Last updated: October 2026.
Who we are
RegReportingDesk (regreportingdesk.com) publishes educational explainers on regulatory reporting. It is operated from Luxembourg. For anything about your personal data, write to hello@regreportingdesk.com.
What we collect and why
Reading the site. Our hosting provider (Hostinger) keeps standard server logs: IP address, browser type, pages requested and timestamps. They are used to keep the site running and secure and are retained for a limited period set by the host. Our security plugin (Wordfence) also records IP addresses of requests it blocks. Legal basis: our legitimate interest in running a secure website.
Cookies and analytics. We use Google Analytics to understand which articles are read, but only after you accept analytics cookies in the consent banner. If you decline, no analytics cookie is set and Google receives no data about your visit. You can change your choice at any time through the cookie settings link in the footer. Legal basis: your consent.
Contact form. When you use the contact form we receive your name, email address and message by email at hello@regreportingdesk.com. We keep that correspondence for as long as needed to answer you. Legal basis: our legitimate interest in answering your enquiry.
RRD Weekly newsletter. If you subscribe, we store your email address, the time and page of your signup, the time you confirmed it, and the version of this notice you saw. We send one email a week and nothing else. We do not track which individual reader opens an email or clicks a link; our email provider keeps only anonymous, aggregate open and click counts for the issue as a whole. You can unsubscribe with the link in every issue or by emailing us; we then stop sending immediately and keep only a record that you unsubscribed, so you are not re-added by mistake. Addresses that are never confirmed are deleted after 30 days. Legal basis: your consent, which you can withdraw at any time.
Who processes data on our behalf
- Hostinger (website hosting and the hello@ mailbox), data centres in the European Union.
- Brevo (newsletter delivery), a French company hosting subscriber data in the European Union.
- Google (analytics, only with your consent; data may be processed in the United States under the European Commission’s standard contractual clauses).
We do not sell or share subscriber or visitor data with anyone else, and we do not use it for advertising.
Your rights
You can ask us to access, correct, delete or export the personal data we hold about you, to restrict or object to its processing, and you can withdraw any consent you have given. Write to hello@regreportingdesk.com. You also have the right to complain to the Luxembourg data protection authority, the Commission nationale pour la protection des données (CNPD), at cnpd.public.lu.
Changes
If this notice changes in a way that affects newsletter subscribers, we say so in the next issue. The date at the top shows the current version.