Privacy policy

The website consists of static files hosted by Cloudflare, Inc. using Cloudflare Workers with static assets. It has no application server or database. When you request a page, Cloudflare processes the following request data:

• IP address.
• Date and time of the request.
• Requested URL.
• Browser user agent.
• Referrer URL, if sent by your browser.
• Country derived from the IP address.

These data support website delivery, protection against attacks and abuse, including DDoS protection and security checks, and the start-page language redirect described below. Delivery and security processing relies on Article 6(1)(f) GDPR: the legitimate interests in making the website available and protecting it.

The site's Worker does not write request logs; Workers Logs are not enabled. Cloudflare processes request data as the hosting provider under its own terms. See the Cloudflare privacy policy.

The website's own scripts set no cookies. On pages with a sticky bar, they use the sessionStorage key "cta-x" to remember that you closed the bar. This entry is cleared when the tab closes.

Further information is available in Cloudflare's cookie documentation.

No analytics, tracking or advertising tools are used. Pages load no third-party resources and contain no embedded content.

Some pages contain partner links marked as such. Clicking one takes you to the partner's website and passes campaign parameters identifying the site, page and placement. This website passes no visitor personal data through those parameters. The partner's own privacy policy applies there.

Pages also link to external sources, regulators and help services. Data is transferred to those websites only when you click a link.

Contact is available through an email link to tevezmc32@gmail.com; there is no contact form. Email correspondence is handled using Google LLC's Gmail service. See the Google privacy policy.

Answering emails relies on Article 6(1)(b) GDPR where necessary for a contract or pre-contractual request, or Article 6(1)(f) GDPR for the legitimate interest in responding to other enquiries.

The controller is established in UA, outside the European Economic Area. Hosting and email processing may also involve transfers outside the EEA.

• Cloudflare relies on its certification under the EU-U.S. Data Privacy Framework; its Data Processing Addendum incorporates the Standard Contractual Clauses where a transfer requires them. See Cloudflare's GDPR information.
• Google LLC has certified adherence to the EU-U.S. Data Privacy Framework, including the Swiss-U.S. DPF and UK Extension. See Google's transfer framework information.

The website itself stores no personal data. Emails are kept only as long as needed to handle the request and any follow-up; no fixed deletion period has been set. Cloudflare's processing is governed by its own terms. Browser-storage and security-cookie durations are described above.

Where the GDPR applies and its conditions are met, Articles 15–21 provide rights of access, rectification, erasure, restriction of processing, data portability and objection. In particular, you may object to processing based on legitimate interests on grounds relating to your particular situation.

Where processing relies on consent, you may withdraw that consent at any time without affecting the lawfulness of processing before withdrawal. Send rights requests to tevezmc32@gmail.com. You may complain to the New Zealand Privacy Commissioner about a privacy concern; where the GDPR applies, you also have the right to lodge a complaint with a competent data protection supervisory authority.