Privacy notice
Dated .
This notice covers this website only: the Genesis wishlist and the email form. VERV Nomads itself has not started. Before anyone applies or pays, it will have a privacy policy of its own.
Who is responsible
VERV Nomads is a VERV project. The data controller is the VERV operating entity registered in Estonia. For anything about your data, write to nomads@vervdao.org.
What we store, and when
None of your answers reach us while you fill in the wishlist. They are sent once, when you press Send my wishlist. Until then, the only thing the page sends is a bare count of the steps reached, which is described under the table.
| What | Why |
|---|---|
| The wishlist answers you chose to give | To plan Genesis around real people: dates, vehicles, weather, budgets, needs. |
| Your name, your email address, and another way to reach you if you gave one | To write to you about Genesis. |
| From the email form: your email address and your note | To write to you when applications open. |
| Which boxes you ticked, and the date of this notice | To show what you agreed to. |
| A short tag such as “newsletter”, if the link that brought you here carried one | To learn where people hear about VERV Nomads. |
| How many seconds the form took to fill in | To tell people from automated submissions. |
| The date and time you sent it | To keep the latest of several, and to delete on time. |
We also keep plain daily totals: how many times each step of the wishlist was reached, and how the straw poll on the front page was answered. They are numbers only. They hold nothing about you and cannot be linked to your wishlist.
What we do not store
- Your IP address, browser or device details. Cloudflare, which hosts this site, has to handle your IP address to deliver the pages and to slow down abuse. We have switched request logging off, and we keep none of it with your answers or anywhere else.
- Cookies. There are none. There are no analytics and no trackers, and the site loads nothing from any other company, fonts included.
- Unfinished wishlists. If you never press Send, we never see your answers. All that reaches us is the count of steps reached, and it says nothing about who reached them.
- Your nationality, passport details or any diagnosis. We do not ask. For borders, the wishlist asks only which broad group you are in, such as “visa-free visitor”, and you can leave that out.
What stays on your device
While you fill in the wishlist, a draft is kept in your browser’s storage for this site, so that a closed tab does not cost you your answers. It is removed when you send the wishlist or press Clear my answers. Until then, anybody who uses the same browser profile can open it. Your browser also remembers your straw poll answer, so that it is counted once. Neither of these is a cookie, and neither is sent to us on its own.
Health-related answers
One step asks about diet, accessibility, medication that needs a fridge, and help you might need. All of it is optional. These answers are stored only if you tick the separate consent box on that step. Without it, our server discards them before anything is saved. You can withdraw that consent at any time, and we will delete those answers.
What allows us to do this
- Your consent (Article 6(1)(a) GDPR), given when you tick the box and send. For health-related answers, your explicit consent (Article 9(2)(a)). You can withdraw either at any time by writing to us. That does not undo what was lawfully done before.
- Our legitimate interest in keeping the forms usable (Article 6(1)(f)), for the two things that filter out automated submissions: the number of seconds the form took, and a short-lived limit on how often one connection may submit.
No decision about you is made automatically. The result the wishlist shows is worked out in your own browser, and no score of any kind is kept.
Who can see it
- The few people at VERV who plan Genesis.
- Cloudflare, which hosts the site and the database as our processor, under a data processing agreement that includes the EU standard contractual clauses. The database is set to Cloudflare’s EU jurisdiction, so wishlists are stored and processed inside the European Union.
- The email provider we use, when we write to you.
We do not sell your data, and we do not pass it to sponsors, researchers or media. If the wishlist recorded that you might be open to research or filming, that is only an expression of interest. Nothing happens on the strength of it, and each would need its own separate consent.
How long we keep it
A wishlist or an email address is deleted automatically 24 months after you sent it, and sooner if you ask. If you send the wishlist again with the same email address, we treat the latest one as yours. If you later apply for Genesis, that application will come with its own notice.
Your rights
You can ask to see what we hold about you, to have it corrected or deleted, to have it restricted, or to receive a copy you can take elsewhere. You can withdraw consent, and you can object to the processing we base on legitimate interest. Write to nomads@vervdao.org, and we will answer within one month.
The wishlist does not check that an email address is really yours. So before we show or delete anything, we will ask you to write from the address in question.
You can also complain to a data protection authority: the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), or the authority where you live.
Children
The wishlist is for adults. It asks how many children would travel with you, as a number. Please do not give us any details about them.
Changes
If this notice changes, the date at the top changes with it. The record of what you agreed to keeps the date of the version you saw.