Privacy Policy
Effective as of [EFFECTIVE DATE].
This policy explains how we use personal data when you use the website https://thirdweather.ai (the “Site”) and its waitlist. “Personal data” means information about a person who can be identified.
This policy does not cover an app or a model, because we have not released them. If we release one, a separate policy will cover it.
In this policy, “GDPR” means the General Data Protection Regulation. For people in the United Kingdom, “GDPR” also means the UK GDPR.
1. Who is responsible
[CONTROLLER LEGAL NAME] (“we”, “us”) is the controller of the personal data that this policy describes. The controller decides why and how the data is used. The Site shows the name “Third Weather”.
Our postal address is [CONTROLLER ADDRESS], [CONTROLLER COUNTRY]. Our email address for privacy questions and requests is info@thirdweather.ai.
[EEA AND UK REPRESENTATIVES]
2. What data we use and why
| Activity | Data | Legal basis |
|---|---|---|
| The waitlist. We keep a list of people who want to hear when the product is ready. We send the confirmation email and the waitlist mails. | Your email address. The waitlist form asks for your email address and nothing else. The status of your sign-up. The data that your browser sends to Keila when you send the form, such as your IP address. | Your consent. This is Article 6(1)(a) of the GDPR. |
| Your messages. We read and answer the messages that you send us. We handle your requests about your data. | Your email address, the content of your message, and any name that you give. | Our legitimate interest in answering you (Article 6(1)(f)). For a request about your data, our legal obligation (Article 6(1)(c)). |
| Operation and safety of the Site. The host of the Site can record technical data when your browser asks for a page. We use it to deliver the Site, to find faults, and to defend the Site against abuse. We use it for no other purpose. | The IP address, the date and time, the address of the file that your browser asked for, and the browser type. | Our legitimate interest in the operation and safety of the Site (Article 6(1)(f)). The data is limited, so we believe that your rights do not override this interest. |
| Legal duties and claims. We use data to meet legal duties and to answer public authorities. We use it to establish or defend legal claims. | The data in this table that the duty or the claim needs. | Our legal obligation (Article 6(1)(c)). For legal claims, our legitimate interest in establishing or defending them (Article 6(1)(f)). |
| A sale or merger. If we sell or merge all or part of our business, we can give data to the buyer and its advisers. | The data in this table that the buyer needs to assess or run the business. | Our legitimate interest in a sale or merger of our business (Article 6(1)(f)). We give the buyer only the data that it needs. |
3. What you must give us
The waitlist needs your email address. Without it, we cannot add you. The waitlist form asks for nothing else.
Enter your own email address, not the address of another person.
4. The waitlist email
After you send the form, Keila sends you one email with a confirmation link. Your sign-up counts after you complete the steps in that email. This process is called double opt-in. If you do not confirm, we do not add you to the waitlist, and we send you no more mail.
After you confirm, we send mail at launch, for each new measured result, and for each new group. We send at most two mails each month. Each of these mails has an unsubscribe link.
Our mails contain no tracking pixel and no tracked link. We turn off open tracking and click tracking in Keila.
5. Cookies and similar technologies
The Site sets no cookies and loads no trackers. When a page loads, it requests files from the Site only. The Site has no analytics tool and no advertising.
If you press the animation button, the Site saves your choice in your browser. The Cookie Notice gives the details.
6. Who receives your data
Keila. Keila is the email service that keeps the waitlist and sends the mail. Keila is our processor. A processor uses personal data only on our instructions, under a contract that the GDPR requires. Keila keeps the data on servers in the EU. When you send the form, your browser goes to a page of Keila. The privacy policy of Keila is at https://www.keila.io/legal/privacy.
The host of the Site. [HOSTING PROVIDER] hosts the files of the Site. It is our processor for the technical data in section 2.
Advisers and authorities. Our professional advisers, for example lawyers, can receive personal data for the purposes in section 2. Public authorities can receive it when the law requires it.
A buyer. If we sell or merge all or part of our business, we can give personal data to the buyer.
We do not sell personal data. We do not share personal data for advertising.
7. International data transfers
Keila keeps the waitlist data on servers in the EU. We read and manage the waitlist from [CONTROLLER COUNTRY].
[TRANSFER NOTE]
8. How long we keep data
We keep your waitlist data [RETENTION PERIOD]. When we delete it, we delete it in Keila too.
We keep a message as long as we need it to answer you and to show that we handled your request. Then we delete it.
The host keeps the technical data in its logs for [LOG RETENTION].
We can keep data for longer if the law requires it, or to establish or defend a legal claim.
9. Your rights
The GDPR gives you rights over your personal data. You can ask us to:
- give you access to your data and tell you how we use it;
- correct data that is wrong;
- delete your data;
- restrict our use of your data;
- give you your data in a machine-readable format, or send it to another controller.
You also have these rights:
- You can object to a use that is based on our legitimate interests.
- You can object at any time to the use of your data for direct marketing. If you object, we stop that use.
- You can withdraw your consent at any time. Your withdrawal does not affect the use of your data before the withdrawal.
To use a right, write to info@thirdweather.ai. To leave the waitlist, use the unsubscribe link in one of our waitlist mails, or write to info@thirdweather.ai. To ask us to delete your data, write to info@thirdweather.ai. We can ask you for information that shows who you are. We answer within one month. The law allows more time in some cases. If so, we tell you.
You can complain at any time to a data protection authority. You can choose the authority of the country where you live, where you work, or where you think that we broke the law. The European Data Protection Board lists the authorities of the EEA on its website.
In the United Kingdom, the authority is the Information Commissioner’s Office, Water Lane, Wycliffe House, Wilmslow, Cheshire SK9 5AF, telephone +44 303 123 1113.
10. Automated decisions
We do not use automated decision-making or profiling that has legal effects on you or similar significant effects.
11. Children
The Site is not for people under 18 years of age. We do not knowingly collect personal data from them. If you think that a child sent us data, write to us. We then delete it.
12. Security of data
We use technical and organizational measures that suit the risk. No system is free of risk, so we cannot guarantee the security of your data.
13. Other sites
The Site can link to other websites. We do not control them. The policy of each site applies there.
14. Changes to this policy
We can change this policy. The date at the top shows the version. For a material change, we put a notice on the Site. If a change needs your consent, we ask you again.
15. Contact
Write to [CONTROLLER LEGAL NAME], [CONTROLLER ADDRESS], [CONTROLLER COUNTRY], or to info@thirdweather.ai.