Privacy Policy

Who is responsible

JOISPOI (the "controller") runs this site and the giveaways on it.

Address: [[ADDRESS]], Iceland. Email: [[CONTACT-EMAIL]].

Iceland is part of the European Economic Area, so the General Data Protection Regulation (GDPR) applies to this site.

What this page currently collects

Nothing you type. There is no form on this site yet.

Our server writes technical access logs when you load a page. That is all.

Server logs

Data: shortened IP address, date and time in UTC, the page requested, referrer and browser identification.

Purpose: keeping the site available and defending against attacks.

Legal basis: Article 6(1)(f) GDPR, our legitimate interest in a working, secure site.

Kept for 14 days, then deleted automatically.

Hosting

The site runs on a server operated by Tube-Hosting, data centre Kerkrade, Netherlands.

They act on our instructions under a data processing agreement (Article 28 GDPR).

The Netherlands is inside the EEA, so this is not a transfer to a third country.

Backups

Encrypted database backups are stored with [[BACKUP-PROVIDER]] in Switzerland under a data processing agreement (Article 28 GDPR).

Files are encrypted on our server before they are transferred. The storage provider never receives readable data and never holds the key.

Switzerland is a third country with an adequacy decision (Decision 2000/518/EC, confirmed in Commission report COM(2024) 7 final of 15 January 2024, binding for Iceland through Annex XI of the EEA Agreement). The transfer is therefore based on Article 45(1) GDPR.

What we do not do

We use no cookies, no tracking, and no third-party requests.

Your rights

You can ask for access, correction, deletion, restriction, data portability, and you can object to processing based on legitimate interest. Write to [[CONTACT-EMAIL]].

You can complain to the Icelandic Data Protection Authority, Persónuvernd, Laugavegur 166, 105 Reykjavík, personuvernd.is.

You can also complain to the supervisory authority where you live.