[ Privacy / Waitlist ]

What we do with your address.

MyBioVault does not exist as a product yet. The only personal data we hold today is the email address you give us if you join the waitlist. This page explains exactly what happens to it.

Who is responsible

The controllers for this data are Alexandru Luca and Hylke Muntinga, joint controllers under Article 26 of the GDPR, running the MyBioVault project from the Netherlands. There is no company yet, so we hold your address as individuals and answer for it personally.

Questions, or a request about your data, go to alexandru.businessmail@gmail.com. A person reads it, and you will get an answer in at most 30 days, normally far sooner.

There is no company behind MyBioVault at the time of writing and no incorporation to point you at. When that changes, the entity name, registered address and chamber of commerce number will appear here, and this page will say when it was updated.

What we collect, and why

Your email address

Because you asked to be told when MyBioVault opens. Nothing else would let us do that.

Which form you used ("hero" or "footer")

So we can tell which part of the page actually persuades people. It says nothing about you.

The date and time you signed up

So we can open the waitlist in the order people joined, and show that you did consent.

A random unsubscribe token

An unguessable string that lets a single click erase you without asking you to sign in.

Which wording you agreed to, and in which language

A short version marker and a language code, so we can show exactly what the form and this page said on the day you signed up, in the language you actually read, rather than asking you to take our word for it.

That is the whole record. We do not collect your name, your IP address, your location, your device or anything about your health. There is no analytics, no tracking pixel, no advertising tag, and no third-party script anywhere on this site.

The legal basis

Your consent, under Article 6(1)(a) of the GDPR. You gave it by typing your address into a form whose only stated purpose is launch updates, and you can withdraw it at any moment without giving a reason and without any consequence. Withdrawing is the unsubscribe link in every email we send.

What we will and will not send you

Occasional updates about building MyBioVault: progress, early screens, decisions you can weigh in on, and the message that says the doors are open. That is all this list is for. We will not sell it, rent it, lend it, or use it to advertise anything that is not MyBioVault.

Who else sees it

One company, in two roles, acting only on our instructions under a data processing agreement and not permitted to use your address for anything of its own:

• Scaleway (Scaleway SAS, France), who runs the server the waitlist is stored on, in their Amsterdam data centre.
• Scaleway Transactional Email, the same company's mail service, which delivers the messages we send you, from Paris.

Nobody else. No advertisers, no data brokers, no "partners".

Where it is stored

Inside the European Union, on European infrastructure, governed by European law: the waitlist in Amsterdam, the mail service that writes to you in Paris. Your address is never transferred out of the EU, which means there is no third country involved and no transfer safeguard we need to explain away. Choosing a European provider instead of the usual American one is the whole reason we can put that in a single sentence.

How long we keep it

Until MyBioVault launches and you have had the chance to take up your place, or until you unsubscribe, whichever comes first. If the project is abandoned, the list is deleted and you get a message telling you so. If you unsubscribe, the row is erased immediately: not flagged, not archived, not kept in a suppression list. Erased.

Your rights

Under the GDPR you can ask us to do any of the following, free of charge, and we will:

• Tell you what we hold about you, and give you a copy.
• Correct it if it is wrong.
• Erase it. The unsubscribe link does this instantly, without needing to ask us.
• Restrict or object to what we do with it.
• Receive it in a portable form, though for one email address that is a short file.
• Withdraw your consent at any time, which is the same thing as unsubscribing.

We do not make any automated decisions about you and we do not profile you.

If you think we have handled your data badly, please tell us first and we will try to fix it. You also have the right to complain to a supervisory authority. In the Netherlands that is the Autoriteit Persoonsgegevens; elsewhere in the EU it is the authority where you live.

Cookies

None. This site sets no cookies at all.

It does store one thing in your browser after you sign up: a flag remembering that you did, so the form shows "filed" instead of asking you again. It holds the word "filed" and nothing else, never your address, it never leaves your device, and clearing your browser data removes it. That is why there is no consent banner here: there is nothing to consent to.

Language

This site is published in the 24 official languages of the European Union. Which one you see is decided by the address you are on and nothing else: no cookie, no saved preference, and no guess made from your browser settings or where you appear to be. Switching language changes the URL and nothing about what we hold. The translated pages are ordinary files served from the same European server as the English one.

Changes

If this notice changes in a way that affects you, we will email the list rather than quietly editing the page.