This privacy policy explains what personal data is processed when you visit scrively.org and what choices you have. Last updated: 2 September 2026.
Controller / website operator
The controller responsible for the processing of personal data on this website is:
Dr Michael Waltinger
Domarebacken 26
14557 Norsborg
Sweden
E-mail: scrively@gmail.com
Hosting and server log files
This website is hosted by Host Europe GmbH, Germany. When you access the site, the web server processes technical access data that is required to deliver the pages, and this data may be recorded in server log files. Such log data typically includes the IP address of the requesting device, the date and time of the request, the requested URL, the HTTP status code, the amount of data transferred, the referring page, and the browser and operating system identification (user agent).
This data is processed to deliver the website and to ensure its stability and security, including the detection and investigation of abuse. According to Host Europe’s current webhosting documentation, web server access logs are retained for 14 days and error logs for 7 days. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure and reliable operation of the website).
Consent management (Real Cookie Banner)
This website uses the WordPress plugin Real Cookie Banner (devowl.io GmbH, Germany) to obtain and document your consent before any external media are loaded. The plugin runs entirely on our own server; no data is transmitted to the plugin vendor.
When you make a choice in the consent dialog, your decision is stored in cookies in your browser so that it can be applied on future visits (consent validity: 365 days). In addition, to be able to demonstrate that consent was given (Art. 7(1) GDPR), a consent record is stored on our server. It consists of a random consent ID, your consent decision and the button used, the viewport size, the URL of the page on which you made your choice and its referrer, the time of the decision, the version of the consent dialog, and a salted hash of a truncated form of your IP address — the full IP address is not stored in the consent record. Documented consent records are retained for up to 120 months according to the current configuration. Legal basis: Art. 6(1)(c) and Art. 6(1)(f) GDPR (documentation and proof of consent).
You can change or withdraw your consent at any time via the “Privacy Settings” link in the footer of this website. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
Embedded external media — general
Some posts on this website embed content from third-party providers: YouTube and Vimeo videos, Instagram posts, and the external photo galleries (Flickr and Google Photos) described below. All of this content is blocked by default. Until you give your consent, no connection to the third-party provider is established and no data is transmitted to it; you only see a placeholder.
Only when you consent — via the consent dialog, a placeholder button, or the Privacy Settings — is the content loaded from the provider’s servers. At that point, the provider receives your IP address and technical request data and may set cookies or use similar technologies. Legal basis for loading external media: your consent, Art. 6(1)(a) GDPR.
YouTube
We embed videos from YouTube, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Videos are embedded in YouTube’s privacy-enhanced mode (youtube-nocookie.com) and are only loaded after you consent. When a video is loaded, your IP address and technical information about your browser and device are transmitted to Google, and data may be processed in Ireland and the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework. Privacy policy: https://policies.google.com/privacy
Vimeo
We embed videos from Vimeo, a service of Vimeo.com, Inc., New York, USA. Vimeo videos are only loaded after you consent. When a video is loaded, your IP address and technical information about your browser and device are transmitted to Vimeo, and data is processed in the United States. Vimeo participates in the EU-U.S. Data Privacy Framework. Privacy policy: https://vimeo.com/legal/privacy
Individual posts embed content from Instagram, a service of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. Instagram content is only loaded after you consent. When content is loaded, your IP address and technical information about your browser and device are transmitted to Instagram, and data may be processed in Ireland and the United States. The Instagram feed shown in the sidebar uses locally cached images and can therefore be displayed without establishing a connection to Instagram. A connection to Instagram is only established when you actively follow a link to Instagram or when separately embedded Instagram content is loaded after consent. Meta Platforms, Inc. is certified under the EU-U.S. Data Privacy Framework. Privacy policy: https://privacycenter.instagram.com/policy/
External galleries
Many posts on Scrively embed photo galleries that are hosted by external photo services. These galleries are blocked by default: before you give your consent, no images or other resources are loaded from the gallery providers’ servers, and you only see a placeholder. Once you consent, the images are loaded directly from the respective provider’s servers. You can withdraw your consent at any time via the “Privacy Settings” link in the footer; the galleries are then blocked again.
