Privacy
What I collect, why, and how to have it deleted.
Written in plain language because you are about to tell me things about your body and your life, and you should know exactly where they go before you do.
Who holds it.
AllGaia, Unipessoal Lda, Rua da Ponta da Cruz 32, Edifício Centromar, Bl. B, Fração BO, 9004-516, Funchal, Madeira, Portugal. That is the data controller under the EU General Data Protection Regulation. It is my company and I run it myself. There is no team and no assistant; nobody else reads what you send.
Questions or requests: kristjankann@gmail.com.
What I collect.
If you ask for the letters or a chapter: your email address, and nothing else.
If you apply: your name, email, age, where you live and what you do, and your written answers. Those answers may include information about your sleep, your food, medication you take, diagnoses, injuries, your relationships and your finances, because I ask about them.
Some of that is health information, which the law treats as a special category. I only ever hold it because you chose to write it, and you can withdraw that at any time by sending one line to the address above.
You do not have to answer everything. Leave out anything you do not want me to hold. It may mean I cannot place you accurately, and I will say so rather than guess.
Why, and on what basis.
The letters and the chapter: your consent, given when you type your address. Every email has an unsubscribe link and unsubscribing deletes the address.
Applications: your explicit consent, given by ticking the box before you send, and then to take steps at your request before entering into a contract. I use what you write for one purpose only, which is to decide whether to work with you and on what.
I do not profile you, I do not use any of it for marketing, and I do not use it to train anything.
Who else sees it.
Nobody, except the companies whose tools carry it: the host of this site, which receives what you submit, and my email provider. They are processors acting on my instructions and they do not use your information for their own purposes. Some may store data outside the European Economic Area under the European Commission’s standard contractual clauses.
I never sell it, never share it with anyone else, and never mention what you wrote to another person.
How long I keep it.
If I turn you down: your application is deleted within thirty days, apart from your name and email and the single line recording that I said no, which I keep for one year, so that I remember if you write again and so that I can write to you myself if I told you it was a question of timing. Ask me and I delete it.
If we work together: I keep what you wrote for the length of the work and for two years after it ends, because it is the record of what we did. Then it is deleted.
Invoices and payment records are kept for seven years because Estonian accounting law requires it.
Email addresses for the letters are deleted when you unsubscribe.
What you can ask for.
A copy of everything I hold about you. A correction. Deletion. A restriction on how I use it. A copy in a portable form. Or you can object, or withdraw your consent, at any time and for any reason.
Write one line to kristjankann@gmail.com and I will do it within thirty days. You do not have to explain why.
If you think I have handled your information badly you can complain to the Estonian Data Protection Inspectorate, Andmekaitse Inspektsioon, at aki.ee, or to the authority in your own country.
This site itself.
No advertising trackers, no third-party analytics, no cookies that follow you anywhere. The host keeps ordinary server logs, including IP addresses, for security and for a short period.
The typefaces are served by Google Fonts, which means your browser contacts Google to fetch them and Google receives your IP address in the process.