Privacy notice

Who is responsible

Jukka Blomberg, Helsinki, Finland, acting in a personal capacity as data controller. Contact: hello@jukkablomberg.com. No data protection officer is appointed — that address reaches me directly. If we go on to work together, that engagement is contracted separately, under whichever entity we sign with, and carries its own privacy notice.

The one thing this site collects

At the bottom of most pages there is a form offering a free one-page PDF about how I run my ventures. It asks for your email address. That form is the only place on this site where you can give me personal data — there is no contact form, no comments, no account, no login.

If you use it, here is the entire record I end up with: your email address, which page you asked from, whether you ticked the optional updates box, and the date. It arrives as a single email in my inbox. There is no database and no customer list behind this site.

If you never use the form, this site stores nothing about you — apart from anonymous visit counting, which section 06 explains.

What I do with your address

I email you the PDF, once. A single email with the one-pager attached goes out right after you submit the form — that is the delivery you asked for (the legal basis is Art. 6(1)(b) GDPR, performing something you requested). It is not a mailing list. Nothing follows it unless you ticked the optional box or you write back.

I can reply to you. Your request lands in my inbox with your address set as reply-to, so if you write something, answering you is one click. Same basis: you asked.

I see that a real person asked. That is how I judge whether the document is worth maintaining. The legal basis here is my legitimate interest in knowing whether my own work is read (Art. 6(1)(f)) — weighed against the fact that the data is one address, never combined with anything, never profiled, never used to contact you unprompted. You can object to this at any time under Art. 21 — one email and the record is deleted.

Only if you ticked the optional box: an occasional note when something ships. That runs on your consent (Art. 6(1)(a)) — the box is unticked by default, never required for the PDF, and withdrawable at any time. Every update carries a one-click unsubscribe link; replying “stop” works too.

And to be clear about what your address does NOT buy: the one-pager is not gated on it. The document opens directly on this site the moment you submit — even if every email fails.

How long I keep it

12 months, then it is deleted. 24 months if you opted in to updates, counted from your last interaction. Want it gone sooner? One line to the address above and it is deleted — I do not ask why.

Who else handles it

Two companies process the emails on my instructions, and no one else. Resend, Inc. (United States) is the service that actually sends both emails — the notification to me and the one-time PDF email to you. My mailbox provider stores the notification, like any email.

Because Resend is a US company, your address makes a transfer outside the EEA. In practical terms: your email address passes through servers in the United States on its way to my inbox. That transfer is covered by the Standard Contractual Clauses in Resend's data processing agreement (Art. 46(2)(c) GDPR) — not the EU–US Data Privacy Framework. If you would rather your address never leave the EEA, skip the form and write to me directly — the document is at /operating-system either way, and I will not withhold it.

Your address is never sold, rented, traded or shared for anyone else's marketing. There is no automated decision-making and no profiling.

Visit counting (analytics)

This site uses Google Analytics 4 to count page views and which links get clicked — so I can tell whether anyone reads what I publish. Being straight with you: it currently loads on every page without asking you first, and under the EU ePrivacy rules asking first would be the correct behaviour. A consent step is on the list, and this notice will be updated when it ships rather than after someone complains.

What it records is measurement only: page paths, clicked links, and for the one-pager form a source label and whether the updates box was ticked. Your email address is never placed in an analytics event — an automated test fails the build if any analytics event contains an “@” character.

Any content blocker stops the analytics entirely, and nothing on this site breaks if you block it.

Your rights

You can ask me, at any time: what data I hold about you (access), to correct it, to delete it, to restrict what I do with it, to hand it over in a portable format, or to stop processing it (objection). Where something runs on your consent — the updates box — you can withdraw that consent whenever you like. One email to hello@jukkablomberg.com is enough for any of these; there is no form to fill.

And if you think I am handling this badly, you can complain to the Finnish supervisory authority, the Office of the Data Protection Ombudsman — tietosuoja.fi.