Privacy policy
Two things happen here: the contact form, and an audience count that writes nothing to your device unless you allow it.
Who is responsible
SheepIT SARL-S, 1 Rue de Holtz, 8826 Perlé, Luxembourg (RCS B267383), acting as data controller. Questions about this page go to contact@sheepit.eu.
What is collected, and why
The contact form collects a name, an email address, a message, and your explicit consent to store them. The purpose is to answer the request, and nothing else. The legal basis is that consent, which you give with the checkbox and can withdraw at any time by writing to the address above.
The form also carries two anti-spam signals: a hidden field that a human never fills in, and the time the page was rendered. Neither identifies you.
Where it goes
The message is sent to an automation service, Make (Celonis SE), on its European infrastructure, which forwards it to my mailbox. Those two processors see the message because they carry it. It is not sold, shared, or used to build a profile, and there is no mailing list on this site to add you to.
How long it is kept
For as long as the exchange it belongs to stays useful, and then it is deleted. If you ask me to delete it sooner, I delete it.
Audience measurement
This site uses Google Analytics 4, and only to know how many people read which pages. There is no advertising, no remarketing, and no profile built about you: the advertising signals are switched off in the configuration, not merely left unused.
Nothing is written to your device until you say yes. Until you accept, the measurement runs in a cookieless mode: Google receives an anonymous signal that a page was viewed, with no identifier stored on your side. If you accept, Google Analytics sets its own cookie so that two visits can be recognised as the same one. If you decline, it stays cookieless. Either way the choice is remembered in your browser, not on my server.
The processor is Google Ireland Limited. Because Google is a US company, some data may be processed outside the European Union, under the standard contractual clauses and the EU-US Data Privacy Framework.
Changing your mind is meant to be as easy as the first answer. Done, the question will come back.
What this site does not do
No advertising, no remarketing, no third party tracking cookie, and no social network button that calls home. The fonts are the ones already installed on your device, so displaying a page here does not fetch anything from a font server.
Hosting
The site is served as static files from Amazon S3 through Amazon CloudFront, operated by Amazon Web Services EMEA SARL, 38 avenue John F. Kennedy, 1855 Luxembourg. Like any web server, it processes the technical data needed to deliver a page.
Your rights
Under the GDPR you can ask for access to your data, its correction, its deletion, or its portability, and you can object to its processing. Write to contact@sheepit.eu. If you believe the matter was handled badly, you can lodge a complaint with the Commission nationale pour la protection des données (CNPD) in Luxembourg.