This policy explains how personal data is processed on us-after-all.net (the “site”) of US_AFTER_ALL, a research collective. It applies to visitors in the European Union, the European Economic Area and the United Kingdom, and is written under Regulation (EU) 2016/679 (GDPR), Directive 2002/58/EC (ePrivacy) and Italian law, in particular the Personal Data Protection Code (Legislative Decree 196/2003, as amended).
01Who is responsible
The controller is:
Ivan Streltsov, a private individual resident in Udine, Italy
Email: editors@us-after-all.net
Use this address for any question about your personal data. No data protection officer has been appointed, as none is required.
02What we process, why, and for how long
| Situation | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Visiting the site | IP address, date and time, requested page, browser and device information (technical server logs kept by our hosting provider) | Delivering the site, security, fixing errors | Legitimate interest (Art. 6(1)(f) GDPR) in running a secure site | Only as long as needed for operation and security, according to the hosting provider’s log settings |
| Reading preferences | Text size, light/dark theme, panel state, stored in your own browser (see the [Cookie policy](/legal/cookies)) | Remembering the settings you choose | Art. 5(3) ePrivacy / Art. 122 of the Italian Code: strictly necessary for a service you requested | Until you clear your browser storage; never sent to us |
| Newsletter | Email address; date and time of subscription request, confirmation and unsubscription | Sending the US_AFTER_ALL newsletter | Your consent (Art. 6(1)(a) GDPR), given through double opt-in | Until you unsubscribe. After that we keep only the address and the consent record for 24 months to prove that your consent and withdrawal were handled correctly, then delete them |
| Contact form and email | Email address (required), name (optional, you may use a pseudonym), your message and any details you add | Reading and answering your message | Legitimate interest in answering enquiries (Art. 6(1)(f)); steps at your request before an agreement (Art. 6(1)(b)) where you propose a collaboration | 12 months after the last message in the conversation, unless a longer period is required by law or to defend legal claims |
| Legal obligations and claims | Any of the above, where necessary | Complying with law, establishing or defending legal claims | Art. 6(1)© and (f) | As long as the law or the claim requires |
Providing your email address is not a statutory or contractual requirement; without it we cannot send the newsletter or answer you. We do not use analytics, advertising or tracking tools, do not profile visitors, and do not make automated decisions about you.
04Who receives your data (processors)
We do not sell your data and do not share it for advertising. We use two service providers acting on our instructions under data processing agreements (Art. 28 GDPR):
- **Railway Corporation** (United States), hosting of the site, the database that holds subscriber and contact-form data, and server logs.
- **Plus Five Five, Inc., trading as Resend** (United States), delivery of confirmation emails and newsletters. Resend receives the recipient’s email address and the content of the email.
Where the law requires, we may also disclose data to authorities or courts. Our co-editors may read messages sent through the contact form.
05Transfers outside the EEA and the UK
Both processors are based in the United States. Transfers rely on the European Commission’s adequacy decision for the EU–U.S. Data Privacy Framework (and its UK extension) where the provider is certified, and in any case on the Standard Contractual Clauses (and UK Addendum) included in the providers’ data processing agreements, together with their technical and organisational security measures. You can ask us for a copy of the safeguards at editors@us-after-all.net.
06Your rights
Under Articles 15–22 GDPR (and the UK GDPR if you are in the United Kingdom) you have the right to:
- access your data and receive a copy;
- have inaccurate data corrected;
- have your data erased;
- restrict processing;
- receive the data you provided in a portable format;
- object at any time to processing based on legitimate interest;
- withdraw consent at any time, with effect for the future.
To exercise a right, write to editors@us-after-all.net. We reply within one month. We may ask you to confirm your identity.
You also have the right to lodge a complaint with a supervisory authority. In Italy this is the Garante per la protezione dei dati personali (Piazza Venezia 11, 00187 Roma, www.garanteprivacy.it). You may also complain to the authority in the country where you live or work; in the United Kingdom, this is the Information Commissioner’s Office (ico.org.uk).
07Security
Data is stored on the infrastructure of the providers named above, transmitted over encrypted connections (HTTPS) and accessible only to the editors who need it. No system is perfectly secure; if a breach puts your rights at risk, we will notify you and the Garante as the law requires.
08External links
The site may link to other websites (for example social networks). We are not responsible for their privacy practices; see their own policies.
09Changes
We may update this policy, for example when we change a provider or add a feature. The date at the top shows the current version. Material changes will be announced on this page.
Questions about this document: Contacts →