Newsletter privacy policy
NADI is an organisation that is being established. This statement sets out what happens to your data when you sign up for the newsletter, and what rights you have.
1. WHO IS RESPONSIBLE
NADI is still being established. Until it is, the Minister of Economic Affairs and Climate Policy, Postbus 20401, 2500 EK The Hague, is the controller.
Once NADI has been formally established, your data and the responsibility for your data pass to that entity. We will tell you by email before that happens. You can unsubscribe at that moment — and at any other moment.
2. WHAT WE PROCESS AND WHY
The sign-up form asks only for your email address, which we use to send you the newsletter. You first receive a confirmation email. Your subscription is only final once you click the link in it. We record the moment of that click and the page the form was on, as proof that you gave consent.
Lettership, the service that runs the newsletter, also records whether your subscription is active, unsubscribed, or blocked after a bounce or a spam complaint, with the date. For each newsletter it records whether it was delivered, bounced or opened, and which links were clicked. Their mail provider Postmark additionally processes your IP address, your approximate city and the type of device and mail app, and keeps these for 60 days, after which they are deleted. Lettership does not use these details and has said it will remove them from its own records.
When you sign up, your IP address and browser details are used to block bots (Cloudflare Turnstile). These are kept only in short-lived technical logs and are not stored with your subscription.
3. ON WHAT LEGAL BASIS
Your consent — Article 6(1)(a) GDPR. You can withdraw it at any time through the unsubscribe link at the foot of every email.
4. WHO RECEIVES YOUR DATA
Lettership, established in the Netherlands, runs the newsletter under a processing agreement. Lettership in turn uses Postmark to deliver the email and Cloudflare for bot protection and for serving the form.
Your data is not sold, rented or processed for other purposes.
5. TRANSFERS OUTSIDE THE EU
Lettership is established in the Netherlands. Postmark and Cloudflare are American, so data may be processed outside the European Economic Area. That is only permitted with the safeguards the GDPR requires, at present the EU-US Data Privacy Framework.
6. HOW LONG WE KEEP IT
Your subscription is kept until you unsubscribe. Unsubscribing takes effect immediately: you receive no further email. Your address is still kept after that, marked as unsubscribed, precisely so that it cannot be emailed again by mistake. If you want your data deleted entirely, let us know; that then happens within one month at the latest.
7. COOKIES
The sign-up form sits in a frame of its own on the home page and is served by Lettership through Cloudflare. Within that frame these cookies can be set:
__cf_bm and cf_clearance (Cloudflare).Security cookies that tell people from bots. __cf_bm lasts 30 minutes, cf_clearance up to a year.
lettership_session and XSRF-TOKEN (Lettership).Technical session cookies, 2 hours. Browsers do not store these two when the form is embedded on another domain.
There are no tracking, analytics or advertising cookies.
8. YOUR RIGHTS
You have the right to see your data, to have it corrected and to have it deleted. You can also ask us to restrict a processing operation, object to one, or ask for your data in a common file format. You can withdraw your consent at any time; that takes effect from the moment you do so and does not undo what happened before.
Send your request to hello@nadi.nl. We answer within one month.
If you are unhappy with how we handle your data, please tell us first at hello@nadi.nl. You can also complain to the Autoriteit Persoonsgegevens, the Dutch data protection authority, at autoriteitpersoonsgegevens.nl.
9. CHANGES AND CONTACT
If the way we handle data changes, we amend this statement and update the date at the top.
Questions are welcome at hello@nadi.nl. Post: Minister of Economic Affairs and Climate Policy, Postbus 20401, 2500 EK The Hague.
10. DATA PROTECTION OFFICER
The Ministry of Economic Affairs and Climate Policy has a data protection officer (functionaris voor gegevensbescherming, FG). You can go to the FG with questions or complaints about this privacy statement, or about the way the Ministry handles your personal data. You can ask your question at PbFG@minezk.nl or by writing to:
Functionaris voor gegevensbescherming, Ministerie van Economische Zaken en Klimaat, Bureau Bestuursraad, Postbus 20401, 2500 EK The Hague.