Last updated: July 2026
1. Data Controller
RegDossier is operated by a private individual based in Ljubljana, Slovenia. For privacy inquiries, contact: info@regdossier.eu
2. What Data We Collect
Information you provide directly: your email address when subscribing to the newsletter, and any information you send us by email.
Information collected automatically: we use Plausible Analytics, a privacy-focused analytics service operated within the EU, which records pages visited, referring website, browser type, device type and country of visit. Plausible uses no cookies and stores no IP addresses, personal data or persistent identifiers. Individual visits cannot be linked to you.
Tool usage statistics: when you complete one of our interactive compliance tools, we record the answer options selected and the regulation assessed. These records contain no IP address, no identifiers and no free-text input, and are anonymous at the point of collection. They cannot be linked to you.
3. Why We Collect This Data
To deliver the RegDossier newsletter to your inbox (legal basis: consent, GDPR Article 6(1)(a)).
To understand how visitors use our website so we can improve content (legal basis: legitimate interest, GDPR Article 6(1)(f)).
To ensure website security and prevent abuse (legal basis: legitimate interest, GDPR Article 6(1)(f)).
Analytics data and tool usage statistics contain no personal data and therefore fall outside the scope of the GDPR. We describe them here for transparency.
4. How We Use Your Data
We use your email address to send you the RegDossier newsletter (published fortnightly) and occasional updates related to our publication. Our email provider measures newsletter opens and link clicks so we can understand which topics resonate with readers.
We use aggregate analytics data to understand which content resonates with visitors and to improve our website. We use anonymous tool usage statistics to publish aggregated research on compliance trends, for example typical implementation cost estimates by company size.
We do not sell your personal data to third parties. We do not share your email address with sponsors or advertisers. We do not use your data for automated decision-making with legal effects. We do not transfer your data outside the EEA without adequate safeguards.
5. Data Sharing
We share data only with service providers necessary to operate RegDossier:
MailerLite (UAB MailerLite, Lithuania, EU) processes and stores subscriber email addresses, sends newsletters on our behalf and measures newsletter opens and clicks. MailerLite is GDPR-compliant and processes data within the EEA.
Plausible Insights OÜ (Estonia, EU) processes aggregate website statistics on our behalf. No personal data is stored.
Our web hosting provider (EU-based servers) stores website data, including anonymous tool usage statistics.
We may share data when required by law or legal process.
6. Data Retention
Newsletter subscriber data: retained until you unsubscribe, then deleted within 30 days.
Analytics data: aggregate statistics only, containing no personal data.
Tool usage statistics: retained indefinitely in anonymous, aggregated form.
Server logs: retained for 30 days.
7. Your Rights (GDPR Articles 15-22)
You have the right to: access your data and request a copy; rectify inaccurate data; erase your data (“right to be forgotten”); restrict processing; data portability (receive your data in machine-readable format); object to processing based on legitimate interest; withdraw consent at any time by unsubscribing; lodge a complaint with your national data protection authority.
Because our analytics and tool statistics contain no personal data, these rights apply in practice to your newsletter subscription and email correspondence.
To exercise any right, email: info@regdossier.eu. We will respond within 30 days.
You may also contact: Informacijski pooblaščenec Republike Slovenije (Information Commissioner of the Republic of Slovenia), https://www.ip-rs.si/
8. Cookies
We use only essential cookies required for the website to function. We do not use analytics, advertising, tracking or social media cookies. This is why you will not find a cookie consent banner on this website: there is nothing to consent to.
9. Security
We protect your data through SSL/TLS encryption on all pages, EU-based hosting, regular software updates, and access controls. We do not store payment data on our servers.
10. Children
This website is not intended for individuals under 16. We do not knowingly collect data from children.
11. Changes to This Policy
We may update this policy periodically. Material changes will be communicated via email to subscribers and a notice on the website. The “Last updated” date at the top reflects any changes.
12. Contact
For privacy-related inquiries: info@regdossier.eu