers outside the EEA

Our server and our email are located within the European Union. We do not transfer personal data to a third country. If a partner you click through to does so, that transfer is theirs and is covered by their policy.

6. Children

This site is written for adults and is not directed at children. We do not knowingly process the data of children, and since we operate no form and no account there is no mechanism by which a child could submit data to us.

7. Your rights

Under Articles 15 to 22 GDPR you have the right to request access to your personal data, rectification, erasure, restriction of processing, and data portability; and, where we rely on legitimate interests, the right to object under Article 21.

A practical note, in the interest of honesty: because we store no identifier for you, we are usually unable to connect you to a server-log line. Under Article 11(2) GDPR, where a controller cannot identify a data subject, it is not obliged to acquire additional information in order to do so. We will not ask you for identity documents in order to search a log we are about to delete anyway. For email correspondence, which we can locate, your rights apply in full and normally.

Exercise any right by writing to info@veratis.online. We answer within one month, extendable by two further months for complex requests, as Article 12(3) allows.

8. Complaints

You may lodge a complaint with a supervisory authority under Article 77 GDPR. Our lead authority is the Czech Office for Personal Data Protection:

Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Praha 7, Czech Republic — uoou.cz. You may also complain to the supervisory authority of the EU Member State where you live or work.

9. How to check all of this yourself

You do not have to take our word for any of it. The cookie policy gives step-by-step instructions for verifying, in your own browser's developer tools, that nothing is stored and that no third-party request is made.

10. Changes

If this policy changes materially, the date at the top of this page changes with it. There is no mailing list to notify, by design.