Privacy

Thinking Inside the Box is a blog by Ollie Walsh. This page explains what personal data the site collects, why, and what you can do about it. It is written to meet the EU General Data Protection Regulation (GDPR) and the Irish Data Protection Acts 1988–2018.

Who is responsible

The data controller is Ollie Walsh, trading as Thinking Inside the Box, [registered business name and address]. For anything to do with your data, email ollie@thinkinginsidethebox.com.

What we collect, and why

If you only read the site, we collect nothing about you. There is no analytics, no advertising, no social media embeds and no third-party fonts or scripts. Our host keeps standard server logs — IP address, browser, page requested, time — for up to 14 days, for security and to keep the site running. That is our legitimate interest under Article 6(1)(f) GDPR.

If you subscribe to the newsletter, we collect your email address and, if you give it, your first name. We use them only to send the newsletter. The legal basis is your consent under Article 6(1)(a), which you can withdraw at any time using the unsubscribe link in every email.

If you email us, we keep your message and address for as long as the conversation needs, and no longer than two years.

Who else sees it

• Raidboxes GmbH (Germany) hosts the site. Data stays in the EU.
• Mailchimp (Intuit Inc., USA) stores the subscriber list and sends the newsletter. Transfers to the US are covered by the EU–US Data Privacy Framework and Standard Contractual Clauses. Open and click tracking is switched off for this newsletter.

We do not sell, rent or share your data with anyone else.

How long we keep it

Subscriber data is kept until you unsubscribe, then deleted within 30 days. Server logs are kept for up to 14 days.

Your rights

You can ask to see the data we hold about you, correct it, delete it, restrict or object to how we use it, or receive a copy in a portable format. Email ollie@thinkinginsidethebox.com and we will reply within one month.

If you are unhappy with how we have handled your data, you can complain to the Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28 — dataprotection.ie.

Cookies

This site does not use cookies for visitors. See the cookie policy for the detail.

Changes

If this policy changes, the date at the top of the page changes with it.