Privacy Policy
This Privacy Policy outlines the rules for processing and protecting personal data collected from users on the Tessera Collective website. We are committed to processing your data in compliance with the General Data Protection Regulation (GDPR) and other applicable privacy laws.
1. Data Controller
The Administrator of your personal data is Iga Zakrzewska ("Administrator" or "Data Controller"). For all matters regarding the processing of personal data and the exercise of rights related to data processing, you can contact the Administrator via the email address provided in correspondence after subscribing.
2. Scope and Purpose of Data Collection
We collect and process your personal data solely to the extent necessary to provide the requested digital services. The data we collect includes:
- Email Address: Necessary for the delivery of the requested digital product (e.g., the Monthly Reset PDF) and for distributing the newsletter.
- Technical Data: Basic server logs and essential analytics (such as Google Search Console) to monitor and ensure the proper functioning and security of the website. We do not use third-party behavioral cookies or advanced tracking mechanisms (e.g., Google Analytics, Meta Pixel) without prior consent.
3. Legal Basis for Processing
Your personal data is processed on the basis of your explicit consent (Article 6(1)(a) of the GDPR). By providing your email address and submitting the form, you enter into an agreement for the provision of digital content. Please note that we utilize a Single Opt-in mechanism; initiating the subscription constitutes direct consent to receive the promised materials and subsequent newsletter communications.
4. Data Processors and Transfers
To deliver our services efficiently, we entrust the processing of your email address to a selected third-party service provider:
- MailerLite: Our primary email marketing and delivery platform. Data is transferred and stored on MailerLite's servers in compliance with their Privacy Policy and data processing agreements, ensuring a level of security compliant with GDPR standards.
Your data is not sold, rented, or shared with unauthorized third parties.
5. User Rights Under GDPR
As a data subject, you hold comprehensive rights regarding your personal information. You have the right to:
- Request access to your personal data and obtain a copy of it.
- Request the rectification or updating of your data.
- Withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. You can easily do this by clicking the "Unsubscribe" link included in every email sent by the Administrator.
- Request the erasure of your personal data ("right to be forgotten").
- Request the restriction of the processing of your personal data.
6. Policy Updates
The Administrator reserves the right to make changes to this Privacy Policy. Such changes may be necessary due to new technological developments, changes in legal regulations regarding personal data protection, or organizational changes relating to the operation of the website. The current version of the Privacy Policy is always available on this page.