Privacy police | SONSOFCRAFT

AS THE PROTECTION OF YOUR DATA IS A MAJOR MATTER OF CONCERN FOR US, WE WANT TO TAKE THE TIME TO INFORM YOU ABOUT WHAT DATA WE USE DURING YOUR VISIT AND WHY WE USE IT. IF YOU STILL HAVE QUESTIONS ON THE WAY WE WORK WITH YOUR PERSONAL DATA, YOU CAN REFER TO OUR DATA PROTECTION OFFICER (CONTACT DETAILS BELOW).

WHAT IS PERSONAL DATA?

THE MEANING OF “PERSONAL DATA” IS DEFINED IN THE GENERAL DATA PROTECTION REGULATION (GDPR). ACCORDING TO THE NEW REGULATION, PERSONAL DATA INCLUDES ALL INFORMATION THAT REFERS TO AN IDENTIFIED OR IDENTIFIABLE NATURAL PERSON. THIS CAN INCLUDE FOR EXAMPLE, YOUR RIGHTFUL NAME, YOUR ADDRESS, YOUR TELEPHONE NUMBER OR YOUR DATE OF BIRTH. EVEN INFORMATION ON HOW YOU CAN USE THIS OR OTHER WEBSITES MAY CONTAIN PERSONAL DATA.

PROVIDING THE WEBSITE

AN ACCESS LOG THROUGH OUR WEBSERVER HAS BEEN FULLY ANONYMIZED. BUT OUR SYSTEM DOES USE CERTAIN SECURITY PLUGINS FROM WORDPRESS WHICH PROTECT OUR WEBSITE FROM ATTACK AND MISUSE. NORMALLY, NON-DAMAGING WEBSITE ACCESSES ARE NOT LOGGED BY THE PLUGINS. HOWEVER, AS SOON AS THERE IS THE SUSPICION THAT OUR SYSTEM IS SUBJECT TO AN ATTACK, DATA RELATING TO THE VISITOR’S COMPUTER SYSTEM ARE AUTOMATICALLY LOGGED FOR FORENSIC PURPOSES AND STORED IN FIREWALL LOGS. THE DATA STORED INCLUDES THE IP ADDRESS, THE DATA AND TIME, THE BROWSER USER´S AGENT AND THE REASON FOR THE SUSPICIOUS ACTIVITY.

PURPOSE OF THE PROCESSING

THE CAPTURING OF LOGFILES SERVES TO RECORD AVERTED OR DAMAGING WEBSITE ATTACKS, TO SECURE FORENSIC ACTIVITIES AND TO SECURE AND STABILIZE OUR WEBSITE.

LEGAL BASIS

THE LEGAL BASIS FOR THIS IS ARTICLE 6.1(F) GDPR.

LEGITIMATE INTERESTS

THE PURPOSES MENTIONED ALSO INCLUDE THE LEGITIMATE INTERESTS IN DATA PROCESSING WITHIN THE MEANING OF ARTICLE 6.1(F) GDPR.

DATA STORAGE – DURATION

DATA IS DELETED WHEN IT IS NO LONGER NECESSARY TO ACHIEVE THE PURPOSE FOR WHICH IT WAS CAPTURED. AS A RULE, THIS IS THE CASE AFTER ONE MONTH AT THE LATEST.

OBJECTION

IF DATA IS CAPTURED IN THE EXTENT DESCRIBED, THIS HAS BECOME NECESSARY TO SECURE AND TO OPERATE THE WEBSITE. THEREFORE, THERE IS NO OPPORTUNITY TO RAISE OBJECTION.

