Privacy Policy
Last updated: 17 July 2026
This policy explains how Work Futures Report (“WFR”, “we”) processes personal data when you subscribe to our newsletter or visit our website, in accordance with the EU General Data Protection Regulation (GDPR).
1. Data controller
GBC SRL (operating as GoBeyondClouds), Rue Godefroid Devreese 43, 1030 Brussels, Belgium. Contact: juergen@gobeyondclouds.io. See also our Imprint.
2. What we collect and why
a) Newsletter subscription
- Data: your email address; optionally your name if you provide it; the date, source, and status of your consent; and engagement events (whether emails are delivered, opened, and which links are clicked).
- Purpose: to send you the WFR newsletter and to understand, in aggregate, what content is useful.
- Legal basis: your consent (Art. 6(1)(a) GDPR), confirmed via double opt-in. You can withdraw it at any time (see §6).
b) Website use
- Data: standard technical data needed to serve the site (e.g. browser request data and approximate country). We design for privacy-friendly, aggregate measurement and avoid non-essential tracking cookies. Where we measure engagement, we store only coarse, pseudonymised signals (e.g. a hashed identifier and country, not your full IP address).
- Purpose: security, stability, and aggregate audience statistics.
- Legal basis: our legitimate interest in operating a secure, functioning website (Art. 6(1)(f) GDPR).
The subscribe form on our site is provided by our newsletter platform (Beehiiv) and may set its own cookies when you interact with it.
3. Who processes your data (recipients)
We use carefully selected service providers (“processors”) who act on our instructions:
| Provider | Role | Region |
|---|---|---|
| Beehiiv | Newsletter platform & subscriber system of record | USA |
| Supabase | Application database | EU (eu-central-1) |
| Vercel | Website hosting | USA |
| Modal | Backend compute | USA |
| Resend | Transactional / alert email | USA |
| Anthropic (Claude) | AI article generation | USA |
| OpenAI | AI cover-image generation | USA |
AI providers process publication content, not your subscriber data. We do not sell your personal data.
4. International transfers
Some providers are located in the USA. Where personal data is transferred outside the EU/EEA, we rely on the European Commission’s Standard Contractual Clauses (SCCs) and additional safeguards as appropriate.
5. Retention
We keep your subscription data until you unsubscribe or ask us to delete it. After unsubscribing, we may retain a minimal suppression record (e.g. a hash of your email) to ensure we do not email you again, and as required to demonstrate compliance.
6. Your rights
Under the GDPR you have the right to: access your data; have it corrected or erased; restrict or object to processing; data portability; and to withdraw consent at any time (every newsletter has a one-click unsubscribe link, and withdrawal does not affect prior lawful processing). To exercise any right, email juergen@gobeyondclouds.io.
You also have the right to lodge a complaint with a supervisory authority, in particular the Belgian Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit, dataprotectionauthority.be) or the authority in your country of residence.
7. Children
WFR is intended for a professional audience and is not directed at children under 16. We do not knowingly collect their data.
8. Changes
We may update this policy; the “last updated” date above reflects the current version.