Privacy policy

Marta Kei and jnaO AB is responsible for the processing of personal data described in this policy.

Email: jan @ jnao.se

Based in Sweden.

When you subscribe to the newsletter we collect: your email address, the language in which you subscribed, the date and time of your subscription, your IP address at the time of signup and whether and when you confirmed your subscription.

We also save the version of the privacy policy to which your consent relates, whether and when you unsubscribed, and administrative information recording whether your address has been exported for newsletter management.

We use this information to register your subscription, send a confirmation email, record your consent, deliver newsletters in the appropriate language, manage unsubscribe requests, and protect the signup form against misuse.

The legal basis for sending the newsletter is your consent. The newsletter uses double opt-in: after submitting your address, you must follow the confirmation link sent to you before the subscription is confirmed.

You may withdraw your consent at any time by using the unsubscribe link included in an email or by contacting us. Withdrawing consent does not affect processing that took place before your consent was withdrawn.

Your data is not used for automated decision-making or profiling.

Every newsletter email also includes a link to manage your subscription, view the data we hold about you, or delete it.

A confirmation link is valid for seven days. The link is created using a signed token and the token itself is not stored in the database.

If you unsubscribe, we stop treating your address as an active subscription. The subscriber record is currently retained so that we can respect your unsubscribe choice and maintain a record of the consent and subscription history.

Signup IP addresses are automatically deleted 30 days after signup by a scheduled process.

Unconfirmed subscriptions are currently retained unless they are manually deleted. This retention practice is under review.

Where we must retain information to comply with a legal obligation or establish, exercise, or defend legal claims, we may retain the necessary information for that purpose.

We use service providers to operate this website and newsletter, including:

• Vercel, for website hosting and delivery
• Neon PostgreSQL provider, for storing newsletter subscription records
• Resend, for sending confirmation emails and newsletters
• Sanity, for managing website content. Newsletter subscription records are not stored in Sanity by the website’s current implementation

These providers process information on our behalf where necessary to provide their services. Technical request information may also be processed by the hosting provider when you visit the website.

Some providers may process data outside Sweden or the European Economic Area. Where required, such transfers must be protected using an applicable adequacy decision, standard contractual clauses, or another legally recognised safeguard. You may contact us for more information about the providers and safeguards currently in use.

Depending on the circumstances, you may have the right to:

• request access to the personal data we hold about you
• ask us to correct inaccurate or incomplete data
• ask us to delete your data
• request that processing be restricted
• receive certain data in a portable format
• object to processing based on legitimate interests
• withdraw your newsletter consent at any time

You can view or export your own data, or delete it entirely, at any time using the 'manage your subscription' link included in every email - no need to contact us first. You can also reach us directly at jan@jnao.se for anything these links don't cover.

You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection, Integritetsskyddsmyndigheten (IMY), at imy.se.

We take reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or loss. However, no internet transmission or storage system can be guaranteed to be completely secure.

We may update this privacy policy when the website, newsletter service, providers, or legal requirements change. The date displayed at the top identifies the current version. When a subscriber confirms their newsletter subscription, that version date is recorded with their consent.