Lena Mathisen
Privacy policy
Last updated 27 May 2026
Who is responsible
This mailing list is run by Lena Mathisen ([your full legal name and, if applicable, country of residence]). For any privacy question or request, write to privacy@lenamathisen.com.
What I collect
When you sign up I store your email address, the date and time you subscribed and confirmed, and — as evidence of your consent — the IP address and browser user-agent used to subscribe. Nothing more.
Why, and on what legal basis
I process this data on the basis of your consent (Article 6(1)(a) GDPR), which you give by ticking the box and confirming your email (double opt-in). I use it only to send you the bonus material you asked for and occasional updates about my books.
Who else processes it
I rely on a few trusted processors to run the list:
- Resend — sends the confirmation, bonus and update emails.
- Neon — stores the subscriber list (PostgreSQL).
- Upstash — short-lived rate-limiting to prevent abuse of the sign-up form.
- Vercel — hosts the website.
Each acts only on my instructions. Where data is transferred outside the EU/EEA, it is covered by the safeguards those providers offer (e.g. Standard Contractual Clauses).
How long I keep it
If you never confirm, your record is deleted within 60 days. If you confirm, I keep your email until you unsubscribe — every email includes a one-click unsubscribe link, and unsubscribing removes you from future mailings.
Your rights
You can ask to access, correct or delete your data, or withdraw consent at any time (unsubscribing does exactly that). Just use the unsubscribe link or email the address above. If you believe your data is mishandled, you may complain to your local data-protection authority — in Norway, the Datatilsynet.
Cookies
This site uses no advertising or tracking cookies. It sets only what is strictly necessary to serve the page.