Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
en:legal:vinyl:privacy [2022/01/16 17:49] – [Cookies] bcoen:legal:vinyl:privacy [2023/08/22 01:07] (current) – [Billing information] bco
Line 2: Line 2:
 ====== Privacy Policy ====== ====== Privacy Policy ======
  
-This page explains how and when your personal data is collected, processed and used when accessing bethico.com, bethicoleague.com, or any of its subdomains. Basis of all processing are the terms of the [[https://ec.europa.eu/commission/priorities/justice-and-fundamental-rights/data-protection/2018-reform-eu-data-protection-rules_en|EU Data Protection Rules]] (GDPR).+This page explains how and when your personal data is collected, processed and used when accessing bethico.com or any of its subdomains. Basis of all processing are the terms of the [[https://ec.europa.eu/commission/priorities/justice-and-fundamental-rights/data-protection/2018-reform-eu-data-protection-rules_en|EU Data Protection Rules]] (GDPR).
  
 In the following text we use In the following text we use
Line 18: Line 18:
 In general, all cookies we set are necessary to provide functionality on our sites. Overview of the cookies set in your browser: In general, all cookies we set are necessary to provide functionality on our sites. Overview of the cookies set in your browser:
 ^ Cookie ^ Purpose ^ Provider ^ Expiry ^ ^ Cookie ^ Purpose ^ Provider ^ Expiry ^
-bethico_vinyl_cookies | memorize your acceptance of cookies | First Party Cookie | 90 days after acceptance |+bethico_cookies_vinyl | memorize your acceptance of cookies | First Party Cookie | 90 days after acceptance |
 | bethico_fragment | facilitate page navigation (preserve query fragments) | First Party Cookie | 10 seconds | | bethico_fragment | facilitate page navigation (preserve query fragments) | First Party Cookie | 10 seconds |
 | bethico_file_upload_server | memorize your choice of server location | First Party Cookie | 30 days after last visit to the **{{fa>upload}} Submit audio** page | | bethico_file_upload_server | memorize your choice of server location | First Party Cookie | 30 days after last visit to the **{{fa>upload}} Submit audio** page |
Line 24: Line 24:
 | joomla_remember_me | facilitate login if you choose "Remember Me" | First Party Cookie | 60 days after last login | | joomla_remember_me | facilitate login if you choose "Remember Me" | First Party Cookie | 60 days after last login |
 | "random string" | your choice of site language | First Party Cookie | current session | | "random string" | your choice of site language | First Party Cookie | current session |
-| "random string" | form token | First Party Cookie | current session |+| "random string" | form token - a random token to avoid browser attacks and multiple submission of the form | First Party Cookie | current session |
 \\ \\
-<nowiki>[remove]</nowiki> with this button. Please note that you will be logged out, and that a few cookies will reestablish themselves on page load. Those cookies cannot be disabled unless you navigate away from our site, but they do not contain any data which can be used for identifiation purposes.\\+<nowiki>[remove]</nowiki> with this button. Please note that you will be logged out, and that a few cookies will reestablish themselves on page load. Those cookies cannot be disabled unless you navigate away from our site. Our cookies do not contain data which can be used for identifiation purposes.\\
 \\ \\
 Your browser has settings to control which cookies it accepts and for how long it stores them. The following links provide detailed information in English: Your browser has settings to control which cookies it accepts and for how long it stores them. The following links provide detailed information in English:
Line 34: Line 34:
  
 ===== Captcha ===== ===== Captcha =====
-We use Google's reCaptcha service to prevent spam for new account registration and the form to register audio. Unfortunately this is necessary to be able to cope with the many spam attacks which are common these days. Google's reCaptcha service displays a small icon at the lower right corner of the pages where it is active, you can view Google's privacy terms by clicking on the link within this iconGoogle's privacy terms are not in our control and are not covered by our Privacy Policy.\\+We have implemented our own Captcha service to prevent spam and abuse for new account registration and registering audio. Unfortunately this is necessary to be able to cope with the many spam attacks which are common these days. Our Captcha service displays a small icon at the lower right corner of the pages where it is active. We do not rely on any external services for our Captcha protection, which is fully covered by our Privacy Policy.\\
 \\ \\
-If you do not accept Google's reCaptcha service you can still fully navigate our website, but you cannot create an account and submit or register audio.+Our Captcha service aims at telling humans apart from machines when filling out forms. If a form entry is recognized to be performed by a machine (e.g. bot) then the IP address will be registered and entered into a black list, so no further connection to our websites is possible from that IP address. When humans fill out forms no IP addresses are recorded.\\ 
 +\\  
 +If you do not accept our Captcha service you can still fully navigate our website, but you cannot create an account and submit or register audio.
 ===== Server Logs ===== ===== Server Logs =====
  
Line 47: Line 49:
 This information is necessary for legal reasons and to analyse and prevent abuse. This allows us to keep users away who try to crash our server or to have necessary evidence in case of illegal or criminal activity. This information is necessary for legal reasons and to analyse and prevent abuse. This allows us to keep users away who try to crash our server or to have necessary evidence in case of illegal or criminal activity.
  
-Our server logs are automatically deleted after 14 days. We will only keep log files longer when they are needed as evidence during an investigation.+Our server logs are automatically deleted after 30 days. We will only keep log files longer when they are needed as evidence during an investigation.
  
 ===== User Profiles ===== ===== User Profiles =====
Line 71: Line 73:
 ==== Billing information ==== ==== Billing information ====
 Billing and payments are not handled through the website. You will receive an email from us with payment details. Billing and payments are not handled through the website. You will receive an email from us with payment details.
 +
 +| **IMPORTANT: under no circumstances will we ever share your name, email address, or phone number with anyone** Please also read the next paragraph **Counter measures to data leakage** |
  
 ===== Counter measures to data leakage ===== ===== Counter measures to data leakage =====
Line 85: Line 89:
 The GDPR guarantees your right to information about your personal data, as well as your rights to rectification, erasure, and portability (e.g. for transferring data). Furthermore, you have a right to restriction and objection of processing your data. You can withdraw your consent for our processing of your personal data at any time.\\ The GDPR guarantees your right to information about your personal data, as well as your rights to rectification, erasure, and portability (e.g. for transferring data). Furthermore, you have a right to restriction and objection of processing your data. You can withdraw your consent for our processing of your personal data at any time.\\
 \\ \\
-Feel free to contact us through the "Request more information" contact form on the home page, so that we can work out how we can help you.\\+Feel free to contact us through the {{fa>edit}} **Register audio** contact form after login, so that we can work out how we can help you. If you already used our service please contact us directly at the email address provided before.\\
 \\ \\
 You have the right to lodge a complaint with the designated data protection supervisory authority in the place you live or work. You have the right to lodge a complaint with the designated data protection supervisory authority in the place you live or work.