Who we are
This website, josemariasison.com, is run by the Jose Maria Sison Legacy Foundation. We are responsible for the personal data described in this policy. For any question about your privacy, write to us at jms.foundation@proton.me.
When you visit our website
Like every website, ours runs on a server that receives some technical information from your browser with each visit: your IP address, the date and time, the page you asked for, the page you came from, and the type of browser and device. Our hosting provider, Hostinger, keeps this in server logs and processes it on our behalf. How Hostinger handles this data, and for how long, is described in Hostinger's privacy policy.
We use it only to deliver the website and keep it secure, for example to detect and block attacks. That is our legitimate interest (Article 6(1)(f) of the General Data Protection Regulation, GDPR).
Cookies and storage in your browser
A cookie is a small file a website stores in your browser. Our website sets only what it needs to work:
cookie_notice_acceptedremembers that you have seen our cookie notice, so it does not appear on every page. It is kept for one month.- Login cookies are only for the foundation's editors when they log in to manage the site. Visitors never receive them.
- On the News and Repository pages, your browser remembers how far you scrolled and which items you loaded, so the back button returns you to the same place. This stays in your browser, is never sent to us, and is cleared when you close the tab.
We do not use analytics, advertising or tracking cookies, and no service on our pages follows you across websites. The fonts and scripts on our pages come from our own server, so visiting a page does not share your data with other companies.
Searching the website
When you search, what you type is sent to our server to find the results, and while you type, to suggest items. We do not link searches to you.
When a search finds nothing, or only works after we correct its spelling, or contains words that appear nowhere on the website, we keep the search text itself, how many times it was made and when it was last made. We use this to see what readers look for and do not find, so we can add texts and improve the search. We do not keep anything about who searched: no IP address, no account and no cookie. Each search is deleted 180 days after the last time anyone made it. This is our legitimate interest in improving the archive (Article 6(1)(f) GDPR). Because we cannot tell who made a search, please do not type personal details, such as your name or email address, into the search box.
Content from other websites
Some pages can show content hosted by another website. This content does not load by itself. In its place you see a short note and a button to show it. Only when you click it does your browser contact the other website, which then receives your IP address and may set its own cookies. You can also open the content on the other website instead.
- Book viewer on some Repository items: the Internet Archive (archive.org), in the United States.
- Newsletter sign-up form on the About page: Brevo, which uses Google reCAPTCHA (in the United States) to stop spam.
- Videos or other embedded content, if added: the service named in the note, for example YouTube.
By clicking the button you agree to load that content (Article 6(1)(a) GDPR). What these websites do with your data is described in their own privacy policies. Loading content from a provider in the United States means your IP address is sent there.
Our newsletter
If you sign up for our newsletter, we use your email address to send you news about the foundation's events, activities and publications. We send the newsletter with Brevo (Sendinblue SAS, France), which stores your email address and a record of your consent on our behalf.
We do this because you asked us to (your consent, Article 6(1)(a) GDPR). We only use your email address for the newsletter, never share it for other purposes, and keep it only while you are subscribed. You can unsubscribe at any time with the link in every email, or by writing to us. After you unsubscribe we keep only a note that you did, so we do not email you again. How Brevo handles this data is described in Brevo's privacy policy.
When you email us
If you write to jms.foundation@proton.me, we receive your email address and whatever you include in your message. We use it only to answer you or to follow up on your request, and keep it no longer than that requires, as the GDPR asks. If you ask us to, we delete your personal data from our correspondence, unless the law requires us to keep it. Our email is provided by Proton AG in Switzerland, a country the European Union recognises as protecting personal data adequately.
Social media and sharing
Our pages link to the foundation's Instagram and Linktree pages. These are ordinary links: nothing is loaded from those platforms until you follow a link, and once you are on their websites, their privacy policies apply. The share buttons on our news articles use your own device's sharing menu or copy the link; they do not contact any social media platform.
Comments
Our website does not offer comments and does not accept them.
Logging in
Only the foundation's editors log in to this website, with a passkey. To stop password guessing, the website remembers failed login attempts by a coded (hashed) form of the IP address they came from, for 15 minutes. This is our legitimate interest in keeping the website secure (Article 6(1)(f) GDPR).
Who receives your data
We do not sell or rent personal data, and we do not share it with anyone except the providers named above, who process it on our behalf or only when you choose to load their content. We only pass data to authorities when the law requires it.
How we protect your data
The website uses an encrypted connection (HTTPS). WordPress and its components are kept up to date, and only a few people from the foundation can log in, each with a passkey.
Your rights
You have the right to:
- ask which personal data we have about you, and receive a copy;
- have incorrect data corrected;
- have your data deleted;
- limit how we use your data, or object to its use;
- receive data you gave us in a common format, to take it elsewhere;
- withdraw your consent at any time, for example by unsubscribing from the newsletter. This does not affect what happened before you withdrew it.
To use any of these rights, email jms.foundation@proton.me. We answer within one month. If you think we handle your data wrongly, please tell us. You also have the right to complain to the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens, or to the data protection authority in the country where you live or work.
Changes to this policy
When our website or the way we use personal data changes, we update this policy and the date at the top.