What this site collects, and why

Who we are

Orbital is a product of Rhyme Sthlm AB (org. nr 556941-1118), Hammarby Fabriksväg 43, 120 30 Stockholm, Sweden. Rhyme Sthlm AB is the data controller for anything collected through this site.

What we collect

The briefing form

When you ask to be briefed, we collect your name, work email address, company name, and an optional message, together with a record that you consented to us storing them. We use these to reply to your request and for nothing else.

How the site is used

We measure how the site is used with Trace, an analytics service run by Rhyme Sthlm AB. It is built to be anonymous: it sets no cookies, stores nothing in your browser and does not follow anyone from one day to the next. It records:

• the address of the page you are on, including anything after a “?”, its title, and the page you came from
• when you follow a link that leaves the site
• which form fields you touch and when a form is sent, never what you type into them
• how far the page is scrolled, which sections are in view, and roughly how long you stay
• from your connection, your country and a coarse type of device, browser and operating system, such as “mobile, Safari, iOS”

Your IP address is used only to work out the country and to build a one-way code that tells one day’s visitors apart. The address itself is never stored. The code is rebuilt every 24 hours, so nothing links a visit today to a visit tomorrow, and we cannot tell which events were yours.

Nothing else

Beyond that, this site sets no cookies and stores nothing in your browser. We do not know who visits, only who writes to us.

Legal basis

We process the details you submit on the basis of your consent, given through the checkbox on the form. You can withdraw it at any time by writing to us; we will then delete the request and stop processing it.

We measure how the site is used on the basis of our legitimate interest in knowing whether it works for the people who read it. That data is anonymous, so we cannot find or delete one visitor’s events; the details you send through the form are the only data we can link to a person.

We do not sell, share or transfer personal data to anyone for marketing.

Where it is stored, and for how long

Form submissions are received and stored by Netlify, which also hosts this site. Like any web host, Netlify receives your IP address when your browser asks it for a page. Netlify is based in the United States; transfers there rest on its certification under the EU–U.S. Data Privacy Framework and on the European Commission’s standard contractual clauses, both part of its data processing agreement.

A briefing request is kept for as long as it takes to handle it and for a reasonable period afterwards for record-keeping, or until you ask us to delete it, whichever comes first.

The anonymous site-use events are received and stored by Trace, which is hosted on Railway, and are kept for 365 days.

Third parties

• Netlify hosts the site, including its typefaces, and receives form submissions.
• Akismet, a spam-filtering service, which Netlify runs on every form submission. It is Netlify’s processor, not ours, and it sees what you send through the form.
• Railway hosts Trace, the service that receives the site-use events described above. No other service receives them.

This page loads nothing from outside Netlify. Trace’s measurement script is served from this site, starts once the page has loaded and sends its events to Trace on Railway.

Spam protection on the form is two things: a hidden field that people never see and automated submitters fill in, which involves no third party, and Netlify’s Akismet filter, described above.

Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you
• have inaccurate data corrected
• have your data deleted
• object to our processing of it, or ask us to restrict it
• receive it in a portable form
• lodge a complaint with the Swedish Authority for Privacy Protection (IMY)

Giving us your details through the form is voluntary, but without them we cannot reply. We make no automated decisions about you.

To exercise any of these, write to hello@my-orbital.com.

Contact

Questions about this policy or your data go to hello@my-orbital.com.