Privacy

Who's responsible

I'm Kenny Vaneetvelde. I run Eigenwise through Inosta BV, the data controller for the processing described here. Its enterprise number is 0658.816.971.

For privacy questions or requests, email kenny@eigenwise.io.

The newsletter

When you subscribe, your email address goes to Buttondown, which manages subscriptions and sends the newsletter. It also processes subscription status, timestamps and technical information such as IP addresses and referral information. Email open and link-click tracking are disabled in the newsletter settings.

The legal basis for sending the newsletter is your consent. You can withdraw it using the unsubscribe link in an email or by contacting me. That doesn't affect processing that already happened before you withdrew consent.

Your subscription record is needed while you're subscribed. Unsubscribing stops the newsletter; it doesn't automatically erase the record. Records may still be needed to honour an opt-out, document consent or handle a legal claim. You can request deletion.

Subscribing is optional. Without your email address, I can't send you the newsletter. Read Buttondown's privacy policy.

If you email me

I receive your address, your message and anything you attach. I use Google Workspace for email. My legitimate interest is replying to enquiries and managing business correspondence. If we work together, information needed for our agreement or a legal obligation may also be processed on those grounds.

Retention depends on whether the enquiry is resolved, whether we have an ongoing working relationship, and whether records are needed for legal obligations or claims. You choose what to send; I need enough information to respond.

Website analytics and browser storage

I use PostHog's EU service to understand which pages people visit and whether sharing and newsletter signup controls get used. This includes page URLs, referral information, browser and device information, technical identifiers and network information. The signup event records form submission without the email field.

My legitimate interest is understanding and improving the site. Automatic interaction recording and session recordings are disabled. Analytics persistence is configured to use browser memory rather than cookies or persistent browser storage. Analytics can still involve personal data.

This site uses PostHog's free plan, which has a one-year event query window. That limits which events can be queried; it doesn't guarantee automatic deletion. Removing stored data requires PostHog's deletion tools. See PostHog's retention rules and data deletion options.

You can turn off analytics in this browser. This saves an opt-out preference in local storage. It applies to future visits while that storage is available and hasn't been cleared. You can turn analytics back on.

Article searches run in your browser against the site's search index. The search form doesn't send your search terms to an external search service.

Hosting and other websites

Cloudflare hosts the site and forwards analytics requests to PostHog. Delivering and protecting the site involves technical request information, including your IP address. The legal basis is the legitimate interest in running a working, secure website. Cloudflare's operational and security records follow its processing terms and retention practices.

Fonts and images are served with the site. Social links take you to other websites; their privacy notices apply when you visit them.

Providers and international transfers

The providers above process information to provide their services. Buttondown processes newsletter data in the United States. PostHog uses the EU service, but providers and their subprocessors can also process data outside the European Economic Area, including for infrastructure and support.

Their processing terms describe the applicable transfer safeguards, including European Commission standard contractual clauses and, where applicable, adequacy decisions. You can read the terms for Buttondown, PostHog, Cloudflare and Google Workspace, or ask me for information about the safeguards that apply to your data.

Your rights

Under the GDPR, you can request access, correction, deletion or restriction of your personal data. You can object to processing based on legitimate interests and request data portability where it applies. Some rights have legal limits. Contact kenny@eigenwise.io to make a request.

You can also complain to the Belgian Data Protection Authority or your local supervisory authority. The processing described here doesn't involve automated decisions that have legal or similarly significant effects on you.