Privacy policy

Data controller

The data controller for personal data collected on theermite.com is Jaypee Goncalves (Jaypee — The Ermite), Trabajador Autónomo (Spain).

Data collected

Personal data collected through the contact form includes:

• First and last name
• Email address
• Message content

No data is collected automatically for profiling or targeted advertising purposes.

Purpose of processing

The data collected is used exclusively to:

• Respond to your contact requests
• Follow up on coaching or consulting enquiries

Legal basis

Data processing is based on the consent of the data subject (Article 6(1)(a) of the GDPR), demonstrated by the voluntary submission of the contact form.

Data retention period

Personal data is retained for a maximum of 24 months from the last contact, unless a longer retention period is required by law.

Your rights

In accordance with the GDPR (EU 2016/679), you have the following rights:

• Access: obtain a copy of your personal data
• Rectification: correct inaccurate data
• Erasure: request the deletion of your data
• Objection: object to the processing of your data
• Portability: receive your data in a structured format
• Restriction: request the restriction of processing

To exercise your rights, contact us via the contact form.

You also have the right to lodge a complaint with the relevant supervisory authority (AEPD in Spain, CNIL in France).

Cookies

This site currently uses no tracking or advertising cookies. Only strictly necessary technical cookies may be used for site functionality (session, admin authentication).

Should this change, this policy will be updated and a consent banner will be implemented.

Data security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction (HTTPS encryption, restricted access, secure hosting).

Google and YouTube data

When you connect a Google account to one of our applications (for example Kōbō), we request the YouTube permission needed to publish your videos, through Google APIs. By using these features you agree to the YouTube API Services Terms of Service; the Google Privacy Policy applies to Google’s processing of your data.

• Video upload: we publish a video you created and explicitly approved, to the YouTube channel you choose during consent.
• Channel name read: to show you which channel an account is linked to, so you can confirm your choice.
• No automatic publishing without your explicit, per-video action.
• The access token is stored encrypted; no other YouTube data is read, stored or shared.

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. This data is not sold, used for advertising, or transferred to third parties except as technically necessary for the service you request.

You can revoke this access at any time from the application (disconnect, which deletes the stored token) or from your Google account.

Contact

For any questions regarding the protection of your personal data, please contact us via the contact form.