Trace:

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
en:legal:vinyl:privacy [2022/01/14 14:40] – [Contact form] bcoen:legal:vinyl:privacy [2023/08/22 01:07] (current) – [Billing information] bco
Line 2: Line 2:
 ====== Privacy Policy ====== ====== Privacy Policy ======
  
-This page explains how and when your personal data is collected, processed and used when accessing bethico.com, bethicoleague.com, or any of its subdomains. Basis of all processing are the terms of the [[https://ec.europa.eu/commission/priorities/justice-and-fundamental-rights/data-protection/2018-reform-eu-data-protection-rules_en|EU Data Protection Rules]] (GDPR).+This page explains how and when your personal data is collected, processed and used when accessing bethico.com or any of its subdomains. Basis of all processing are the terms of the [[https://ec.europa.eu/commission/priorities/justice-and-fundamental-rights/data-protection/2018-reform-eu-data-protection-rules_en|EU Data Protection Rules]] (GDPR).
  
 In the following text we use In the following text we use
Line 18: Line 18:
 In general, all cookies we set are necessary to provide functionality on our sites. Overview of the cookies set in your browser: In general, all cookies we set are necessary to provide functionality on our sites. Overview of the cookies set in your browser:
 ^ Cookie ^ Purpose ^ Provider ^ Expiry ^ ^ Cookie ^ Purpose ^ Provider ^ Expiry ^
-| bethico_cookie | memorize your acceptance of cookies | First Party Cookie | 90 days after acceptance |+| bethico_cookies_vinyl | memorize your acceptance of cookies | First Party Cookie | 90 days after acceptance | 
 +| bethico_fragment | facilitate page navigation (preserve query fragments) | First Party Cookie | 10 seconds |
 | bethico_file_upload_server | memorize your choice of server location | First Party Cookie | 30 days after last visit to the **{{fa>upload}} Submit audio** page | | bethico_file_upload_server | memorize your choice of server location | First Party Cookie | 30 days after last visit to the **{{fa>upload}} Submit audio** page |
-| joomla_user_state | "logged in" or doesn't exist | First Party Cookie | current session |+| joomla_user_state | "logged in" or Cookie doesn't exist | First Party Cookie | current session |
 | joomla_remember_me | facilitate login if you choose "Remember Me" | First Party Cookie | 60 days after last login | | joomla_remember_me | facilitate login if you choose "Remember Me" | First Party Cookie | 60 days after last login |
 | "random string" | your choice of site language | First Party Cookie | current session | | "random string" | your choice of site language | First Party Cookie | current session |
 +| "random string" | form token - a random token to avoid browser attacks and multiple submission of the form | First Party Cookie | current session |
 \\ \\
-<nowiki>[remove]</nowiki> with this button. Please note that you will be logged out, and that a few cookies will reestablish themselves on page load. Those cookies cannot be disabled unless you navigate away from our site, but they do not contain any data which can be used for identifiation purposes.\\+<nowiki>[remove]</nowiki> with this button. Please note that you will be logged out, and that a few cookies will reestablish themselves on page load. Those cookies cannot be disabled unless you navigate away from our site. Our cookies do not contain data which can be used for identifiation purposes.\\
 \\ \\
 Your browser has settings to control which cookies it accepts and for how long it stores them. The following links provide detailed information in English: Your browser has settings to control which cookies it accepts and for how long it stores them. The following links provide detailed information in English:
Line 31: Line 33:
   * [[https://www.whatismybrowser.com/guides/how-to-clear-cookies-browsing-history-and-cache/auto|Clear your cache, cookies, and history in your current browser]]   * [[https://www.whatismybrowser.com/guides/how-to-clear-cookies-browsing-history-and-cache/auto|Clear your cache, cookies, and history in your current browser]]
  
 +===== Captcha =====
 +We have implemented our own Captcha service to prevent spam and abuse for new account registration and registering audio. Unfortunately this is necessary to be able to cope with the many spam attacks which are common these days. Our Captcha service displays a small icon at the lower right corner of the pages where it is active. We do not rely on any external services for our Captcha protection, which is fully covered by our Privacy Policy.\\
 +\\
 +Our Captcha service aims at telling humans apart from machines when filling out forms. If a form entry is recognized to be performed by a machine (e.g. bot) then the IP address will be registered and entered into a black list, so no further connection to our websites is possible from that IP address. When humans fill out forms no IP addresses are recorded.\\
 +\\ 
 +If you do not accept our Captcha service you can still fully navigate our website, but you cannot create an account and submit or register audio.
 ===== Server Logs ===== ===== Server Logs =====
  
Line 41: Line 49:
 This information is necessary for legal reasons and to analyse and prevent abuse. This allows us to keep users away who try to crash our server or to have necessary evidence in case of illegal or criminal activity. This information is necessary for legal reasons and to analyse and prevent abuse. This allows us to keep users away who try to crash our server or to have necessary evidence in case of illegal or criminal activity.
  
-Our server logs are automatically deleted after 14 days. We will only keep log files longer when they are needed as evidence during an investigation.+Our server logs are automatically deleted after 30 days. We will only keep log files longer when they are needed as evidence during an investigation.
  
