2. How We Use Your Information

We use collected information for:

• Website Operation: Serving content, maintaining functionality, troubleshooting
• Security: Detecting abuse, preventing spam, protecting against attacks
• Analytics: Understanding usage patterns to improve content and user experience
• Communication: Responding to inquiries, sending requested updates
• Legal Compliance: Meeting regulatory obligations

We do NOT use your data for:

• ❌ Behavioral advertising or profiling
• ❌ Selling to third parties
• ❌ Automated decision-making affecting you

3. Cookies and Similar Technologies

3.1 Essential Cookies

We use strictly necessary cookies for:

• Session management (temporary, deleted when you close browser)
• Security and fraud prevention
• Preference storage (e.g., dark mode toggle)

Legal Basis: Strictly necessary for service provision (no consent required under GDPR)

3.2 Analytics Cookies

We may use privacy-friendly analytics (e.g., Plausible, Fathom) that:

• Do not use persistent identifiers
• Do not track across websites
• Anonymize IP addresses
• Comply with GDPR without consent requirements

3.3 Third-Party Cookies

We do not use third-party cookies for advertising or social media tracking. External links (e.g., EUR-Lex, European Commission) may set their own cookies per their policies.

See our Cookie Policy for details.

4. Data Sharing and Disclosure

4.1 Service Providers

We may share data with trusted service providers:

• Hosting Provider: For website infrastructure (e.g., Cloudflare Pages)
• Email Service: For contact form delivery (if applicable)
• Analytics Provider: For privacy-friendly usage statistics

All providers are GDPR-compliant and bound by data processing agreements.

4.2 Legal Requirements

We may disclose information if required by:

• Legal obligation (e.g., court order, law enforcement)
• Protection of rights (e.g., defending against legal claims)
• Public safety (e.g., preventing imminent harm)

4.3 No Data Sales

We never sell, rent, or trade your personal data to third parties for their marketing purposes.

5. Data Retention

• Server Logs: Retained for 90 days, then deleted
• Analytics Data: Aggregated, anonymized, retained indefinitely
• Contact Inquiries: Retained for 3 years or until resolved
• Newsletter Subscriptions: Retained until you unsubscribe

We implement automatic deletion policies and regular data audits.

6. Your Rights (GDPR)

Under GDPR and data protection law, you have rights to:

6.1 Access

Request a copy of personal data we hold about you

6.2 Rectification

Correct inaccurate or incomplete data

6.3 Erasure ("Right to be Forgotten")

Request deletion of your data (subject to legal obligations)

6.4 Restriction of Processing

Limit how we use your data in certain circumstances

6.5 Data Portability

Receive your data in machine-readable format

6.6 Object

Object to processing based on legitimate interests

6.7 Withdraw Consent

Withdraw consent where processing is based on consent

6.8 Complain

Lodge a complaint with your local data protection authority

Exercise Your Rights: Email [email protected] with your request. We respond within 30 days.

7. Data Security

We implement appropriate technical and organizational measures:

• 🔒 HTTPS Encryption: All connections encrypted in transit
• 🔒 Access Controls: Limited personnel access to systems
• 🔒 Security Monitoring: Continuous monitoring for threats
• 🔒 Regular Updates: Security patches applied promptly
• 🔒 Data Minimization: Collect only necessary data

However, no internet transmission is 100% secure. Use caution when sharing sensitive information online.

8. International Data Transfers

Our hosting infrastructure may be located in:

• European Economic Area (EEA)
• United States (with Standard Contractual Clauses or adequacy decisions)

Any transfers outside the EEA comply with GDPR requirements through:

• Standard Contractual Clauses (EU Commission approved)
• Adequacy Decisions
• Other appropriate safeguards

9. Children's Privacy

DSA Library is not directed at children under 16. We do not knowingly collect data from children. If you believe a child has provided data, contact us immediately for deletion.

10. Changes to This Policy

We may update this Privacy Policy to reflect:

• Changes in legal requirements
• New features or services
• User feedback

Material changes: We will notify via prominent website notice

Check Last Updated date at the top of this page for recent changes

11. Contact Information

For privacy questions, requests, or concerns:

Email: [email protected]

General Contact: Contact Us

Data Protection Authority

If you're unsatisfied with our response, you may complain to your local data protection authority. Find your authority: EDPB Members