Thank you for your interest in my Privacy Policy. This Privacy Policy applies to my website www.myshinytoyrobots.com, which is operated by me, Alex Jones, Cardiff, Wales, United Kingdom as the data controller, and the third parties I use to provide the website ("we", "us", "our").
Background
This Privacy Policy describes our privacy practices in plain language, keeping legal and technical jargon to a minimum to ensure that you understand the information provided. However, to achieve this goal, I would like to explain the following three terms.
What is personal data?
Personal data is any information relating to an identified or identifiable living individual. Various information that, taken together, can lead to the identification of a specific person also constitutes personal data.
What is processing?
"Processing" means and includes virtually any handling of data.
Which law applies?
I am the data controller in accordance with the UK's Data Protection Act (“DPA”) and the EU's General Data Protection Regulation (“GDPR”).
General principles
Purpose and legal basis of processing
In accordance with the DPA and the GDPR, we need both a purpose and a legal basis for processing personal data. The purposes are:
- the provision of the website and its functions and content,
- responding to contact requests and communicating with my followers and website users,
- providing my services and, in particular, affiliate advertising, my blog, reviews and articles ("Services"); and
- Safety measures.
Of course, we can only do so if we have at least one of the following legal bases or, in other words, lawful reasons for doing so. Unless specifically described below, we usually link the above purposes to one of the following:
- Consent,
- to provide my services and fulfil my contractual obligations,
- to fulfil my legal obligations, and
- to protect my and our legitimate interests.
Security
My website uses SSL or TLS encryption to ensure the security of data processing and to protect the transmission of confidential content, login data or contact requests that you send to us. In addition, we have taken numerous security measures ("technical and organisational measures"), such as encryption or "need to know" access, to ensure the most complete protection of personal data processed through my website.
Nevertheless, Internet-based data transmissions can always have security vulnerabilities, so that absolute protection cannot be guaranteed. With this in mind, databases or records containing personal data may be breached inadvertently or through unlawful intrusion. As soon as I become aware of a data breach, I will notify all affected individuals whose personal data may have been compromised as soon as possible after the breach is discovered.
Retention and storage
I will retain your personal information for as long as is necessary in connection with the purposes described in this Privacy Policy.
Minors
I do not solicit personal information from minors and children and do not knowingly collect or disclose such information to third parties.
Automated decision making
Automated decision-making, including profiling, does not take place.
Data sale
I do not sell your personal information.
Data of a special category
I do not process data of a special category unless this is explicitly required for a specific service and consent has been given.
International transmission
In the course of operating my website, we process data. Normally, we do not transfer personal data to countries outside the UK and the EEA. However, when we do, I ensure that the processing of your personal data is governed by processing agreements that include standard contractual clauses for a high level of data protection.
Disclosure and disclosure
We will not disclose or otherwise distribute your personal information to third parties unless a) necessary to provide my services, b) you have consented to the disclosure, c) or if we are required to do so by law, such as a court order, or to assist in a criminal or legal investigation or other legal proceeding, whether domestic or foreign, or to serve our legitimate interests.
Marketing
General
If you have given us your separate consent to process your data for marketing and advertising purposes, we are entitled to contact you for these purposes via the communication channels for which you have given your consent.
Affiliate marketing
I also participate in affiliate programs. Affiliate programs are designed to give website owners the opportunity to earn advertising revenue through advertising and linking. Therefore, my website may contain affiliate marketing links, which means that I may receive a commission for selling the products or services I write about. You will never be charged a fee through any of my affiliate links, but you may receive a discounted price on their goods or services and I will receive a small commission. My editorial content is not influenced by my affiliate partnerships.
Analyses
For business reasons, we analyse the data we have about business transactions, contracts, inquiries, etc., whereby the group of persons concerned may include contractual partners, prospective customers, customers, visitors and users of my website and my affiliate online offer. The analyses are carried out for the purposes of business evaluation, marketing and market research. The analyses are solely for our use and will not be shared with outside parties unless they are anonymous analyses with aggregated, i.e. anonymized, values. In addition, we take into account the privacy of users and process the data for analysis purposes as pseudonymously as possible and, if possible, anonymize (e.g., as summarised data).
Social media
General
I am present on social media (currently Facebook, Twitter and Instagram) based on my legitimate interest. If you contact or interact with me via social media platforms, I and the respective social media platform are jointly responsible for the processing of your data and enter into a so-called joint controller agreement. The legal basis is my legitimate interest, your consent or, in some cases, the initiation of a contractual performance, if any.
Links
We refer to my offered social media presence with links. Unlike social media plugins, links do not lead to the social media platform learning about your visit when you access my site. However, like any link, they do lead to your data being processed by the social media platform at the latest when you click on the link. As a rule, the social media platform stores cookies on your device or also your usage behaviour in your account, especially if you are logged in yourself. The social media platform may use your data to analyse your usage behaviour and use it for (interest-based) advertising. This may result in advertising being displayed to you inside and outside the social media platform.
Cookies
Why do I have a cookie policy?
My Cookie Policy is in compliance with the UK's Privacy and Electronic Communications Regulations (“PECR”) and the EU's Privacy and Electronic Communications Directive (“PECD”). In accordance with these laws, I must inform you about the cookies we use and obtain your consent when we use certain types of cookies, namely functional, performance, analytical and advertising cookies. For further information please refer to my Cookie Policy. The legal basis for the use of cookies is your consent as well as our legitimate interest.
