Privacy Information

This Privacy Information describes how personally identifiable information is processed when Studio Castillo Deball is a controller according to the General Data Protection Regulation (“GDPR”).

For privacy related inquiries please contact our data protection officer by sending an email to studiocastillodeball (a) gmail.com.

1. General information

We lease our dedicated web-server space from https://vultr.com. (“Vultr”) and therefore Vultr may have access to some of your personally identifiable information further de ned in Sections 2 and 3 below, as far as it is required for Vultr to provide their services.
The processing of data by Vultr is based on the adequacy decision of the European Commission as of July 12, 2016 (“EU-U.S. Privacy Shield”) and an additional Data Processing Addendum in accordance with the GDPR that we entered into with Vultr. A copy of this Data Processing Addendum can be made available to you upon request.

The legal basis is provided by Art. 6(1) lit. f) of the GDPR, our legitimate interest is to carry out our association activities.

We are typically processing personally identifiable information of the following groups of persons: visitors of our website and communications partners.

As far as we are using the term “data” in this Privacy Information, this shall always refer to the personally identifiable information according to the GDPR.

2. Visitors of our website

We collect and process any data that is automatically shared by your device. This includes information such as the current IP address, date and time (including time zone), the page visited on our website as well as the web page you visited prior to coming to our page, information about your browser (including type and version), your operating system and language settings (altogether hereinafter referred to as “Server Log Files”). This data is used by the web server to correctly display the content of our website according to your settings and preferences.

The legal basis is provided by Art. 6(1) lit. f) of the GDPR, our legitimate interest is to provide you with an appropriately displayed website.

This website uses Google Analytics, a web analysis service provided by Google, Inc. (“Google”). Google Analytics uses so-called cookies, text les that are saved to the device you are using to browse our website and that allow for an analysis of your use of our website. The cookie-generated data regarding your use of this website will generally be forwarded to a Google server in the USA and stored there. For this website, the IP anonymisation is activated, meaning your IP address will be truncated by Google within Member States of the European Union or other parties to the Agreement on the European Economic Area beforehand. Only in exceptional cases, the full IP address is sent to a Google server in the USA and is shortened there.

Google will use this data as a processor in accordance with Art. 28 GDPR in order to analyse your use of the website, to draft reports about website activities and to perform further services for the website’s operator in connection to website usage and internet usage. The IP address transmitted by your browser as part of Google Analytics is not merged with other data held by Google.

You can object to the above-described data collection for each respective device by making use of the Google Analytics opt-out browser add-on with future effect. You can prevent Google’s collection of the cookie-generated data related to your use of our website (including your IP address) as well as its processing by Google by downloading and installing the browser plugin offered by Google.

The processing of data by Google is based on the adequacy decision of the European Commission as of July 12, 2016 (“EU-U.S. Privacy Shield”) and an additional Data Processing Addendum in accordance with the GDPR that we entered into with Google.

The legal basis is provided by Art. 6(1) lit. f) of the GDPR, our legitimate interest is to provide you with an appropriately optimised and displayed website.

3. Communications partners

Everyone may voluntarily send us emails or otherwise enter into communications with us. In this case we collect and process the name and email address of our communications partners.

The legal basis is provided by Art. 6(1) lit. b) of the GDPR, entering into or preparing a contractual relationship, and/or Art. 6(1) lit. f) of the GDPR, legitimate interest to provide you with the requested information such as e.g. information about an association membership or donation receipts.

Contractual data or other data required by law e.g. to provide you with a donation receipt are obligatory information. We may be unable to provide you with association documents or enter into a contractual relationship with you when you are not providing such data. Any contractual and accounting data will be stored for ten years according to applicable association laws, including business and tax laws.