Privacy policy

Until you agree, Google Analytics is loaded but may store nothing on your device. The visit is counted without cookies and without an identifier.

Once you agree, it records:

• a random number that tells your browser apart from others
• your IP address, shortened before Google stores it
• your device, operating system and browser
• the approximate city you are in
• the pages you opened
• the page you arrived from, if you followed a link

The first two entries in the table are set by Google. The third, ds-consent, holds your decision and exists whichever way you decided.

The ds-consent record needs no consent of its own, because it is strictly necessary for something you asked for: not being asked again on every page. Telling you about it is still required, so it is in the table.

We ask for no name and no phone number anywhere on this site, and there are no bookings yet. The one form is the newsletter signup, which has a section of its own below.

A form at the foot of the home page and at the end of every post takes an email address. Filling it in is optional and the site reads the same without it.

Once it is sent we keep:

• your email address
• the language you were reading in, so we write in it
• the date, time and IP address of the signup
• the date, time and IP address of the confirmation, when you open the link
• the page the form was on
• the sentence beside the checkbox, exactly as it read at the time

The addresses and timestamps are evidence that consent was actually given, and that is all they are for. The sentence is stored as a copy rather than a pointer to this page, so editing the wording later cannot change what you agreed to.

Signing up takes two steps. Until you open the link in the confirmation email you are not on the list, and an unconfirmed signup deletes itself after two days.

The legal basis is consent, GDPR article 6(1)(a). We keep the address until you leave. Unsubscribing is one click from any email and takes effect at once.

We do not track who opened an email or what they clicked.

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. They are the processor and handle the data on our instructions.

Amazon Web Services EMEA SARL. The site itself sits on their servers in Frankfurt, and so do the addresses on the newsletter list. They are a processor and use the data for nothing of their own. This was true before the list existed and went unsaid, which this corrects.

Some of that processing happens in the United States. The transfer relies on the EU-US Data Privacy Framework, to which Google is certified.

The temperature in the page header is served from an address on this same domain. Our own server fetches the forecast, so your browser never talks to an outside service and no cookie is set.

Nobody else receives any of it.

Under the GDPR you have the right to:

• access the data we hold about you
• have inaccurate data corrected
• have it erased
• restrict how it is processed
• receive it in a portable form
• object to the processing
• withdraw consent at any time

A withdrawal applies from the moment you make it. What was collected while consent stood does not become unlawful.

Write to info@dreamyseaside.com and we answer within a month. Without the number from the _ga cookie we cannot find you in the statistics, because it is the only trace of you we hold.

You can change your decision here, at any time. The button brings the bar back, and a new decision replaces the old one straight away.

If you withdraw, Google Analytics stops storing immediately. Cookies already set stop being read and expire on their own, and you can delete them sooner through your browser settings.