Cookie consent
My website uses the cookie consent tool to obtain your consent to store cookies and to document this consent. When you visit my website, the following personal data is transferred to us: i) your consent(s) or withdrawal of your consent(s); ii) your IP address; iii) information about your browser; iv) information about your device; v) time of your visit to my website. The basis for the processing is our legitimate interest and your consent.
Data collection and processing
Log files
Each time you visit my website, a number of general data and information are transmitted - even if you use my website for information purposes only. I only collect the general data and information that your browser sends to the server of my website. This data and information is collected if it is technically necessary to display my website to you and which serve the stability, security and danger prevention in case of attacks on my website, such as:
- IP address
- Date and time of an access to the website
- Type and version of the browser used
- Operating system used and its interface
- the website from which an accessing system arrives at my website (so-called referrer)
- Sub-websites that are accessed via an accessing system on my website,
- Internet service provider of the accessing system.
This data is deleted after the storage is no longer necessary for error analysis or danger prevention. The legal basis for this data processing is my legitimate interest. When evaluating this general data and information, I do not draw any conclusions about you as a data subject.
Content management system
We use the content management system (CMS) from Google Blogger (Google LLC) to publish and maintain the content and text created and edited on my website. This means that all content and text submitted to us by users for publication is transferred to Google. The legal basis for this processing is my legitimate interest.
Hosting
To provide my website, we also use the services of Google Blogger which processes the above data and all data to be processed in connection with the operation of my website on my behalf. The legal basis for the data processing is our legitimate interest in providing my website.
Data from third party sources
We may receive data about you from third-party sources, such as social networks, our affiliate partners and other third parties. We may use this data to better analyse your user behaviour, to provide you with relevant marketing information and services, and to prevent and combat fraud. For further information please refer to my Cookie Policy.
Contact
If you contact me, your transmitted Personal Data ( typically your email address, name, the content of your message and IP address) will be automatically stored in order to process the request or to respond to you. The data processing for the purpose of contacting me is based on your voluntarily given consent or the initiation of a contractual service.
Leave a reply
When users leave comments on my articles or posts, their IP addresses are stored for 7 days on the basis of my legitimate interests. This is done by Google Blogger for our security in case someone leaves unlawful content in comments and posts (insults, prohibited political propaganda, etc.). Further, in your comment, you may be able to display certain profile information, share certain details, engage with others, exchange knowledge and insights, post and view relevant content. You have choices about the information on your comment. Please do not post or add personal data to your comment that you would not want to be available. The legal basis for the processing is your consent and for the storage is my legitimate interest.
Administration and financial accounting
We process data in the context of administrative tasks as well as the organisation of our operations and compliance with legal obligations, such as archiving. In this context, we process the same data that we process in the course of providing my services. The processing bases are our legal obligations and our legitimate interest.
Cooperation with processors
We use content or service offerings from third-party providers based on my legitimate interests to integrate their content and services on my website. This usually requires that the third-party provider obtains knowledge of your IP address so that the content and services can be displayed on your device.We integrate Google Fonts by Google LLC, to enable the display of fonts, a connection to Google’s server is established when our website is accessed. This enables Google to determine which website sent the request and to which IP address the display of the font is to be transmitted. The integration is based on my legitimate interest. We also use Google's reCAPTCHA from Google LLC to check whether data input is made by a human being or by an automated program. For this purpose, reCAPTCHA analyses the behaviour of the website visitor on the basis of various characteristics. This analysis begins automatically as soon as the website visitor enters the website. The legal basis for using reCAPTCHA is our legitimate interest.
Your rights and privileges
Privacy rights
You may exercise the following rights:
- Right to information
- Right to rectification
- Right to object to processing
- Right to deletion
- Right to data portability
- Right to object
- Right to withdraw consent
- Right to complain to a supervisory authority
- Right not to be subject to a decision based solely on automated processing
If you have any questions, please contact us.
Update your data
If you believe that the information I hold about you is incorrect, or if you wish to correct or delete it, or object to the processing of your data, please contact me.
Withdrawal of your consent
You can revoke granted consents at any time by contacting me.
Access request
If you wish to make a request for access to your data, please contact me. I will respond to requests for access and correction as soon as possible. If I am unable to respond to your request within thirty (30) days, I will let you know why and when I will be able to respond to your request. If I am unable to provide you with personal information or make a correction you have requested, I will tell you why.
Complaint to a supervisory authority
The Information Commissioner's Office (ICO) is the relevant authority in the UK. The ICO is located at Wycliffe House, Water Ln, Wilmslow SK9 5AF, UK (www.ico.org.uk). If you believe that the processing of your Personal Data is not lawful, you can lodge a complaint with a data protection supervisory authority. We would, however, appreciate the chance to deal with your concerns before you approach the ICO or any other supervisory authority.
Changes
I may update this Privacy Policy from time to time. If I make changes or we materially change our use of your personal information, I will revise this Privacy Policy accordingly.
Questions?
If you have any questions about the processing of your personal data, please contact me.
Effective date
This Privacy Policy was last updated on Wednesday, 4th October, 2023.