GDPR and your data

Who is responsible

John Mitchell runs dailyrebuildguide.com and is the data controller. Contact dailyrebuildguide@gmail.com.

Data protection by design

• Only what’s needed: for the newsletter, just your email address. No name, phone number or address.
• Nothing sent to Google before you choose: Google Analytics loads only after you press Accept, and Accept switches on analytics only, never advertising.
• Double opt-in: nobody is added to the newsletter until they confirm by email.
• Easy to leave: one click to unsubscribe, and it works straight away. Mail apps’ own unsubscribe button works too.
• Deleted on schedule: unconfirmed sign-ups after 7 days, sign-up IP addresses after 30 days, send records after 12 months, security records after a day.
• Security: https throughout, protected forms, and limits on repeated attempts.

Who processes data for us

Our web host, Web Hosting Ireland, stores the website, its database and our mailbox on our behalf, on servers in Ireland. Google provides Google Analytics (only after you press Accept) and our Gmail inbox. Nobody else receives your data, and it is never sold or shared for marketing.

International transfers

Google may transfer data to the United States, under the EU–US Data Privacy Framework and the European Commission’s Standard Contractual Clauses. Everything else stays in Ireland.

Your rights, and how to use them

• Stop the newsletter: the unsubscribe link at the bottom of every email.
• Change your cookie choice: Cookie settings, at the bottom of any page.
• See, correct, delete or take a copy of your data: email us.
• Restrict or object: email us.

Email dailyrebuildguide@gmail.com. We reply within one month. You can also complain to the Data Protection Commission at dataprotection.ie.

If something goes wrong

If a data breach puts people’s rights at risk, we’ll report it to the Data Protection Commission within 72 hours and tell the people affected without delay.