Lena Mathisen

Privacy policy

Last updated 27 May 2026

Who is responsible

This mailing list is run by Lena Mathisen ([your full legal name and, if applicable, country of residence]). For any privacy question or request, write to privacy@lenamathisen.com.

What I collect

When you sign up I store your email address, the date and time you subscribed and confirmed, and — as evidence of your consent — the IP address and browser user-agent used to subscribe. Nothing more.

Why, and on what legal basis

I process this data on the basis of your consent (Article 6(1)(a) GDPR), which you give by ticking the box and confirming your email (double opt-in). I use it only to send you the bonus material you asked for and occasional updates about my books.

Who else processes it

I rely on a few trusted processors to run the list:

  • Resend — sends the confirmation, bonus and update emails.
  • Neon — stores the subscriber list (PostgreSQL).
  • Upstash — short-lived rate-limiting to prevent abuse of the sign-up form.
  • Vercel — hosts the website.

Each acts only on my instructions. Where data is transferred outside the EU/EEA, it is covered by the safeguards those providers offer (e.g. Standard Contractual Clauses).

How long I keep it

If you never confirm, your record is deleted within 60 days. If you confirm, I keep your email until you unsubscribe — every email includes a one-click unsubscribe link, and unsubscribing removes you from future mailings.

Your rights

You can ask to access, correct or delete your data, or withdraw consent at any time (unsubscribing does exactly that). Just use the unsubscribe link or email the address above. If you believe your data is mishandled, you may complain to your local data-protection authority — in Norway, the Datatilsynet.

Cookies

This site uses no advertising or tracking cookies. It sets only what is strictly necessary to serve the page.