Privacy Policy

We respect your privacy. This policy explains what we collect, why we collect it, and how we handle your information. We keep data collection minimal and use it only to deliver this service. This site is operated in the EU/EEA and designed for GDPR compliance.

1) Who we are

Controller: Operated by an individual based in Germany ("When to Run"). Contact: contact@whentorun.eu.

2) What we collect

• Email address and selected country — to send informational CMRI alerts you opt into.
• Consent records — time, policy version, and preferences.
• Basic service logs — requests, error logs, and aggregate analytics to keep the site reliable. We avoid cross‑site tracking.

3) Why we collect it (purposes)

• Send you country‑specific CMRI alerts you requested.
• Operate, secure, and debug the site and email delivery.
• Understand aggregated usage to improve clarity and accessibility.

4) Legal bases

• Consent — for email alerts and related communications.
• Legitimate interests — for basic, privacy‑preserving logs and security necessary to operate the site.

5) Retention

• Unverified email signups are deleted within 30 days.
• Unsubscribed emails are deleted within 7 days.
• Service logs are kept briefly (e.g., 30–90 days) for reliability and security.

6) Sharing and processors

We do not sell your data. We may use vetted processors to host the site or send email. These processors act on our instructions and are bound by contracts and data protection terms. Where processors are outside the EU/EEA, we use appropriate safeguards (e.g., SCCs).

7) Your rights

• Access, rectification, erasure, restriction, and portability.
• Withdraw consent at any time (unsubscribe links in emails).
• Object to processing based on legitimate interests where applicable.
• Lodge a complaint with your local supervisory authority.

8) Security

We use encryption in transit, access controls, and data minimization. No online service is 100% secure, but we strive to apply proportional safeguards and promptly address issues.

9) Children

This service is not directed to children under 16 (or the local age of consent where higher).

10) Changes

We may update this policy to reflect changes in the service. We will indicate the last updated date and, where material, provide a clear notice.

Effective: 28 August 2025 • Last updated: 28 August 2025