LEGAL BASIS FOR COLLECTING AND PROCESSING PERSONAL DATA

AS SOON AS WE HAVE YOUR CONSENT TO PROCESS PERSONAL DATA, ARTICLE 6.1(A) GDPR SERVES AS THE LEGAL BASIS FOR THAT.
WHEN PROCESSING YOUR PERSONAL DATA TO PERFORM A CONTRACT BETWEEN YOU AND OAMC, ARTICLE 6.1(B) GDPR SERVES AS THE LEGAL BASIS. THIS ALSO APPLIES TO PROCESSES REQUIRED TO CONDUCT PRE-CONTRACTUAL ACTIVITIES. WHEN PROCESSING PERSONAL DATA TO PERFORM A LEGAL OBLIGATION TO WHICH OUR COMPANY IS SUBJECT, ARTICLE 6.1© GDPR SERVES AS THE LEGAL BASIS.
ARTICLE 6.1(F) GDPR PROVIDES THE LEGAL BASIS WHEN THE PROCESSING IS NECESSARY FOR THE PURPOSES OF THE LEGITIMATE INTERESTS PURSUED BY OUR COMPANY OR BY A THIRD PARTY AND WHERE SUCH INTERESTS ARE NOT OVERRIDDEN BY THE INTERESTS OR FUNDAMENTAL RIGHTS AND FREEDOMS OF THE DATA SUBJECT.

DATA STORAGE – DURATION

YOUR PERSONAL DATA WILL BE DELETED OR THE PROCESSING WILL BE RESTRICTED AS SOON AS THE DATA HAS MET THE PURPOSE FOR WHICH IT WAS STORED. STORAGE OF THE DATA BEYOND THIS MAY BE POSSIBLE IF THIS IS STIPULATED BY EUROPEAN OR NATIONAL LEGISLATORS IN EU DIRECTIVES, LAWS OR OTHER REGULATIONS TO WHICH THE CONTROLLER IS SUBJECT. THE DATA WILL BE DELETED OR ITS PROCESSING WILL BE RESTRICTED WHEN A PRESCRIBED DEADLINE EXPIRES, UNLESS IT IS NECESSARY TO CONTINUE STORING THE DATA TO CONCLUDE OR PERFORM A CONTRACT.

COOKIES ARE SMALL TEXT FILES THAT ARE STORED ON YOUR COMPUTER WHEN YOU VISIT OUR WEBSITE AND ALLOW US TO REASSIGN YOUR BROWSER. COOKIES STORE INFORMATION SUCH AS YOUR LANGUAGE SETTING, THE DURATION OF YOUR VISIT ON OUR WEBSITE OR THE INFORMATION YOU ENTER THERE.
THERE ARE DIFFERENT TYPES OF COOKIES.: SESSION COOKIES ARE TEMPORARY COOKIES THAT ARE STORED IN THE USER’S INTERNET BROWSER UNTIL THE BROWSER WINDOW IS CLOSED AND THE SESSION COOKIES ARE DELETED. PERMANENT OR PERSISTENT COOKIES ARE USED FOR REPEATED VISITS AND STORED IN THE USER’S BROWSER FOR A PREDEFINED TIME. FIRST-PARTY COOKIES ARE SET BY THE WEBSITE THE USER VISITS. ONLY THIS WEBSITE MAY READ INFORMATION FROM COOKIES. THIRD-PARTY COOKIES ARE SET BY ORGANIZATIONS THAT ARE NOT OPERATORS OF THE WEBSITE THAT THE USER VISITS. THESE COOKIES ARE USED BY MARKETING COMPANIES, FOR EXAMPLE.:

THE COOKIES USED ON THIS WEBSITE ARE:

_gat: Persistent third-party cookie for the purpose of reducing the request rate as used in tracking with Google Analytics. The storage period is 1 minute.
_ga: Persistent third-party cookie for the purpose of differentiating users within the scope of tracking by Google Analytics. The storage period is 2 years.
_gid: Persistent third-party cookie for the purpose of differentiating users within the scope of tracking by Google Analytics. The storage period is 24 hours.
PHPSESSID: First-party session cookie for the purpose of identifying the user’s current session on our website. The storage time is identical to the current session.

LEGAL BASIS

ARTICLE 6.1(F) GDPR PROVIDES THE LEGAL BASIS FOR DEPLOYING COOKIES.

LEGITIMATE INTERESTS

WE USE COOKIES TO DULY OPERATE THE WEBSITE, TO PROVIDE BASIC FUNCTIONALITIES AND TO TAILOR OUR WEBSITE TO PREFERRED AREAS OF INTEREST. THIS IS ALSO THE LEGITIMATE INTEREST IN DATA PROCESSING WITHIN THE MEANING OF ARTICLE 6.1(F) GDPR.

