If you subscribe to our newsletter or blog email updates, we process the personal data you provide during signup, in particular:

• email address
• first name (if provided)

We may also process technical and verification data necessary to manage your subscription and demonstrate consent, such as:

• date and time of signup
• date and time of confirmation (if double opt-in is used)
• technical log data related to subscription and unsubscription

We process this data for the following purposes:

• sending newsletter emails and blog updates
• personalizing emails, including greeting you by your first name where applicable
• managing subscriptions and unsubscribe requests
• documenting consent where necessary for compliance purposes

We may use technical service providers for:

• hosting
• email delivery

These providers process personal data on our behalf under data processing agreements in accordance with Art. 28 GDPR.

Our services are hosted in the European Union. If you access or subscribe to the service from outside the European Union or the European Economic Area, your data may be transmitted to and processed in the European Union.

If personal data is transferred to countries outside the European Economic Area, such transfers will only take place in accordance with the applicable requirements of Chapter V GDPR.

The legal basis for processing your newsletter subscription data is your consent pursuant to Art. 6(1)(a) GDPR.

We use a double opt-in procedure i.e. we may also process information relating to the confirmation of your subscription in order to verify that consent was validly given. This processing is based on our legitimate interests in demonstrating valid consent and ensuring legally compliant newsletter delivery pursuant to Art. 6(1)(f) GDPR.

If we retain technical logs or records for the establishment, exercise, or defense of legal claims, such processing is also based on Art. 6(1)(f) GDPR.

Unsubscribe and Withdrawal of Consent

You may withdraw your consent at any time with effect for the future.

You can unsubscribe by:

• clicking the unsubscribe link in any email we send, or
• using the unsubscribe functionality supported by your email provider, including unsubscribe headers where available

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

We may use technical service providers for hosting, email delivery, and newsletter management. These providers process data on our behalf under data processing agreements in accordance with Art. 28 GDPR. The service is being hosted in the european union and if you reside outside of EU, your data will be transmitted to the european union.

We store your newsletter subscription data until:

• you withdraw your consent / unsubscribe, or
• the newsletter service is discontinued, or
• the data is otherwise no longer required for the purpose for which it was collected.

Proof of consent and technically necessary log data may be stored for as long as needed to demonstrate compliance with legal obligations or defend against legal claims.

Deletion After Unsubscribe

Upon unsubscription, we stop sending newsletter emails to your email address. We delete your data from the active mailing list after unsubscription. We may retain a minimal suppression record, such as your email address and the unsubscribe timestamp, solely to ensure that you do not receive further newsletter emails. This processing is based on Art. 6(1)(f) GDPR.

You have the right to:

• request access to your personal data (Art. 15 GDPR),
• request rectification (Art. 16 GDPR),
• request erasure (Art. 17 GDPR),
• request restriction of processing (Art. 18 GDPR),
• object to processing where applicable (Art. 21 GDPR),
• receive your data in a portable format where applicable (Art. 20 GDPR),
• lodge a complaint with a supervisory authority (Art. 77 GDPR).

This template provides general GDPR/DSGVO-oriented wording. It must be reviewed and adapted to your actual data flows, providers, and legal obligations before publication.

Cookie name: session (first-party, technically necessary). Provider: Site operator (this application; blog.regmi.dev). Purpose: Maintains secure session state (for example, admin authentication) and transient session data (for example, one-time status/toast messages). Legal basis: Art. 6(1)(f) GDPR/DSGVO (legitimate interests in secure and functional operation); where applicable for authenticated admin use, Art. 6(1)(b) GDPR/DSGVO. Retention: up to 7 days (configured max session age), unless deleted earlier by logout/session reset.

No analytics or advertising cookies are set by default by this codebase.

Client-side storage note (not a cookie): Theme preference is stored in browser localStorage under key theme.

By default, this deployment serves core web assets (fonts and JavaScript libraries) from first-party static paths. If we later add third-party embeds, analytics, maps, media players, or external scripts, we document them here and assess whether consent is required before loading.