Privacy policy

1. Who is responsible for your data

This website is published by Tomás Henriques, a private individual established in Portugal, acting as the data controller for skaltorix.com. You can reach the controller for any privacy question, request or complaint at [email protected]. There is no company behind this site and no shared editorial team: correspondence goes to one person.

2. Which rules apply

Because the publisher is established in the European Union, the General Data Protection Regulation (EU) 2016/679 applies to this site. Because most of the audience is in Canada, the standards of Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) are also respected. Where the two differ, the more protective requirement is applied. Nothing in this policy takes away rights you hold under the law of the place where you live.

3. What is collected

This is a static information site. There is no account system, no shop, no newsletter sign-up and no lead form. The data that exists is therefore limited to:

• Technical connection data processed by the hosting infrastructure when a page is served: IP address, approximate region derived from it, the requested URL, timestamp, browser and device type, and the referring page.
• Cookies and equivalent local storage, described in the cookie policy. Only the record of your own consent choice is stored without asking; everything else waits for your agreement.
• The content of emails you choose to send — your address, your name if you give it, and whatever you write.

No special categories of data are sought, and none should be sent to us. We do not build profiles of individual readers and we do not take automated decisions about anyone.

4. Why, and on what legal basis

Personal data is never sold, rented, or exchanged, and it is not used for any purpose beyond the four above.

5. Third parties involved

A small number of service categories may process data on our behalf or as independent controllers:

• Hosting and content delivery — serving the pages; this necessarily involves your IP address.
• Web analytics — aggregate readership statistics, active only after consent.
• Advertising networks, including Google — delivering and measuring ads where they appear, active only after consent.

Some of these providers operate outside the European Economic Area, including in the United States and in Canada. Transfers rely on the mechanisms available under Chapter V of the GDPR — an adequacy decision where one exists (Canada holds a partial adequacy decision), otherwise standard contractual clauses. Each provider processes data under its own privacy terms.

6. How long anything is kept

Server and security logs are kept for a short operational period and then deleted or aggregated beyond identification. Consent records and cookie identifiers last for the lifetimes set out in the cookie policy. Emails are kept only as long as needed to deal with what they are about, and are deleted afterwards unless you ask otherwise or a legal retention duty applies.

7. Your rights

Under the GDPR you may ask to:

• Know whether data about you is processed, and obtain a copy of it (Art. 15).
• Have inaccurate data corrected (Art. 16) or deleted (Art. 17).
• Have processing restricted (Art. 18), or receive your data in a portable form (Art. 20).
• Object to processing based on legitimate interest (Art. 21).
• Withdraw consent for analytics or advertising cookies at any time, without giving a reason and without affecting anything already done lawfully.

Visitors in Canada may equally ask what information is held, request access to it and request correction, and challenge how this site handles it, in line with PIPEDA.

To use any of these rights, write to [email protected]. We answer within one month, and will say so if a request needs longer. We may need to ask a question back to be reasonably sure who is asking, but we will not demand documents we do not need.

8. Complaints

If you are not satisfied with how a request was handled, you can complain to a supervisory authority. In Portugal, where the publisher is established, that is the Comissão Nacional de Proteção de Dados (CNPD); EU residents may also complain to the authority in their own country of residence. In Canada, the Office of the Privacy Commissioner of Canada handles complaints about compliance with PIPEDA. Contacting us first is usually faster, but it is not a precondition.

9. Security

The site is served over HTTPS, holds no database of readers, and stores no payment or account credentials, which removes most of the risk that a site like this could otherwise create. Reasonable technical and organisational measures protect the limited data that does exist. No transmission over the internet can be guaranteed absolutely secure, and we do not claim otherwise.

10. Children

This site is written for a general adult audience and is not directed at children. We do not knowingly collect data from children; if you believe a child has sent us personal data, write to the address above and it will be deleted.

11. Changes to this policy

If the site changes — a new analytics provider, a different ad setup — this page changes with it, and the revision date at the top is updated. Material changes to how consent works will also be reflected in the banner.