Your data.
Your control.
Data Controller
The data controller is Amine Salhi, publisher and founder of Weshmind Journal, based in Perugia (PG), Umbria, Italy. For any privacy-related enquiry: privacy@weshmind.com
This policy is provided under Art. 13 GDPR to users of the website weshmindjournal.com.
No Data Protection Officer (DPO) has been appointed, as the processing does not fall within the cases set out in Art. 37 GDPR: the Controller is not a public authority and does not carry out large-scale processing of special categories of data.
Categories of Data Collected
Data provided voluntarily: email address (newsletter subscription), name and message (contact enquiries), cookie preferences.
Technical browsing data: IP address (processed by Vercel to serve pages), browser type and operating system, pages visited and session duration, traffic source (referrer).
Advertising data (Google AdSense): browsing data and interests used by Google for ad personalisation, activated only upon explicit user consent.
Weshmind Journal does not collect special categories of data under Art. 9 GDPR (health, political, religious, biometric data).
Purposes and Legal Bases
Provision of the editorial service (Art. 6(1)(b) GDPR — contract performance): technical operation of the site, newsletter management, handling user enquiries.
Advertising via Google AdSense (Art. 6(1)(a) GDPR — consent): personalised advertising is activated only upon explicit consent. Consent may be withdrawn at any time without affecting prior processing.
IT security and fraud prevention (Art. 6(1)(f) GDPR — legitimate interest): protection of the site infrastructure, prevention of fraud and unauthorised access. Users may object to this processing under Art. 21 GDPR.
Legal obligations (Art. 6(1)(c) GDPR): mandatory document retention, responses to requests from competent authorities.
Cookies and Tracking
The site uses strictly necessary cookies (no consent required): wmj-theme (localStorage, saves light/dark mode preference) and wmj-cookie-consent (365 days, records banner acceptance).
Google AdSense sets advertising cookies only upon explicit user consent. In the absence of consent, non-personalised advertising is displayed.
Weshmind Journal does not use: Google Analytics or any third-party traffic analytics, social media pixels (Facebook, LinkedIn, TikTok), heat-mapping or session recording tools.
For full details on cookies, durations, and preference management, see our Cookie Policy.
Sub-Processors
The Controller engages the following sub-processors, each bound by data processing agreements compliant with Art. 28 GDPR: Vercel Inc. (USA) — hosting and CDN, EU edge servers — Privacy Policy; Google LLC (USA) — AdSense, with consent — Privacy Policy; Mailchimp / Intuit Inc. (USA) — newsletter — Privacy Policy; Supabase Inc. (USA) — database, EU servers (Frankfurt) — Privacy Policy.
Personal data is not sold, transferred, or shared with third parties for commercial profiling or marketing purposes.
International Data Transfers
Data processed by Vercel, Google, Mailchimp, and Supabase may be transferred to servers in the United States. All such transfers are carried out under the Standard Contractual Clauses (SCC) adopted by the European Commission on 4 June 2021 and the EU-US Data Privacy Framework (DPF), adopted by adequacy decision on 10 July 2023.
The Controller has verified the adequacy of the safeguards provided by each sub-processor, in accordance with the principles established by the Court of Justice of the EU in the Schrems II ruling (C-311/18).
Data Retention
Newsletter data: retained until unsubscription; removed from the active list within 48 hours and permanently deleted within 90 days.
Technical logs (Vercel): managed by Vercel according to their own policies (typically 30 days); not retained directly by the Controller.
Preference cookies (wmj-theme, wmj-cookie-consent): 365 days from the date of setting.
Email correspondence: retained for as long as necessary to handle the enquiry, and no longer than 12 months.
AdSense advertising data: managed directly by Google according to their own retention policies.
Security and Breach Notification
Security measures include: encrypted connections in transit (HTTPS/TLS) and at rest on Vercel's infrastructure; access to data limited to the Controller only; secure authentication for the editorial platform.
In the event of a personal data breach likely to result in a risk to individuals' rights and freedoms, the Controller will notify the Italian Garante Privacy within 72 hours of becoming aware, as required by Art. 33 GDPR.
Where the breach is likely to result in a high risk, affected individuals will be notified without undue delay, with a description of the breach, the categories of data affected, and the measures taken.
Your Rights
Under Arts. 15–21 GDPR, you have the right to: Access (Art. 15) — a copy of your data; Rectification (Art. 16) — correction of inaccurate data; Erasure (Art. 17) — right to be forgotten; Restriction (Art. 18); Portability (Art. 20) — structured format (JSON or CSV); Objection (Art. 21); Withdrawal of consent — at any time, without affecting prior processing.
Under Art. 22 GDPR, Weshmind Journal does not carry out automated decision-making with legal or similarly significant effects on individuals.
To exercise any of these rights, contact: privacy@weshmind.com. The Controller responds within 30 days; in complex cases, within 90 days with prior notification of the extension.
You have the right to lodge a complaint with the Italian Garante Privacy (garanteprivacy.it) or the data protection authority of your EU country of residence.
Marketing Communications
The Weshmind Journal newsletter is sent exclusively to subscribers who have completed a double opt-in process via Mailchimp: a confirmation email is sent and the user must click the activation link to complete the subscription.
Every communication includes an immediate unsubscribe link. Unsubscription takes effect within 48 hours of the request.
Children
Weshmind Journal is not directed at children under the age of 16. We do not knowingly collect personal data from children. To report a case: privacy@weshmind.com — immediate deletion guaranteed.
Updates
The Controller updates this policy in the event of relevant regulatory, technological, or operational changes. Material changes are notified to newsletter subscribers by email with at least 30 days' notice.
The current version is always available on this page with version number and date of last update. Previous versions are available upon request.
For any question about how we handle your data: privacy@weshmind.com
Controller: Amine Salhi · Perugia (PG), Italy · Response guaranteed within 30 days