Privacy Policy and Cookie Policy

Last updated: 2026-09-30

1) Who We Are

2) What Data We Process

A) Data you provide voluntarily

  • Contact form: name, email address, message content, and any other information you choose to include.

B) Data collected automatically

  • Server and security logs: IP address, date and time of request, URL and referrer, user-agent (browser/OS), and status codes. These are generated by the web server while operating and securing the site.
  • Cookies: See the Cookie Policy below for details about consent and strictly necessary cookies.

C) Message handling

  • To ensure reliable delivery and the ability to respond, messages sent through the contact form may be:
    • Sent via an external email delivery service, and
    • Stored in the website’s database for follow-up and record-keeping.

3) Purposes and Legal Bases

  • Responding to inquiries submitted via the contact form:
    • Legal basis: legitimate interests (Article 6(1)(f) GDPR) in responding to your request; and, where applicable, taking steps at your request prior to entering into a contract (Article 6(1)(b) GDPR).
  • Operating, securing, and improving the website (including server logs and strictly necessary cookies):
    • Legal basis: legitimate interests (Article 6(1)(f) GDPR) in ensuring the availability, security, and proper functioning of the site.
  • Compliance with legal obligations (e.g., security or statutory requirements, if applicable):
    • Legal basis: Article 6(1)(c) GDPR.

No profiling, behavioral advertising, or remarketing is performed on this site.

4) Data Recipients and International Transfers

  • Hosting provider (EU): processes data required to host and secure the site.
  • Email delivery service: used to send and receive contact form messages. This provider may process email metadata necessary for delivery.
  • Transfers outside the EEA: If any service provider processes data outside the EEA, appropriate safeguards (such as Standard Contractual Clauses) are applied. You can request details via the contact form.

5) Data Retention

  • Contact form messages: retained only as long as necessary to handle your inquiry and for limited follow-up, typically up to 24 months, unless legal obligations require a longer period or you request earlier deletion (where applicable).
  • Server/security logs: typically retained for up to 30 days, unless needed longer to investigate incidents or ensure system integrity.
  • Cookies: see lifetimes in the Cookie Policy below.

6) Your Rights (EU/EEA)

You have the following rights under the GDPR, subject to conditions and limitations:

  • Access your personal data.
  • Rectify inaccurate or incomplete data.
  • Erase your data (“right to be forgotten”).
  • Restrict processing.
  • Object to processing based on legitimate interests.
  • Data portability (for data you provided to us, where processing is based on consent or contract and carried out by automated means).
  • Withdraw consent at any time where processing is based on consent (withdrawal does not affect the lawfulness of prior processing).

To exercise your rights, please contact us through the contact form: https://blog.200ms.net/contact/.

You also have the right to lodge a complaint with your local supervisory authority in the EEA. A list of authorities is available at: https://edpb.europa.eu/about-edpb/board/members_en.

7) Security

We use technical and organizational measures appropriate to the risk, including:

  • TLS encryption in transit.
  • Access controls and role-based permissions.
  • Minimization of collected data and limited retention.

No method of transmission or storage is completely secure; however, we strive to protect your data using industry-standard practices.

8) Children’s Privacy

This website is not directed to children under the age of 16, and we do not knowingly collect personal data from children.

9) Changes to This Policy

We may update this policy to reflect changes in our practices or legal requirements. Changes will be posted on this page with an updated “Last updated” date.

Cookie Policy

1) What Are Cookies?

Cookies are small text files stored on your device by your browser. They help websites function, remember your preferences, and in some cases measure usage. This site uses only a minimal set of cookies and does not use analytics or advertising cookies.

2) How We Use Cookies

  • Strictly necessary cookies: Required for the site to operate and for remembering your privacy preferences (e.g., whether you consented to certain categories). These do not require your consent under EU law.
  • Functionality, performance/analytics, and advertising cookies: Not used on this site at this time.

3) Cookies We Set

  • Consent/preference cookie:
    • Purpose: Remember your cookie preferences so you don’t have to set them each visit.
    • Typical duration: up to 6–12 months.
    • Category: Strictly necessary.

Note: Actual cookie names and durations may vary slightly due to technical updates. The categories and purposes above remain accurate for this site.

4) Managing Cookies

  • Browser settings: You can block or delete cookies in your browser. Doing so may affect site functionality limited to remembering preferences.
    • Instructions: see support pages for Chrome, Firefox, Safari, Edge, or Opera.
  • Device-level controls: Mobile devices may offer additional privacy settings.

5) Third-Party Services

  • Email delivery: When you submit the contact form, your message is transmitted via an email service provider. This may involve standard email metadata processing (e.g., sender, recipient, timestamps). This is not used for advertising or profiling.

6) International Transfers for Cookies

This site does not use third-party analytics or advertising cookies. If any future cookie-based service involves transfers outside the EEA, we will implement appropriate safeguards and request consent where required.

How to Contact Us

For any privacy or cookie-related questions, or to exercise your rights, please reach out using the contact form: https://blog.200ms.net/contact/.