Privacy policy
This policy explains what personal data this website handles, why, and the rights you have. In short: the site doesn’t track you, and the only personal data I receive is what you choose to send me.
Last updated:
Who is responsible
Elliot Eriksson (Portus mariae), based in Stockholm, Sweden, is the controller for personal data handled through this website. You can reach me at elliot@portusmariae.com.
What I collect and why
Contact: when you send the contact form, your name, email address, company (if given), the topics you picked and your message are emailed to me. I use them to reply and, if we work together, to run the project. The legal basis is my legitimate interest in answering enquiries, or taking steps towards a contract at your request.
Spam protection: the form has a hidden field that only automated bots fill in, and the server briefly keeps a count of messages per IP address to stop floods. Neither involves any third party or cookie.
Technical data: like any website, the server that hosts it records standard technical information such as IP address, browser type and the time of each request. This is used only to keep the site secure and working, and is kept for a short period by the hosting provider.
Visitor statistics: Vercel Web Analytics counts page views and where visits come from (country, browser, device type and referring site). It sets no cookies, stores nothing in your browser and can’t recognise you across visits or sites, so the numbers stay anonymous. The legal basis is my legitimate interest in knowing how the site is used. There’s no advertising, tracking pixels or social media plugins.
Who else processes data
The hosting provider, Vercel, processes the technical data above and the visitor statistics on my behalf. Images may be delivered from Sanity’s content delivery network (cdn.sanity.io), and the album cover in the “Currently listening to” card from Spotify’s (i.scdn.co); both see your IP address when your browser loads them. Fonts and other assets are served from this website itself.
Resend (Plus Five Five, Inc.) delivers contact form messages to my inbox on my behalf. The message passes through its servers in the United States, under standard contractual clauses, and isn’t used for anything else.
I don’t sell or share your personal data with anyone else.
How long it’s kept
Emails are kept for as long as needed to handle your enquiry and any work that follows, and to meet accounting rules where they apply. After that they’re deleted.
Your rights
Under the GDPR you can ask to see the personal data I hold about you, have it corrected or deleted, restrict or object to how it’s used, and receive it in a portable format. Email me and I’ll respond within one month.
If you think your data has been handled incorrectly, you can complain to the Swedish Authority for Privacy Protection (IMY), imy.se.
Cookies
See the cookie policy for what this site stores in your browser and how to change your choice.