This personal website is operated by Chris Cracknell. Public user registration is not offered: visitors do not need an account to read the site, leave a comment or send a contact request. This policy explains the personal data processed when you comment or get in touch. For privacy questions or requests, use the Contact page.
Comments
When you leave a comment, WordPress stores your name, email address, comment text and any website address you provide, along with the submission time, IP address and browser information. These data are used to publish and moderate comments and prevent abuse. Approved comments, your display name and any website link are public; your email address, IP address and browser information are not published. Avoid including private information in your comment.
Comment processing is based on the legitimate interest in maintaining a discussion and protecting the site from spam (Article 6(1)(f) GDPR). If you choose to save your details in the comment form, WordPress stores your name, email address and website address in your browser's comment cookies for approximately one year, so you do not need to re-enter them. This is optional; you can remove these cookies in your browser.
Comment avatars use Gravatar. A hash derived from your email address may be sent to that service to find an avatar, and loading the avatar may disclose your IP address to its provider, Automattic. See Automattic's privacy policy. Published comments are retained while they remain relevant to the discussion, unless removed following a valid deletion request or for moderation reasons.
Contact messages
The Contact form collects your name, email address and message. These are sent to my mailbox so I can respond to your enquiry. Contact messages and email addresses are not published, used for mailing lists or sold. Processing is based on taking steps at your request before a potential contract (Article 6(1)(b) GDPR), or on the legitimate interest in responding to other correspondence (Article 6(1)(f) GDPR).
The website temporarily stores delivery feedback and, if a submission fails, the entered details for up to ten minutes so you can correct or retry your message. A hashed identifier derived from your IP address is used for a one-minute sending limit. Arithmetic spam-check challenges expire after twenty minutes. Correspondence is retained for as long as needed to handle the enquiry and any resulting relationship, and longer only where legal retention obligations or the defence of legal claims require it.
Service providers and security
Website hosting and email delivery providers process the data needed to operate the site and deliver correspondence. Hosting may also generate technical access logs, including IP addresses, for security and operation. Only information necessary for these purposes is shared with service providers. Please do not send passwords, confidential credentials or other highly sensitive information through comments or the Contact form.
Your rights
Subject to applicable law, you may request access to, correction or deletion of your personal data, restriction of processing or data portability, and object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing. Contact me using the details above; please identify the comment or correspondence concerned. You may also complain to a data protection supervisory authority, including the Hamburg Commissioner for Data Protection and Freedom of Information.