Flickr
Some galleries are hosted on Flickr, a service of Flickr, Inc. (part of Awes.me, Inc. d/b/a Awesome), USA. Flickr galleries are only loaded after you consent (Art. 6(1)(a) GDPR). When a gallery is loaded, your IP address and technical information about your browser and device (such as the user agent) may be transmitted to Flickr, and the image files are delivered from Flickr’s servers in the United States. Flickr is certified under the EU-U.S. Data Privacy Framework through its parent company, Awes.me, Inc. d/b/a Awesome. Privacy policy: https://www.flickr.com/help/privacy
Google Photos
Other galleries are hosted on Google Photos, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; the image files are delivered from Google servers (googleusercontent.com). Google Photos galleries are only loaded after you consent (Art. 6(1)(a) GDPR). When a gallery is loaded, your IP address and technical information about your browser and device may be transmitted to Google, and data may be processed in Ireland and the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework. Privacy policy: https://policies.google.com/privacy
Comments
You can comment on posts on this website. The comment form requires your name and e-mail address; stating a website URL is optional; registration is not required. Your e-mail address is not published. Legal basis: Art. 6(1)(f) GDPR (enabling public discussion on our posts).
A comment is held for manual review before it appears. Once a comment of yours has been approved, your later comments may be published automatically. Published comments and their metadata are retained until they are deleted; you can request the deletion of your comments at any time (see “Your rights”).
If you tick the opt-in checkbox in the comment form, your name, e-mail address and website are stored in cookies in your browser as a convenience for your next comment (stored for about one year). Without the checkbox, no comment convenience cookies are set.
This website does not use avatar images: no data — in particular no hash of your e-mail address — is transmitted to the Gravatar service. Pingbacks and trackbacks are disabled.
Spam protection (Antispam Bee)
Comments are checked for spam by the Antispam Bee plugin. The check runs entirely on this website’s own server; no data is transmitted to external anti-spam services. When you submit a comment, your IP address is processed for spam prevention and stored together with the comment. Legal basis: Art. 6(1)(f) GDPR (protecting the website against spam).
Locally hosted fonts
This website uses the typefaces Playfair Display and Raleway. Both are hosted locally on our own server. No connection to Google Fonts or any other third-party font service is established when the site loads.
Contact by e-mail
If you contact us by e-mail at scrively@gmail.com, we process your e-mail address and the content of your message in order to handle your inquiry. This data is not shared with third parties and is deleted once it is no longer required for that purpose. Legal basis: Art. 6(1)(f) GDPR (responding to inquiries addressed to us). There is no contact form on this website.
Website statistics (Koko Analytics)
We use the WordPress plugin Koko Analytics to obtain basic, aggregated statistics about the use of this website, such as the number of visitors and page views, popular pages and referring websites. Koko Analytics runs entirely on our own web server. No analytics data is transmitted to Google, Koko Analytics or any other third-party analytics provider.
We use Koko Analytics in cookieless mode. No analytics cookies or similar information are stored on your device. To distinguish visitors within the same day, the plugin processes the visitor’s IP address and browser user agent to generate a one-way hash together with a secret that changes daily. The IP address and user agent are not stored as such, visits cannot be linked across different days using this hash, and the temporary data used for this purpose is deleted daily. Only aggregated website statistics are retained.
The processing serves our legitimate interest in understanding the general use of this website and improving its content and operation. Legal basis: Art. 6(1)(f) GDPR. We do not use Koko Analytics for advertising, cross-site tracking or the creation of individual visitor profiles.
Your rights
Regarding your personal data, you have the right to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), and objection to processing based on legitimate interests (Art. 21 GDPR).
Where processing is based on your consent, you may withdraw that consent at any time with effect for the future (Art. 7(3) GDPR) — for external media simply via the “Privacy Settings” link in the footer. To exercise any of these rights, contact us at scrively@gmail.com. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).
Changes to this privacy policy
We may update this privacy policy when the website, its features or legal requirements change. The current version is always available on this page; the date of the last update is shown at the top.