This privacy statement was last updated on October 26, 2026.
In this privacy statement, we explain what happens to personal data when you visit olfactoryambition.com (the “website”), and which rights you have under the EU General Data Protection Regulation (GDPR). We keep it short because the website collects very little:
- the website is a static site: it has no user accounts, no comments, no newsletter and no database of visitors;
- the website itself sets no cookies and stores nothing in your browser;
- we do not use analytics tools (such as Google Analytics), advertising networks or tracking pixels, and we do not sell or share your data for advertising;
- fonts, images and video thumbnails are served from our own website, not from third parties.
If you have any questions, or want to know exactly what data we keep about you, please contact us (see section 1).
1. Who is responsible (controller)
The controller responsible for this website within the meaning of the GDPR is:
Peter Krück
Tallinn
Estonia
Email: info@olfactoryambition.com
Contact form: Contact Us
2. Hosting and delivery of the website (Cloudflare)
The website is hosted and delivered by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (“Cloudflare”), as hosting provider and content delivery network. Cloudflare also protects the website against attacks and abuse.
What data: whenever you open a page, your browser sends technical data that every website receives: your IP address, the date and time, the address of the page you requested, the referring page, and your browser and operating system (user agent). We do not run our own web server and do not keep our own server logs.
Purpose and legal basis: to deliver the website, keep it stable and secure, and defend it against attacks. This is our legitimate interest under Art. 6(1)(f) GDPR.
Retention: Cloudflare processes this data on our behalf and keeps operational and security logs only for the limited periods set out in its own policies. We do not combine this data with other data.
More information: Cloudflare Privacy Policy.
3. No website analytics
We do not use browser-based audience or performance analytics. Cloudflare processes technical request data to deliver and protect the website, as described in section 2.
4. Contact form and email
If you write to us through the contact form or by email, we process the data you provide so that we can answer you.
What data: your name, your email address, the optional subject and your message. With a message sent through the form, the email we receive also states the language version of the website, the page you sent it from (its address without any query) and the time of sending. Nothing else is added to the email.
How it works: the form is handled by a small program of our own that runs on Cloudflare (a Cloudflare Worker). It checks the message and forwards it as an email via Cloudflare Email Routing to our mailbox. Our mailbox is hosted by Google (Gmail), so Google also processes the email. The message is not stored in a database on the website.
Spam protection: the form uses no third-party captcha. To prevent mass sending, your IP address is used briefly as the key of a rate limit (a short-lived counter of recent attempts, reset after about a minute). It is not stored with your message.
Legal basis: we process ordinary inquiries on the basis of our legitimate interest in responding to correspondence and preventing abuse (Art. 6(1)(f) GDPR). Where processing is necessary to perform a contract with you or take steps at your request before entering into a contract, Art. 6(1)(b) GDPR applies.
Retention: we delete ordinary inquiry correspondence once it is no longer needed, and no later than six months after the inquiry is resolved. We retain relevant records longer only where a legal retention obligation applies or they are necessary to establish, exercise or defend specific legal claims. We delete those records when that requirement ends.
5. YouTube videos
Some articles contain videos from YouTube. We embed them in a privacy-friendly way:
- At first you only see a preview image, which is stored on our own website. No connection to YouTube is made while you read the page. The preview shows the note “Plays from YouTube”.
- Only when you click the preview does your browser load the YouTube player from
www.youtube-nocookie.com. From that moment, YouTube receives data such as your IP address, the address of our website and your browser details, and YouTube may store cookies or similar data on your device and use the data for its own purposes. Without JavaScript, the preview is a plain link that opens the video on youtube.com.
The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, which belongs to Google LLC, USA. Data may therefore also be transferred to the USA.
Legal basis: your consent, given by clicking the video (Art. 6(1)(a) GDPR). If you do not click, YouTube is not contacted.
More information: Google Privacy Policy.
6. Site search
The search on this website runs entirely in your browser (it uses the open-source tool Pagefind). The search index is loaded from our own website, and your search terms are not sent to any search provider. When you use the search page, the search term becomes part of the page address (for example /search/?q=…) and therefore reaches our hosting provider like any other page request (see section 2). We do not store search terms.
