This is a small, self-funded publication. There is no advertising business, no data resale and no behavioural profiling behind it. What follows is the complete list of what is collected, why, who else touches it, and how to have it deleted.
The data controller is the operator of attuneline, acting as an individual:
There is no data protection officer and no corporate group. Requests go to the individual above, which is also why responses tend to be fast.
| Data | When | Notes |
|---|---|---|
| Email address | Free brief sign-up or paid subscription | Required to deliver the product. Nothing else is required for the free brief. |
| Name and optional organisation | Paid subscription | Used for the receipt and for account support only. |
| Payment details | Paid subscription | We never receive or store your card number. Card data is captured directly by our payment processor. We receive only a transaction reference and status. |
| Billing country | Checkout | Needed to determine the applicable tax, which our merchant of record handles. |
| Correspondence | When you write to us | Kept as long as needed to answer you and to evidence what was agreed. |
| Technical access logs | Every request | IP address, timestamp, requested URL and user agent, held by our hosting provider for security and abuse protection. |
| API usage records | When you use an API key | Request counts against your key, for quota and abuse handling. |
We do not ask for, and do not want, special category data, nor anything about your vessels, crews or passengers beyond what you choose to tell us in correspondence.
We do not sell data, do not rent lists, and do not run advertising-based profiling.
Each of these acts as a processor or an independent controller in its own right for the part it performs. We do not pass your data to anyone else, and we do not add third parties to this list without updating this page.
The controller habitually resides outside the EU/EEA. Where personal data of people in the EU/EEA is accessed from outside that area, we rely on the transfer mechanisms available to us — currently the European Commission's Standard Contractual Clauses, backed by the technical measures (encryption in transit, minimal data, access limited to the controller) needed to make them work in practice. You may ask us for details of the transfer mechanism applying to your data.
You have the right to access your data, to have inaccurate data corrected, to erasure ("right to be forgotten"), to restriction of processing, to object to processing based on legitimate interests, to data portability, and to withdraw consent to the email brief at any time. Where processing is based on contract or legitimate interest, objection is assessed against the grounds we hold.
To exercise any of them, write to [email protected]. We aim to answer within 30 days and we do not charge for it. We may need to verify who you are before acting.
The site currently sets no advertising or cross-site tracking cookies. If we enable audience measurement, we will choose a method that does not rely on identifying individuals and we will say so here before it is switched on. Any login session, once account access is introduced, requires a strictly necessary session cookie.
Write to us first — most things are fixable in one message. You also have the right to lodge a complaint with the data protection authority of your own country of residence or workplace, or of the place where you consider the infringement to have occurred.