§1
Who we are and how to reach us
This notice explains how personal data of visitors and users of altcoinlog.com (the “Site”) is processed. It is written to meet the transparency requirements of Articles 13–14 of the EU General Data Protection Regulation (GDPR) and the UK GDPR, and of the data-protection law of the country where we are established.
The controller of your personal data is Aleksandr Leusenko, founder and administrator of Altcoinlog, a project run on a voluntary basis to protect people from scams and fraud in digital assets; registration details (taxpayer ID, state registration number, postal address) are provided on request at support@en.altcoinlog.com (“we”, “us”).
Privacy requests and questions: support@en.altcoinlog.com, or by post to provided on request at
§2
What data we process, why, on what basis and for how long
We only process the data needed for each purpose below:
- Your account. Email, name or pseudonym, password hash, avatar, profile settings and account activity. Lawful basis: performance of our contract with you — the Terms of use (Art. 6(1)(b) GDPR). Retention: while the account exists and 30 days after it is deleted. An email address is required to create an account; without it we cannot provide one.
- Author profiles and publications. Name, bio, photo, social links and the author’s articles, published on the Site at the author’s choice. Lawful basis: the contract with the author (Art. 6(1)(b)). Retention: for the term of the contract and for as long as the publications remain online.
- Newsletter. Email, language, sign-up date and the page where you subscribed. Lawful basis: your consent (Art. 6(1)(a)). Retention: until you unsubscribe — every email contains an unsubscribe link.
- Contact, tip, write-for-us and partnership forms. Name, email, phone number and message, if you provide them. Lawful basis: our legitimate interest in answering your enquiry (Art. 6(1)(f)) or, for author and partnership applications, steps taken at your request before entering into a contract (Art. 6(1)(b)); where a form asks for a separate opt-in to further contact, that opt-in is based on consent (Art. 6(1)(a)). Retention: until the request is resolved, and no longer than 3 years.
- Comments and likes. Name or pseudonym, comment text and likes. Lawful basis: performance of the Terms of use (Art. 6(1)(b)). Retention: until you delete the comment or your account, or we remove it under the Terms.
- Technical data and view counts. IP address, browser and device details, and the cookies described in the Cookie policy. To count article views we store the IP address and user agent only as an irreversible hash; we still treat that hash as personal data where the law does. Lawful basis: our legitimate interests in running, securing and measuring the Site in aggregate (Art. 6(1)(f)). Retention: no longer than 1 year.
What we do not collect
We do not ask for ID documents, payment card details, biometric data or other special categories of data, and we do not use third-party analytics or advertising trackers. Please do not send such data in your messages. Where we rely on legitimate interests, you can ask us for details of the balancing test.
§3
Recipients, sources and automated decisions
- We do not sell your personal data, do not “share” it for cross-context behavioural advertising, and do not pass it to advertisers.
- Processors acting on our instructions under a written contract: hosting, file storage and email delivery providers. A current list is available on request.
- Public authorities, courts and law enforcement — only where we are legally required to disclose data.
- Professional advisers or a successor business, if needed to establish or defend legal claims or in a reorganisation, under confidentiality obligations.
- We collect data directly from you, except for technical data generated when you use the Site.
- We do not make decisions that produce legal or similarly significant effects for you based solely on automated processing, including profiling.
§4
Where data is stored and international transfers
- Personal data is stored on the servers of our hosting, file-storage and email-delivery providers, under written processing agreements. A list of providers and the countries where they process data is available on request.
- We are established outside the European Economic Area and the United Kingdom, in a country for which the European Commission has not adopted an adequacy decision and the UK has no adequacy regulations.
- When you submit data to us directly, the European Data Protection Board does not treat this as a “transfer” under Chapter V GDPR, but the GDPR still applies to our processing. Where Chapter V does apply — for example, data passed to a provider in a third country — we use the safeguards the law allows, such as the EU Standard Contractual Clauses. You can ask about the safeguard used for a particular provider by writing to support@en.altcoinlog.com.
§5
Security
We use legal, organisational and technical measures appropriate to the risk: encrypted connections (HTTPS), passwords stored only as hashes, access limited to staff who need it, and internal controls. A person responsible for data processing has been appointed.
If a personal data breach occurs, we notify the competent supervisory authorities and, where the risk to you is high, you, within the time limits set by applicable law (including within 72 hours under the GDPR/UK GDPR).
§6
Your rights
Depending on where you live, you have the right to:
- Access — get confirmation of whether we process your data and a copy of it.
- Rectification — correct inaccurate or incomplete data.
- Erasure — have your data deleted, for example by deleting your account.
- Restriction — ask us to limit processing while a dispute is resolved.
- Portability — receive data you gave us under consent or contract in a structured, machine-readable format, or have it sent to another controller.
- Objection — object to processing based on legitimate interests; you can object to direct marketing at any time, and we will then stop.
- Withdraw consent — at any time, without affecting processing carried out before withdrawal (unsubscribe links work instantly).
- Complain — to a data protection supervisory authority, in particular in the EU country where you live, work or where the alleged infringement occurred; in the UK, to the Information Commissioner’s Office (ICO); or to the supervisory authority of the country where we are established. You can also go to court.
How to make a request
Write to support@en.altcoinlog.com or by post, with enough information to identify you (for example, your account email). Requests are free of charge. We reply within one month; for complex or numerous requests this can be extended by two further months, and we will tell you why within the first month.
§7
Children
The Site is intended for adults aged 18 and over, and we do not knowingly collect data from anyone under 18. If you believe a child has given us personal data, write to support@en.altcoinlog.com and we will delete it.
§8
Changes to this notice
We publish updates on this page with a new date. If we plan to use data for a new purpose or change the lawful basis, we will tell registered users in advance and ask for consent where the law requires it. Previous versions are available on request.