Privacy Policy

1. Who we are

PotterForm is an independent ceramic design project operated by Borut Cafuta in Slovenia. Borut Cafuta is the controller responsible for the personal data described in this policy.

For privacy questions or requests, contact hello@potterform.com.

2. Scope of this policy

This policy explains how personal data is processed when you visit potterform.com or subscribe to the PotterForm newsletter. It does not apply to independent third-party websites linked from PotterForm.

3. Website visits and hosting

PotterForm is a static website hosted by NEOSERV, a service operated by AVANT.SI d.o.o. in Slovenia.

PotterForm does not use website analytics, advertising pixels or marketing cookies. The hosting infrastructure may process technical request and security data, such as an IP address, browser or device information, request time, requested URL and error information. This processing is necessary for the security, availability and reliable operation of the website.

The legal basis for this limited technical processing is the legitimate interest in operating and protecting the website under Article 6(1)(f) of the GDPR. Technical records are retained only for as long as necessary for operational security, troubleshooting and applicable legal obligations.

4. Newsletter subscriptions

The PotterForm newsletter is provided through Buttondown. When you subscribe, the following data may be processed:

• your email address;
• your IP address and approximate country;
• the date, time and source of the subscription;
• your subscription and confirmation status;
• technical delivery and confirmation events.

The purpose of this processing is to manage subscriptions, send confirmation messages, deliver PotterForm updates and maintain evidence of consent.

The legal basis is your consent under Article 6(1)(a) of the GDPR. PotterForm uses double opt-in, which means that you are not added as an active subscriber until you confirm your email address.

Email-open tracking, click tracking, transactional-email tracking and UTM tracking are disabled. PotterForm does not use Buttondown to profile newsletter subscribers or measure their individual reading behaviour.

You may withdraw your consent at any time by using the unsubscribe link in an email or by contacting hello@potterform.com. Withdrawal does not affect processing that took place before consent was withdrawn.

5. Service providers and international transfers

PotterForm uses the following service providers:

• AVANT.SI d.o.o., operating under the NEOSERV brand, for website and email hosting in Slovenia;
• Buttondown, LLC, for newsletter subscription management and delivery.

Buttondown is based in the United States. Its Data Processing Agreement incorporates the European Commission's Standard Contractual Clauses for transfers from the European Economic Area.

• NEOSERV: https://www.neoserv.si/
• Buttondown Data Processing Agreement: https://buttondown.com/legal/data-processing-agreement
• Buttondown privacy information: https://buttondown.com/legal/gdpr-eu-compliance

External providers process personal data only as required to provide their services and under their respective contractual and legal obligations.

6. Retention

Unconfirmed newsletter subscriptions may be retained for up to 30 days before Buttondown's subscriber-cleanup process removes them from the active list. Confirmed subscriber data is retained while the subscription remains active.

After an unsubscribe request, limited suppression information may be retained where necessary to honour the request, prevent unwanted re-subscription and meet legal or security obligations.

Hosting records are retained according to operational, security and legal requirements and are not used by PotterForm for visitor analytics.

7. Your rights

Subject to the conditions of the GDPR, you may request access to your personal data, correction, deletion, restriction of processing or data portability. You may also withdraw consent at any time and object to processing based on legitimate interests.

To exercise these rights, contact hello@potterform.com. Requests will be handled without undue delay and within the time required by applicable law.

You also have the right to lodge a complaint with:

Information Commissioner of the Republic of Slovenia
Dunajska cesta 22
1000 Ljubljana
Slovenia
gp.ip@ip-rs.si
https://www.ip-rs.si/

8. Security

Reasonable technical and organisational measures are used to protect personal data. These include encrypted connections, restricted administrative access and established hosting and newsletter-service security controls. No internet service can guarantee absolute security.

9. External links

PotterForm may link to other websites or services. Their operators are responsible for their own privacy practices. Review their privacy information before providing personal data to them.