Skip to content
Upcoming: Keynote at the Schader-Stiftung’s 14th Grand Convention, 6 November 2026
Naita Hishoono

Privacy policy

1. Controller

The controller responsible for data processing on this website is: Naita Hishoono, Ballot Street 10, Ausspannplatz, Windhoek, Namibia · Email: naitahishoono@gmail.com · Phone: +264 81 292 4850.

[PLACEHOLDER: As the controller is established outside the EU and the website also addresses people in the EU, check whether a representative in the Union must be designated under Art. 27 GDPR. If so, state name and address here.]

2. Overview

This website does not use tracking cookies, advertising networks or social media plugins. Fonts are served locally; no data is sent to Google Fonts or other third parties when you visit. External content (appointment booking) is only loaded after you actively click.

3. Hosting and server log files

The website runs on servers of [PLACEHOLDER: hosting provider, address, server location] (managed with Dokploy). When you visit, technically necessary data is processed: IP address, date and time, requested page, referrer, browser and operating system. Processing ensures secure and stable operation on the basis of Art. 6 (1) (f) GDPR. Log files are deleted after [PLACEHOLDER: 14] days. A data processing agreement under Art. 28 GDPR is in place with the host.

4. Content management system

Content is managed with the self-hosted CMS Payload. No data is transmitted to its developer. A technically necessary session cookie is set only for logged-in editors (Section 25 (2) no. 2 TDDDG). No cookies are set for visitors.

5. Inquiry form and email contact

When you use the inquiry form, I process the data you provide (name, email address, optionally phone, organisation, role, topic, timeframe, format, budget range and message) to answer your request and, where applicable, prepare a proposal. The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures) and Art. 6 (1) (f) GDPR (legitimate interest in answering inquiries).

Your inquiry is stored in the CMS and forwarded to me by email; you receive a confirmation. Emails are sent via the SMTP service [PLACEHOLDER: email provider, address; note on third-country transfer if applicable]. Inquiries are deleted once they have been fully processed and no statutory retention obligations apply, at the latest after [PLACEHOLDER: 24] months.

6. Spam protection with ALTCHA

To protect against automated submissions, the forms use ALTCHA. Your browser solves a small computational task (proof of work) that is generated and verified on my own server. No cookies are set, no data is transferred to third parties and no user profile is created. The legal basis is Art. 6 (1) (f) GDPR (protection against abuse). To limit abuse, your IP address is briefly processed in memory (rate limiting) and not stored permanently.

7. “Namibia Briefing” newsletter

If you subscribe to the newsletter, I process your email address and optionally your name to send it to you. Subscription uses a double opt-in: you receive an email with a confirmation link. I store the time of subscription and confirmation as proof. The legal basis is your consent (Art. 6 (1) (a) GDPR), which you can withdraw at any time via the link in every email or by message. After withdrawal your address is deleted or kept on a suppression list as proof.

8. Appointment booking via Calendly

A calendar provided by Calendly LLC, 115 E Main St, Ste A1B, Buford, GA 30518, USA, can be embedded for booking an introductory call. The calendar only loads after you actively click “Load calendar”; only then is data (including your IP address) transferred to Calendly. The legal basis is your consent (Art. 6 (1) (a) GDPR, Section 25 (1) TDDDG). Calendly is certified under the EU-US Data Privacy Framework. [PLACEHOLDER: verify certification before launch]

9. Cookieless analytics

For statistical analysis of usage I use self-hosted, cookieless web analytics ([PLACEHOLDER: Matomo or Rybbit, server location]). No cookies are set and no information beyond what is technically necessary is stored on or read from your device. IP addresses are truncated so that they cannot be linked to a person. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in improving the website).

10. External links

This website links to third-party media and event pages (e.g. broadcasters, universities, Spotify, Facebook). By clicking, you leave this website and the respective provider’s privacy policy applies. No data is transferred before you click.

11. Your rights

  • Access to your stored data (Art. 15 GDPR)
  • Rectification of inaccurate data (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection to processing based on Art. 6 (1) (f) GDPR (Art. 21 GDPR)
  • Withdrawal of consent with effect for the future (Art. 7 (3) GDPR)
  • Complaint to a data protection supervisory authority (Art. 77 GDPR), in particular in the member state of your residence

12. Data security

This website uses TLS encryption. Form data is validated on the server and only transmitted encrypted.

Last updated: [PLACEHOLDER: date of legal review]