7. Affiliate links (Amazon)
We use Amazon affiliate links, which may lead to Amazon.com or regional Amazon stores through Geniuslink (geni.us). If you buy through these links, we may earn a commission at no extra cost to you. These links are marked as sponsored in the code of the page.
Geniuslink is operated by GeoRiot Networks, Inc., Seattle, USA, and forwards you to the Amazon store for your country. Nothing is sent to Geniuslink or Amazon while you only read a page. Only when you click such a link, Geniuslink processes your IP address, your browser and device details and the clicked link in order to forward you and to count the click. Amazon then processes data under its own privacy notice, for example to attribute a purchase to our link. We only receive aggregated reports (for example the number of clicks or sales) and cannot see who bought what.
Legal basis: our legitimate interest in financing the website through commissions (Art. 6(1)(f) GDPR).
More information: Geniuslink Privacy Policy and the privacy notice on the Amazon website.
8. Links to social networks and other websites
The website links to our profiles on Instagram, TikTok and YouTube and to other websites. These are plain links: nothing is loaded from these services when you view our pages. If you follow a link, the privacy policy of that service applies. This privacy statement does not apply to third-party websites, and we recommend that you read their privacy statements.
9. Cookies and storage on your device
The website itself sets no cookies and stores nothing in your browser. For details, including what YouTube and Cloudflare may store in specific cases, please see our Cookie Policy.
10. Recipients and transfers outside the EU
We only share data with the service providers named above, where this is needed for the purposes described. Cloudflare processes data on our behalf as a processor. Some providers (Cloudflare, Google, Geniuslink, Amazon) are based in the USA or have access from there. Transfers to the USA take place on the basis of the EU–U.S. Data Privacy Framework where the provider is certified under it, or otherwise on the basis of the EU standard contractual clauses.
11. Disclosure practices
We disclose personal information if we are required by law or by a court order, in response to a law enforcement agency, to the extent permitted under other provisions of law, to provide information, or for an investigation on a matter related to public safety.
If our website or organisation is taken over, sold, or involved in a merger or acquisition, your details may be disclosed to our advisers and any prospective purchasers and will be passed on to the new owners.
12. Security
We are committed to the security of personal data. The website is delivered over an encrypted connection (HTTPS), and we take appropriate security measures to limit abuse of and unauthorized access to personal data. This ensures that only the necessary persons have access to your data, that access to the data is protected, and that our security measures are regularly reviewed.
13. Your rights
Under the GDPR you have the following rights regarding your personal data:
- Access (Art. 15): you can ask which personal data we hold about you, why, and for how long.
- Rectification (Art. 16): you can have incorrect data corrected or incomplete data completed.
- Erasure (Art. 17): you can have your data deleted, unless we must keep it.
- Restriction (Art. 18): you can ask us to restrict the processing of your data.
- Data portability (Art. 20): you can receive the data you gave us in a common, machine-readable format, or have it transferred to another controller.
- Objection (Art. 21): you can object at any time, on grounds relating to your particular situation, to processing based on our legitimate interest (Art. 6(1)(f) GDPR). We will then stop, unless there are compelling legitimate grounds for the processing.
- Withdrawal of consent (Art. 7(3)): you can withdraw a consent, such as the one you give by starting a YouTube video, at any time with effect for the future.
To exercise these rights, please contact us using the details in section 1. Please make sure to always clearly state who you are, so that we can be certain that we do not modify or delete any data of the wrong person.
14. Submitting a complaint
If you are not satisfied with the way in which we handle the processing of your personal data, you have the right to submit a complaint to a data protection supervisory authority, in particular in the EU member state of your habitual residence, your place of work or the place of the alleged infringement (Art. 77 GDPR). The authority responsible for us is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), Tatari 39, 10134 Tallinn, Estonia, www.aki.ee. We would appreciate it if you contacted us first, so that we can try to resolve your concern.
15. Amendments to this privacy statement
We reserve the right to make amendments to this privacy statement, for example when the website changes. The current version is always available on this page.
Translation Interpretation
This Privacy Policy may have been translated if We have made them available to You on our Service. You agree that the original English text shall prevail in the case of a dispute.