What we do withinformation about you

In short: What you type into the contact form, the technical record every website keeps, and a count of page views that cannot identify you.

It is a short list, because this site has no accounts, no login and nothing for sale.

What you type into the contact form

Eight answers, all of them required: first name, last name, work email, job title, company, country, reason for contact, and whatever you write in the message box.

The website itself keeps no copy of any of it. There is no database behind this site. Your answers are turned straight into an email and sent to us, and from that moment they live in our mailbox and nowhere else.

The form also has one field you never see, which exists to catch automated spam. A real visitor always leaves it empty, and anything arriving with it filled in is discarded unread.

What your browser says automatically

Every website's server records that a page was asked for. That record includes your IP address, your browser and device type, your operating system, the page you requested and the time you requested it. It is what shows us a fault or an attack, and it is kept by our hosting company rather than by us.

Analytics

Cloudflare Web Analytics counts page views, so we can see which pages get read, roughly which country a visit came from, and what kind of device it was on. It sets no cookies, gives you no identifier, and cannot follow you to another website or recognise you when you come back.

What we do not collect

• No passwords, because there is nothing to log in to.
• No payment details. Nothing is bought or sold on this site.
• Nothing in the categories the law calls special: health, ethnicity, religion, politics, trade union membership, genetics, biometrics, sex life or sexual orientation.
• No location tracking, precise or otherwise.
• Nothing bought from a data broker or scraped from social media. We do not buy contact lists.

In short: To reply to you, to keep the site working, and to see which pages are worth writing more of.

• Answering your enquiry and having whatever conversation follows from it.
• Keeping the site up and safe. The technical records above are what reveal a fault, an outage or an attack.
• Understanding what gets read, so we write more of what is useful and less of what is not.
• Meeting obligations the law puts on us, such as keeping records of work we have been paid for.

We do not advertise to you. We do not add you to a mailing list because you sent an enquiry. And nothing here makes automated decisions about you or builds a profile of you.

In short: Mostly legitimate interests, which means we have weighed our reason against your rights and you can object at any time.

The UK and EU General Data Protection Regulation requires us to name a lawful basis for each thing we do. Ours are:

Your enquiry, and our reply

Legitimate interests. You wrote to us and expect an answer. Where an enquiry turns into a piece of work, taking steps at your request before entering into a contract.

Server and security records

Legitimate interests. A site that cannot tell it is being attacked cannot be kept safe.

Analytics

Legitimate interests. Cloudflare Web Analytics collects no personal data and stores nothing on your device, so there is nothing to ask your consent for.

Keeping business records

Legal obligation. Tax and accounting law says how long invoices and contracts must be kept.

In short: Four companies, each doing one job for us under a contract. Nobody buys anything from us, because we do not sell it.

• Resend delivers the email your enquiry becomes. A United States company.
• Cloudflare serves the site, keeps the technical records described above, and counts the page views without ever knowing who you are. A United States company.
• Microsoft holds the message in our Outlook mailbox once it has arrived, in the same way it holds any email.

Each of them is bound by a contract that lets them do only what we have asked and nothing else with your information, which is what Article 28 of the GDPR requires.

We may also have to give information to a court, a regulator or the police where the law requires it. We would tell you if that happened, unless we were forbidden from doing so.

We do not sell your information, and there are no advertising or retargeting trackers anywhere on this site.

In short: There are none, which is why there is no cookie banner in your way.

This site sets no cookies of its own and no third party sets one through it. There is nothing stored on your machine when you leave.

That is a decision rather than an oversight. The usual way to measure a website is to give each visitor a cookie and follow them, and it is precisely that following which makes a consent banner necessary. Cloudflare Web Analytics counts a page view and forgets you, so we get the numbers we need and you get a site that does not interrupt you to ask permission for something it should not have been doing.

If that ever changes, this notice changes first, and you will be asked before anything is set.

In short: In Italy, and in the United States, protected by the European Commission's standard contract terms.

We are based in Italy. Resend, Cloudflare and Microsoft are all United States companies, which means information about you may be transferred there and held there.

Where that happens it is covered by the European Commission's Standard Contractual Clauses, which oblige the company receiving it to protect it to European standards, and by that company's certification under the EU-US Data Privacy Framework where it holds one. Ask us and we will send you the details for any of them.

In short: Enquiries for about three years, paid work for as long as tax law says, technical records for a few weeks.

• Enquiries. For as long as the conversation is live, and then about three years after we last heard from you, so that picking a thread back up does not mean starting again. After that it is deleted.
• Where an enquiry becomes paid work. For as long as accounting law requires us to keep the records, which in Italy is ten years.
• Server and security records. Kept by our hosting company for a short period, typically days to a few weeks, and then overwritten.
• Analytics. Nothing to keep. It was never personal in the first place.

In short: Encrypted in transit, held in as few places as possible, and reachable by as few people as possible.

• Everything sent to and from this site is encrypted. That is the padlock in your browser's address bar.
• The key that lets the site send email is held by our hosting company as a secret setting. It is never in the website's code and never reaches your browser.
• The mailbox your enquiry arrives in is reachable only by Antonio and the people who need it, protected by two-factor authentication.
• There is no database to break into, because the site does not keep one.

No honest organisation promises perfect security and we are not going to. What we can say is that the amount we hold is deliberately small, and the less there is, the less there is to lose.

In short: This is a site for working professionals. We do not knowingly collect anything about under-16s.

Nothing here is aimed at children and we have no reason to hold information about one. If you believe a child has sent us something through this site, write to us at info@thecorporatejungle.net and we will delete it.

In short: You can ask what we hold, ask for a copy, ask us to fix it, or ask us to delete it. One email, no form, free, answered within a month.

Under data protection law you have the right to:

• Ask whether we hold anything about you, and get a copy of it.
• Have anything inaccurate corrected.
• Have it deleted.
• Ask us to stop using it, or to limit how we use it.
• Object to us using it under legitimate interests, which covers most of what is described above.
• Receive it in a portable form you could take somewhere else.
• Withdraw your consent, in any case where consent is what we relied on. Doing so does not undo what was lawful before you withdrew it.

To do any of these, email info@thecorporatejungle.net. There is no form to fill in and no charge. We will answer within one month, and tell you if we need longer and why.

If you think we have handled your information badly, tell us first and give us the chance to put it right. If we do not, you can complain to the data protection authority where you live. Ours is Italy's Garante per la protezione dei dati personali, and a list of every authority in the EEA is kept by the European Data Protection Board.

In short: This notice covers this site. It cannot cover anyone else's.

Where we link out, whether to a podcast, an article or a social network, those sites have their own privacy notices and their own trackers, and we have no control over either. Following a link takes you outside everything described here.

In short: The date at the top tells you when it last changed.

When something here changes, the date at the top of the page changes with it. If we ever change something that genuinely affects you, we will say so plainly rather than quietly reposting the page and hoping nobody reads it.

In short: Email info@thecorporatejungle.net, or use the contact form.

The organisation responsible for the information described here, which the law calls the data controller, is The Corporate Jungle, Rome, Italy.

For anything at all about this notice, or to exercise any of the rights above, write to info@thecorporatejungle.net. A person reads it.