Explore the historical continuity of our people: Aramean Timeline →

Arameans

Privacy Policy

1) Overview

This Privacy Policy explains how Arameans (“we”, “us”, “our”) processes personal data when you use our website (the “Website”). It also explains your privacy rights under the GDPR (EU/EEA), CalOPPA (California Online Privacy Protection Act), and the CCPA/CPRA (California Consumer Privacy Act, as amended).

Important highlights

  • We do not use advertising, retargeting, Facebook Pixel, or digital analytics for tracking.
  • We do not sell or share personal information for cross-context behavioral advertising.
  • If you subscribe to our emails/newsletter or contact us, we will process the information you provide (such as your email address and message).

2) Who we are (Data Controller)

For processing under the GDPR, Arameans is the “controller” of your personal data (meaning we decide why and how it is processed).

How to contact us: Please use the Website’s Contact page.

3) What personal data we process

A. Data you provide to us

Depending on how you use the Website, we may process:

  1. Newsletter / email updates
  • Email address
  • Subscription preferences (if any)
  • Records of consent (e.g., time/date and method of sign-up)
  • Basic delivery and suppression data (e.g., whether a message bounced, and unsubscribe status)
  1. Contacting us
  • Name (if you provide it)
  • Email address
  • The contents of your message and any information you choose to include
  1. If accounts or user submissions are available on the Website
    If you choose to create an account or submit content, we may process:
  • Username/display name
  • Email address
  • Password (stored in hashed form)
  • Profile information you choose to add
  • Content you submit (e.g., posts, comments), and related metadata

B. Data processed automatically when you use the Website

Even without filling out forms, servers and security systems typically process limited technical data:

  • IP address
  • Device and browser information (user agent)
  • Date/time and requested page
  • General security and diagnostic logs (e.g., to prevent abuse)

We use this information primarily to deliver the Website, maintain security, and troubleshoot issues.

C. Special categories and sensitive data

Please do not send us sensitive personal data (such as health information, religious beliefs, or government identifiers) through the Contact page or submissions unless it is necessary and you are comfortable doing so. We do not intentionally request or require such data.

4) Cookies and similar technologies

We do not use cookies or similar technologies for:

  • Advertising
  • Retargeting
  • Marketing analytics or cross-site tracking

However, the Website may use strictly necessary cookies/technologies to:

  • Enable core site functionality (e.g., security features)
  • Support login/session functionality if accounts exist
  • Remember certain preferences you choose (where applicable)

If optional convenience cookies are used (for example, to remember details for commenting), they may be set only when you take an action that enables them.

You can control cookies through your browser settings. If you disable certain cookies, parts of the Website may not work correctly (for example, logging in).

5) Why we use personal data (purposes)

We process personal data for the following purposes:

  • To send newsletters/updates you request and to manage subscriptions (including unsubscribe requests)
  • To respond to inquiries sent via our Contact page
  • To provide Website features you choose to use (e.g., accounts, submissions, comments—if enabled)
  • To maintain security, prevent fraud/abuse, and protect the Website and our users
  • To comply with legal obligations where applicable

6) GDPR legal bases (EEA/Netherlands)

Under the GDPR, we rely on these legal bases:

  • Consent (Article 6(1)(a))
    For newsletters/marketing emails and any optional communications where you opt in. You can withdraw consent at any time (see Section 11).
  • Legitimate interests (Article 6(1)(f))
    For Website security, preventing abuse, responding to unsolicited inquiries, and maintaining/operating the Website—balanced against your rights.
  • Contract (Article 6(1)(b))
    If you create an account or use features that require it (where available), we process data needed to provide those features.
  • Legal obligation (Article 6(1)(c))
    If we must retain or disclose data to comply with applicable laws.

7) Sharing and disclosure of personal data

We do not sell personal data. We may share personal data only as needed, for example with:

  • Email delivery/newsletter providers (to send you the emails you requested)
  • Hosting and infrastructure providers (to run and secure the Website)
  • Spam and abuse prevention providers (e.g., to filter spam submissions/comments)
  • Professional advisers (legal/accounting) when necessary
  • Authorities where required by law or to protect rights, safety, and security

Service providers are permitted to process personal data only to perform services for us, under appropriate contractual obligations.

8) International data transfers

We are based in the Netherlands, but some service providers may process data outside the European Economic Area. Where that occurs, we use appropriate safeguards (such as Standard Contractual Clauses) and additional measures where required by law.

9) Data retention

We keep personal data only as long as necessary for the purposes described:

  • Newsletter subscription data: retained until you unsubscribe, or until we no longer need it for sending emails and compliance purposes (e.g., maintaining an “unsubscribe/suppression” record to ensure we respect your opt-out).
  • Contact messages: generally retained as long as needed to address your request, then archived or deleted within a reasonable period unless needed for legal or security reasons.
  • Accounts/submissions (if available): retained while your account is active and thereafter as necessary for legitimate purposes (e.g., security, legal compliance), unless you request deletion where applicable.
  • Security logs: retained for a limited period appropriate for security and troubleshooting.

10) Security

We use reasonable administrative, technical, and organizational measures designed to protect personal data (for example, access controls and secure infrastructure practices). No method of transmission or storage is 100% secure.

11) Your privacy rights

A. GDPR rights (EEA/Netherlands)

If you are in the EEA/Netherlands, you may have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Delete your data (“right to be forgotten”) in certain cases
  • Restrict processing in certain cases
  • Object to processing based on legitimate interests
  • Data portability (for data processed by automated means based on consent/contract)
  • Withdraw consent at any time (this does not affect processing before withdrawal)

To exercise these rights, contact us via the Website’s Contact page.

You also have the right to lodge a complaint with your supervisory authority. In the Netherlands, this is the Autoriteit Persoonsgegevens.

B. California privacy rights (CCPA/CPRA)

If you are a California resident, you may have the right to:

  • Know what personal information we collected about you, and why
  • Request deletion of personal information (subject to exceptions)
  • Request correction of inaccurate personal information
  • Opt out of the “sale” or “sharing” of personal information

We do not sell or share personal information as those terms are defined under the CCPA/CPRA. Therefore, we do not offer a “Do Not Sell or Share” link because it is not applicable based on our current practices.

You may exercise applicable rights by contacting us through the Website’s Contact page. We may need to verify your request (for example, by confirming access to the email address involved). You may also use an authorized agent as permitted by law.

We will not discriminate against you for exercising your rights.

12) Children’s privacy

The Website is available to users under 13, but we do not knowingly collect personal data from children for marketing purposes without appropriate consent.

  • Newsletter sign-up / marketing emails: If you are under the applicable age of consent, please do not subscribe or provide personal data unless your parent/guardian provides consent or submits the request on your behalf.
  • Parents/guardians: If you believe a child has provided us personal data, please contact us via the Website’s Contact page and we will take appropriate steps.

13) CalOPPA disclosures

A. “Do Not Track” signals

Browsers may offer a “Do Not Track” (DNT) setting. Because we do not track users across third-party websites for behavioral advertising, we do not respond to DNT signals with a different practice. We still limit data use as described in this Policy.

B. Privacy Policy updates

We may update this Privacy Policy from time to time. When we do, we will change the “Effective date” at the top and post the updated version on the Website.

14) Third-party links and embedded content

The Website may include links to third-party sites. If we embed content (such as videos or social media posts), those third parties may collect data under their own policies. We encourage you to review their privacy notices.

15) Contact us

For questions, requests, or concerns about privacy, please contact us via the Website’s Contact page.