Privacy policy

This policy explains how Creative Destruction VCC, the publisher of Slow Humans, handles personal data on slowhumans.com and in the emails and services connected to it.

Who is responsible

The controller is Creative Destruction VCC (UIC 208581552), the company that publishes Slow Humans Press. Company details are on the publisher page. For any question about your data, write to [email protected].

What we collect and why

Data	Purpose	Legal basis	Kept for
Email address and the answers you give in the web check	Sending the Local AI Network Check and the emails you signed up for	Consent (Art. 6(1)(a) GDPR), confirmed by double opt-in	Until you unsubscribe, then deleted within 30 days
Answers in the web check (operating system, memory, graphics card, document types)	Showing your estimate and choosing which emails are relevant	Consent, as above	As above
Site events: pages viewed, buttons used, campaign labels	Understanding which pages and campaigns help readers	Consent, until a legal review confirms otherwise	13 months
Consent record: your choice, the time and the version of this text	Proving what you agreed to	Legal obligation to demonstrate consent (Art. 6(1)(c) with Art. 7(1) GDPR)	3 years after the consent ends
Advertising pixel events (only if you accept them)	Measuring advertising	Consent	Set by the advertising platform
Google Analytics data: if you accept, pages viewed, how you arrived, browser and device, approximate location derived from your IP address; if you do not, only that a page was opened, without cookies	Understanding how visitors use the site	Consent; for the signal without cookies, our legitimate interest in counting visits	For the period set under Google Analytics’ own retention rules
Purchase record: your email address, the book you bought and when	Giving you the book, keeping it in your library and sending you its updates	Contract (Art. 6(1)(b) GDPR)	As long as the book is in your library; if you ask us to delete your data, we keep only a record of the sale without your email address, for our accounts (legal obligation, Art. 6(1)(c) GDPR), for as long as accounting law requires
Record of your agreement at checkout that access starts immediately: the time and the exact wording	Showing that your right of withdrawal ended with your agreement, if that is ever disputed	Legitimate interest in being able to prove it (Art. 6(1)(f) GDPR)	As long as the purchase record above
Your choice at checkout about emails on related books: whether you objected, the time and the wording you were shown	Occasionally emailing you about related books from Slow Humans, unless you objected; proving what you were told and what you chose	Legitimate interest in telling our customers about similar books (Art. 6(1)(f) GDPR), as the ePrivacy Directive allows for existing customers (Art. 13(2))	Emails until you object or unsubscribe; the record of your choice as long as the purchase record above
Emails you send us	Answering you	Legitimate interest in replying (Art. 6(1)(f) GDPR)	2 years after the conversation ends
Technical logs: IP address, browser, time of request	Security and fixing errors	Legitimate interest in running a secure site	30 days

Site events do not use a lasting identifier in your browser: a session is a hash that changes every day. Payment, VAT, receipts and invoices are handled by Stripe, the seller of the electronic editions, which keeps them under its own legal obligations; we never see your card details.

Who processes data for us

We use these providers. Most of them process data only on our instructions; Meta decides part of the advertising processing itself, so for those events we and Meta each carry our own responsibility. Stripe sells the electronic editions in its own name, so it is responsible for the payment data itself.

Provider	What it does	Where
Cloudflare	Delivers the site and protects it from attacks	EU and worldwide network; transfers under the EU-US Data Privacy Framework and standard contractual clauses
AlphaVPS	Hosts the servers that run the site and store its data	Sofia, Bulgaria
Kit	Sends the newsletter, the check emails, and occasional emails about related books to buyers who did not object	United States; EU-US Data Privacy Framework and standard contractual clauses
Stripe	Sells the electronic editions as the seller of record: takes the payment, charges VAT, issues receipts and invoices, and handles payment disputes; it passes us your email address, the book you bought and the choices you made at checkout	Ireland and the United States; EU-US Data Privacy Framework and standard contractual clauses
Meta	Advertising pixels, only after you accept them; Meta also uses the events for its own purposes	United States; EU-US Data Privacy Framework
Google	Google Analytics, with cookies only after you accept it; without Google signals and without advertising features	United States; EU-US Data Privacy Framework and standard contractual clauses

Emails that are not marketing - a sign-in link, the file you signed up for, a notice that a book you own has been updated - are sent by our own mail server on the same machines in Sofia, with no third party in between. A copy of the transfer safeguards for the providers above is available on request at [email protected].

Your rights

You can ask to see, correct, delete, receive a copy of, or restrict the processing of your data, object to processing based on legitimate interest, and withdraw consent at any time without affecting what was done before. Every email has an unsubscribe link, and cookie choices can be changed from the link at the bottom of every page.

We answer within 30 days. A request to delete covers our own systems and the providers above.

You can also complain to the Bulgarian Commission for Personal Data Protection (cpdp.bg) or to the authority in the EU country where you live.

Whether you have to give us data

Nothing on this site asks for data you are obliged to give. If you do not give your email address, we cannot send you the check or the newsletter; everything else on the site works the same.

Changes

Each version of this policy has a number and a date. When a change affects what you agreed to, we ask again.