OBJECTION

YOU CAN DELETE COOKIES ALREADY STORED ON YOUR END DEVICE AT ANY TIME. IF YOU WISH TO AVOID THE DEPLOYMENT OF COOKIES, YOU CAN REFUSE TO ACCEPT COOKIES IN YOUR BROWSER. CHECK YOUR BROWSER MANUAL TO SEE HOW THIS WORKS IN DETAIL.

GOOGLE ANALYTICS

THIS WEBSITE IS USING GOOGLE ANALYTICS, A WEB ANALYSIS SERVICE OF GOOGLE LLC (“GOOGLE”).THE USE INCLUDES THE “UNIVERSAL ANALYTICS” OPERATING MODE. THIS MAKES IT POSSIBLE TO ASSIGN DATA, SESSIONS AND INTERACTIONS ACROSS MULTIPLE DEVICES TO A PSEUDONYMOUS USER ID AND THUS ANALYZE A USER’S ACTIVITIES

ACROSS DEVICES.
GOOGLE ANALYTICS USES “COOKIES”, WHICH ARE TEXT FILES PLACED ON YOUR COMPUTER, TO HELP THE WEBSITE ANALYZE HOW USERS INTERACT WITH THE SITE. THE INFORMATION GENERATED BY THE COOKIE RELATING TO YOUR USE OF THIS WEBSITE IS USUALLY TRANSFERRED TO A GOOGLE SERVER IN THE USA AND STORED THERE. HOWEVER, IF IP ANONYMIZATION IS ACTIVATED ON THIS WEBSITE, GOOGLE WILL REDUCE THE TRANSFER OF YOUR IP ADDRESS TO WITHIN MEMBER STATES OF THE EUROPEAN UNION OR TO OTHER STATES WHICH ARE PARTIES OF THE AGREEMENT ON THE EUROPEAN ECONOMIC AREA BEFOREHAND. ONLY IN EXCEPTIONAL CASES WILL THE FULL IP ADDRESS BE TRANSMITTED TO A GOOGLE SERVER IN THE USA AND SHORTENED THERE. WE WOULD LIKE TO POINT OUT THAT ON THIS WEBSITE GOOGLE ANALYTICS HAS BEEN EXTENDED TO INCLUDE IP ANONYMIZATION IN ORDER TO ENSURE ANONYMOUS COLLECTION OF IP ADDRESSES (SO-CALLED IP MASKING). THE IP ADDRESS TRANSMITTED BY YOUR BROWSER IN THE CONTEXT OF GOOGLE ANALYTICS IS NOT MERGED WITH OTHER GOOGLE DATA. FOR MORE INFORMATION ON TERMS OF USE AND DATA PROTECTION, PLEASE VISIT HTTPS://WWW.GOOGLE.COM/ANALYTICS/TERMS/GB.HTML OR HTTPS://POLICIES.GOOGLE.COM/?HL=EN.

PURPOSES OF THE PROCESSING

ON BEHALF OF THE OPERATOR OF THIS WEBSITE, GOOGLE WILL USE THIS INFORMATION TO EVALUATE YOUR USE OF THE WEBSITE, TO COMPILE REPORTS ON WEBSITE ACTIVITY AND TO PROVIDE THE WEBSITE OPERATOR WITH OTHER SERVICES RELATED TO WEBSITE AND INTERNET USE.

LEGITIMATE INTERESTS

THE LEGITIMATE INTEREST IN THE DATA PROCESSING LIES IN THE OPTIMIZATION OF OUR WEBSITE, THE ANALYSIS OF THE USE OF OUR WEBSITE AND THE ADAPTATION OF ITS CONTENTS. THE INTERESTS OF USERS ARE ADEQUATELY PROTECTED BY PSEUDONYMIZATION.

LEGAL BASIS

THE LEGAL BASIS FOR THE USE OF GOOGLE ANALYTICS IS YOUR CONSENT IN ACCORDANCE WITH ARTICLE 6.1 (F) GDPR.

RECIPIENTS OR CATEGORIES OF RECIPIENTS

THE RECIPIENT OF THE COLLECTED DATA IS GOOGLE.

TRANSFER TO THIRD COUNTRIES

PERSONAL DATA WILL BE TRANSFERRED TO THE USA UNDER THE EU-US PRIVACY SHIELD ON THE BASIS OF THE EUROPEAN COMMISSION’S ADEQUACY DECISION.

