Privacy Policy

Effective Date: March 28, 2026

This Privacy Policy outlines our commitment to protecting your personal data and your rights under the General Data Protection Regulation (GDPR) (EU) 2016/679. This policy applies to all users of our educational handbook and associated services.

1. Data Controller Identification

For the purposes of the GDPR, we act as the Data Controller for any personal information collected through this website. We are responsible for deciding how we hold and use personal information about you.

2. What Data We Collect & Lawful Basis

We strictly adhere to the principle of data minimization. We only collect data necessary to provide and improve our educational services.

Log Data and Analytics

When you visit our site, our servers automatically record information that your browser sends (“Log Data”). This may include your IP address, browser type, pages visited, and timestamps. Lawful Basis: Legitimate Interests (Article 6(1)(f) GDPR) — analyzing traffic to maintain the security and functionality of our platform.

Cookies

We use essential cookies required for the website functionality, as well as optional analytics cookies. Lawful Basis: Consent (Article 6(1)(a) GDPR) — for non-essential cookies. You can manage or withdraw your consent at any time via your browser settings.

3. How We Use Your Information

We process your data exclusively for the following purposes:

• To provide, operate, and secure our handbook platform.
• To detect and prevent fraudulent activities or security breaches.
• To analyze anonymized reading patterns to improve our technical content.

4. Data Sharing and International Transfers

We do not sell, trade, or otherwise transfer your personal data to outside parties without your explicit consent. Minimal data may be shared with trusted third-party service providers (e.g., hosting providers, analytics) acting as Data Processors under strict Data Processing Agreements (DPA). If data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs).

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Analytics logs are automatically anonymized or purged after 14 months.

6. Your Data Protection Rights Under GDPR

Under the GDPR, you have the following fundamental rights regarding your personal data:

• The right to access: You have the right to request copies of your personal data.
• The right to rectification: You have the right to request that we correct any information you believe is inaccurate or incomplete.
• The right to erasure (Right to be Forgotten): You have the right to request that we erase your personal data, under certain conditions.
• The right to restrict processing: You have the right to request that we restrict the processing of your personal data.
• The right to object to processing: You have the right to object to our processing of your personal data.
• The right to data portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you.

7. Contact Us

If you wish to exercise any of your GDPR rights, or if you have any questions or concerns regarding this Privacy Policy, please contact our Data Protection Officer (DPO) at info@dannie.cc. We have one month to respond to your request.

You also have the right to lodge a complaint with a Data Protection Supervisory Authority in your EU Member State.