INTRODUCTION
DvDigitals, a sole proprietorship owned by Vivien Dezamits, located at 1220 Vienna, Donaufelder Strasse 164 (hereinafter referred to as the Service Provider or Data Controller), hereby submits to the following privacy policy.
This Privacy Policy governs the data processing activities on the website: dvdigitals.store. The Privacy Policy can be accessed at: dvdigitals.store/privacy. Any amendments to the Privacy Policy will take effect upon publication at the address above.
DATA CONTROLLER AND CONTACT INFORMATION
Name: Vivien Dezamits
Email: dvdigitalsmarketing@gmail.com
Phone: +3630 347 7064
DEFINITIONS
- Personal Data: Any information relating to an identified or identifiable natural person (“data subject”).
- Data Processing: Any operation or set of operations performed on personal data, whether automated or not.
- Data Controller: The natural or legal person that determines the purposes and means of the processing of personal data.
- Data Processor: A natural or legal person that processes personal data on behalf of the Data Controller.
- Recipient: A natural or legal person to whom personal data is disclosed.
- Consent of the Data Subject: Freely given, specific, informed, and unambiguous indication of the data subject’s agreement.
- Data Breach: A breach of security leading to the accidental or unlawful destruction, loss, or unauthorized disclosure of personal data transmitted, stored, or otherwise processed.
PRINCIPLES GOVERNING THE PROCESSING OF PERSONAL DATA
Personal data must be:
a) Processed lawfully, fairly, and in a transparent manner in relation to the data subject.
b) Collected for specified, explicit, and legitimate purposes and not further processed in a manner that is incompatible with those purposes.
c) Adequate, relevant, and limited to what is necessary.
d) Accurate and kept up to date.
e) Stored no longer than necessary for the purposes for which it is processed.
f) Processed securely to ensure protection against unauthorized or unlawful processing, accidental loss, destruction, or damage.
The Data Controller is responsible for ensuring compliance with these principles.
MARKETING ACTIVITIES
DATA PROCESSING ACTIVITIES
INQUIRIES AND CLIENT COMMUNICATION
- Data Collected: Name, email address, phone number, and any additional information provided in inquiries.
- Legal Basis: Processing is required to fulfill pre-contractual or contractual obligations or based on legitimate interests for responding to inquiries.
- Recipients: Employees responsible for client communication.
- Retention Period: Data will be retained for up to 2 years after the last communication unless required for legal purposes.
MARKETING ACTIVITIES
- Data Collected: Name, email address, browsing behavior (via cookies), and preferences.
- Legal Basis: Explicit consent provided by the user for marketing activities.
- Recipients: Marketing team and external tools/platforms used for campaign management.
- Retention Period: Until the user withdraws consent or requests deletion.
ADDITIONAL LEGAL BASES FOR PROCESSING
- Compliance with Legal Obligations: Necessary for tax, accounting, or regulatory purposes.
- Legitimate Interests: Fraud prevention, improving security, and enhancing services.
- Consent: For activities requiring explicit approval, such as email marketing.
INTERNATIONAL DATA TRANSFERS
If personal data is transferred outside the European Economic Area (EEA), such transfers will be protected through:
- Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring that the receiving country provides an adequate level of data protection.
DATA RETENTION PERIODS
- Transactional Data: Retained for a minimum of 5 years for compliance with accounting laws.
- Marketing Data: Retained until the user withdraws consent or requests deletion.
RIGHTS OF DATA SUBJECTS
Users have the following rights regarding their personal data:
- Access: Request access to their personal data.
- Rectification: Request the correction of any inaccurate data.
- Erasure: Request the deletion of their personal data.
- Restriction: Request restrictions on how their data is processed.
- Portability: Receive their personal data in a structured, commonly used format.
- Withdraw Consent: Withdraw consent for data processing at any time.
Data subjects can exercise these rights by contacting: dvdigitalsmarketing@gmail.com.
COOKIE POLICY
- Data Collected: Cookies collect unique identifiers, timestamps, and browsing behavior to improve user experience.
- Purpose: Cookies are used for tracking user activity, storing preferences, and improving site functionality.
- Types of Cookies:
- Session Cookies: Temporary cookies deleted once the browser is closed.
- Persistent Cookies: Stored on the device until manually or automatically deleted.
- Third-Party Cookies: Used by services like Google Analytics for performance monitoring.
- Consent: Cookies not essential for website functionality require user consent via the cookie banner.
GOOGLE ANALYTICS
This website uses Google Analytics to analyze how users interact with the site. Information generated by cookies (including the user’s IP address) may be transferred to Google servers in the USA. IP anonymization is activated on this website, meaning user IP addresses are shortened within the EU/EEA before transmission.
To opt-out of Google Analytics, users can download the browser plugin: Google Analytics Opt-Out.
More information can be found in Google’s Privacy Policy: Google Privacy Policy.
SOCIAL MEDIA
- Data Collected: Username and public profile information for users interacting with our social media platforms (e.g., Facebook, Instagram, LinkedIn).
- Purpose: To promote content, products, or services.
- Retention Period: Data is retained according to the respective platform’s privacy policies.
- Legal Basis: Consent and legitimate interests for business promotion.
- Third-Party Involvement: Social media platforms process data according to their privacy policies (e.g., Facebook or Instagram Privacy Policy).
SECURITY MEASURES
We employ technical and organizational measures to protect personal data, including:
- Encryption: SSL encryption for data transmission.
- Password Protection: Passwords are encrypted using industry-standard algorithms.
- Regular Security Assessments: To ensure compliance with data protection regulations.
NOTIFICATION OF DATA BREACH
In the event of a data breach posing a high risk to users, we will notify affected individuals promptly, providing details on the breach, its consequences, and measures taken to mitigate risks.
CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time. Updates will be published on this page, and, where appropriate, notified to users via email.