DATA STORAGE – DURATION

THE DATA SENT BY US AND LINKED TO COOKIES, USER-IDENTIFIERS (E.G. USER IDS) OR ADVERTISING-IDENTIFIERS ARE AUTOMATICALLY DELETED AFTER 14 MONTHS. DATA WHOSE RETENTION PERIOD HAS BEEN REACHED IS AUTOMATICALLY DELETED ONCE A MONTH.

OBJECTION

YOU CAN PREVENT THE STORAGE OF COOKIES BY ADJUSTING YOUR BROWSER SOFTWARE ACCORDINGLY; HOWEVER, WE WOULD LIKE TO POINT OUT THAT IN THIS CASE YOU MAY NOT BE ABLE TO USE ALL FUNCTIONS OF THIS WEBSITE TO THEIR FULL EXTENT. YOU CAN ALSO PREVENT GOOGLE FROM COLLECTING THE DATA GENERATED BY THE COOKIE AND RELATING TO YOUR USE OF THE WEBSITE (INCLUDING YOUR IP ADDRESS) AND FROM PROCESSING THIS DATA BY DOWNLOADING AND INSTALLING THE BROWSER ADD-ON. OPT-OUT COOKIES WILL PREVENT FUTURE COLLECTION OF YOUR DATA WHEN YOU VISIT THIS WEBSITE. TO PREVENT UNIVERSAL ANALYTICS FROM COLLECTING DATA ACROSS DIFFERENT DEVICES, YOU NEED TO OPT-OUT OF ALL SYSTEMS USED.

TRANSFERRING DATA TO THIRD PARTIES

WE GENERALLY DO NOT TRANSMIT YOUR DATA TO THIRD PARTIES, UNLESS WE ARE LEGALLY OBLIGED TO DO SO. SHOULD EXTERNAL SERVICE PROVIDERS COME INTO CONTACT WITH YOUR PERSONAL DATA, WE SHALL HAVE MADE USE OF LEGAL, TECHNICAL AND ORGANIZATIONAL MEASURES AND REGULAR MONITORING TO ENSURE THAT SUCH PERSONS COMPLY WITH THE RELEVANT DATA PROTECTION REGULATIONS. FURTHERMORE, THESE SERVICE PROVIDERS MAY ONLY USE YOUR DATA IN ACCORDANCE WITH OUR MANDATE.

YOUR RIGHTS

GLADLY WE WILL INFORM YOU WHETHER AND WHICH OF YOUR PERSONAL DATA IS PROCESSED BY US AND FOR WHAT PURPOSES (ARTICLE 15 OF THE GDPR). FURTHERMORE, GIVEN THE RESPECTIVE LEGAL CONDITIONS, YOU HAVE TO THE RIGHT TO RECTIFICATION (ARTICLE 16 GDPR), THE RIGHT TO RESTRICT PROCESSING (ARTICLE 18 GDPR), THE RIGHT TO ERASURE (ARTICLE 17 GDPR), THE RIGHT TO OBJECT (ARTICLE 21 GDPS) AND THE RIGHT TO DATA PORTABILITY (ARTICLE 20 GDPR).
IRRESPECTIVE OF THESE RIGHTS AND THE POSSIBILITY OF ASSERTING ANOTHER ADMINISTRATIVE OR LEGAL REDRESS, YOU ALSO AT ANY TIME HAVE THE POSSIBILITY TO ASSERT YOUR RIGHT TO COMPLAIN TO A SUPERVISORY AUTHORITY, IN PARTICULAR, IN THE MEMBER STATE OF YOUR PLACE OF DOMICILE, OF YOUR PLACE OF WORK OR OF THE LOCATION OF THE ALLEGED INFRINGEMENT IF YOU ARE OF THE OPINION THAT THE PROCESSING OF PERSONAL DATA AFFECTING YOU INFRINGES LEGAL DATA PROTECTION REGULATIONS (ARTICLE 77 GDPR).

AMENDMENTS TO THIS PRIVACY STATEMENT

WE RESERVE THE RIGHT TO AMEND THIS PRIVACY STATEMENT AT ANY TIME, TAKING ACCOUNT OF APPLICABLE DATA PROTECTION REGULATIONS. LAST UPDATED: OCTOBER 2019.