 ===== User Profiles ===== ===== User Profiles =====
 +==== Account creation ====
 +You need to register an account on our website and enter the following data to be able to use our services:
 +  * name
 +  * username
 +  * email address
 +  * password
 +
 +You will also need to establish Two Factor Authentication by registering the site's QR code or key in the //Google Authenticator// or //FreeOTP// app. Our website will provide a QR code to make registering easy.
 +
 +This is required to allow you to login safely and to always identify yourself that it's you.
 +
 ==== Contact form ==== ==== Contact form ====
 If you use the contact form to {{fa>edit}} **Register audio** on our site the following data is sent with the request: If you use the contact form to {{fa>edit}} **Register audio** on our site the following data is sent with the request:
Line 50: Line 69:
   * email address   * email address
   * your IP address   * your IP address
-This data is used to communicate with you, and is not saved by the web server. It is, however, saved by our email system used to send the email. The IP address is only used in case of abuse of our website or servers, as explained in paragraph [[media:aah#server_logs|Server Logs]] above. +This data is used to communicate with you, and is not saved by the web server. It is, however, saved by our email system used to send the email. The IP address is only used in case of abuse of our website or servers, as explained in paragraph [[en:legal:vinyl:privacy#server_logs|Server Logs]] above.
- +
-==== Account creation ==== +
-When you opt to register for an account in our eshop you need to provide the following minimal data: +
-  * username +
-  * email address +
-  * password +
-This data is used to allow you to login and to identify it's you.+
  
 ==== Billing information ==== ==== Billing information ====
-If you want to register or place an order you will need to provide the following billing information: +Billing and payments are not handled through the website. You will receive an email from us with payment details. 
-  * first name + 
-  * last name +| **IMPORTANT: under no circumstances will we ever share your name, email address, or phone number with anyone** Please also read the next paragraph **Counter measures to data leakage** |
-  * phone +
-  * full address +
-This data is exclusively used for processing your order. It will remain in your order history unless you ask us to remove it. For large quantity shipments of physical items from our eshop we will propose direct shipment from our manufacturing partner. Subject to your agreement we will share your shipment information to allow direct shipment. We will never share any of your registration data with any other third party.+
  
 ===== Counter measures to data leakage ===== ===== Counter measures to data leakage =====
Line 74: Line 83:
  
 ===== Third Party Processing ===== ===== Third Party Processing =====
-==== Google Fonts ==== +==== Social media: Facebook, Twitter, Reddit, and LinkedIn ==== 
-The website uses google fonts to improve it's visual appearance. Excerpt from Google's privacy policy regarding google fonts: +We invite you to join our social communities and share our website and articles. As long as you do not visit the social media through these widgets no cookies are saved to your browser. If you click or tap these widgets your IP address might be exposed to those social community services. Note that no tracking is done through these widgets, they simply open a new window to facilitate you login to the service.
-  * The Google Fonts API is designed to limit the collection, storage, and use of end-user data to only what is needed to serve fonts efficiently. +
-  * Google Fonts logs records of the CSS and the font file requests, and access to this data is kept secure. Aggregate usage numbers track how popular font families are and are published on our analytics page. +
-  * More information can be obtained under [[https://developers.google.com/fonts/faq2#what_does_using_the_google_fonts_api_mean_for_the_privacy_of_my_users|What does using the Google Fonts API mean for the privacy of my users?]] and [[https://policies.google.com/privacy|Google's Privacy Policy]].+
  
-==== League websites ==== 
-You can navigate from this website to league websites. Those websites are independent from bethico.com, and might, or might not have their own privacy policies and regulations. 
- 
-==== Social media: Facebook, Twitter, Reddit, and LinkedIn ==== 
-We invite you to join our social communities and share our website and articles. As long as you do not login to your account through these widgets no cookies are saved to your browser. If you click or tap these widgets your IP address might be exposed to those social community services. Note that no tracking is done through these widgets, they simply open a new window to facilitate you login to the service. 
 ===== Your Rights ===== ===== Your Rights =====
 The GDPR guarantees your right to information about your personal data, as well as your rights to rectification, erasure, and portability (e.g. for transferring data). Furthermore, you have a right to restriction and objection of processing your data. You can withdraw your consent for our processing of your personal data at any time.\\ The GDPR guarantees your right to information about your personal data, as well as your rights to rectification, erasure, and portability (e.g. for transferring data). Furthermore, you have a right to restriction and objection of processing your data. You can withdraw your consent for our processing of your personal data at any time.\\
 \\ \\
-Feel free to contact us through the "Request more information" contact form on the home page, so that we can work out how we can help you.\\+Feel free to contact us through the {{fa>edit}} **Register audio** contact form after login, so that we can work out how we can help you. If you already used our service please contact us directly at the email address provided before.\\
 \\ \\
 You have the right to lodge a complaint with the designated data protection supervisory authority in the place you live or work. You have the right to lodge a complaint with the designated data protection supervisory authority in the place you live or work.

Information

Privacy Policy

© 2019-2024 Bethico & Bernard Condrau - Powered by DokuWiki