Privacy notice
This notice explains what personal data is processed when you use isi-seal.com, why, on what legal basis, and what you can ask us to do about it. It describes the website as it is actually set up.
1. Who is responsible
The controller is Sapienter OÜ, Karutiigi tn 9, Alliku küla, Saue vald, 76403 Harju maakond, Estonia, registry code 11386066, represented by its management board member Jüri Aramaa.
Email for data protection matters: privacy@isi-seal.com · Telephone: +372 5813 5135
The controller is established in Estonia, so the EU General Data Protection Regulation (GDPR) and Estonian data protection law apply, and the lead supervisory authority is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon). Because this website is written for readers in the United Kingdom, the data of UK readers is also protected by the UK GDPR and the Data Protection Act 2018. In this notice “GDPR” refers to both; the article numbers are the same.
2. In short
- You can read every article without giving any personal data.
- Fonts, images and scripts are served from our own server, not from third parties.
- No advertising, analytics or social media tag is active on this website.
- Your cookie choice is stored in your own browser.
- For the newsletter we need only your email address and your consent.
3. Visiting the website and server logs
When you open a page, your browser sends technical data to our server: IP address, date and time, the page requested, the amount of data transferred, the referring page, and browser and operating system details. This data is processed in server logs to deliver the website, keep it secure and fix faults. It is part of delivering the site and does not depend on your cookie choice.
The legal basis is our legitimate interest in running a secure, working website (Article 6(1)(f) GDPR). Logs are kept only as long as needed for these purposes and then deleted. The site is hosted by a hosting provider acting as our processor under Article 28 GDPR.
4. Storage in your browser
The website does not set tracking cookies. It stores two small entries in your browser:
- Your cookie choice (local storage,
isl-consent-v1), so the notice does not reappear on every page. It contains only the choice itself. Legal basis: storage strictly necessary to remember your choice (permitted under the ePrivacy rules and, in the UK, the Privacy and Electronic Communications Regulations) and Article 6(1)(f) GDPR. - Campaign parameters (session storage,
isl-src-v1), such as utm_source or a click_id, if you arrived from an advertisement. They are kept only for the visit and sent with a newsletter sign-up, so that we can see which advertisement led to it. They are deleted when you close the browser tab. Legal basis: Article 6(1)(f) GDPR.
Details, and a button to reset your choice, are on the cookies page.
5. Advertising measurement
This website is promoted through paid advertisements on other websites, for example recommendation areas run by advertising networks such as Taboola or Outbrain. Such networks offer measurement tags that record whether a visit came from one of their advertisements.
At present no measurement tag is active on this website. The site is built so that, if we decide to use one in future, it would load only after you choose “Accept all” in the cookie notice, and never if you choose “Essential only”. It would not load on this page, the imprint, the cookies page, the terms of use, the contact page, the newsletter confirmation page or the error page. Before activating any tag we will update this notice, name the provider, describe the data it receives and change the date below.
6. Newsletter
For the Saturday Letter we process your email address, the time of your sign-up and confirmation and, where applicable, the campaign parameters described in section 4. The legal basis is your consent (Article 6(1)(a) GDPR), which you give with the tick box.
Sign-up uses a double opt-in: after you submit the form, we send an email with a confirmation link, and your address is used for sending only after you click it. Unconfirmed sign-ups are deleted. You can withdraw consent at any time through the unsubscribe link in every issue or by emailing privacy@isi-seal.com. We then delete your address, apart from a minimal record of the unsubscribe so that we do not email you again. An email delivery provider may act as our processor. We do not sell, rent or share your email address.
7. Contacting us
If you write or call, we use the details you give us to answer your enquiry (Article 6(1)(b) or (f) GDPR) and delete them when they are no longer needed. Please do not send us your National Insurance number, bank details, official letters or health information.
8. Links to other websites
Articles link to official websites such as gov.uk, nhs.uk, ofgem.gov.uk and fca.org.uk. Nothing is requested from those websites until you click a link; the operator of that website is then responsible for any processing there.
9. Transfers outside the UK and EEA
We do not deliberately transfer your personal data outside the European Economic Area and the United Kingdom. If a processor we use does so, we will ensure an appropriate safeguard such as an adequacy decision or standard contractual clauses is in place.
10. Your rights
Under the GDPR you have the right of access (Article 15), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20) and to object to processing based on legitimate interests (Article 21). Where we rely on consent, you can withdraw it at any time with effect for the future. To use any of these rights, write to privacy@isi-seal.com. We reply within one month.
11. Complaints
You are welcome to contact us first. You also have the right to complain to a supervisory authority.
Lead authority in the EU: Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), Tatari 39, 10134 Tallinn, Estonia, www.aki.ee
For readers in the United Kingdom: you may also contact the Information Commissioner’s Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, ico.org.uk
12. No automated decision-making
We make no automated decisions within the meaning of Article 22 GDPR and do not build profiles of readers.
13. Governing law and changes
This notice and our processing are governed by Estonian law, without depriving you of the mandatory protections of the law of the country where you live. If we change what we process or why, for example by activating a measurement tag, we will update this notice beforehand and change the date below.