Data Protection Notification for data subject category "account holders"

Notification drafted on May 24, 2018

Data Categories Covered

Our 4 processes engage 12 data categories: ip address; nation; browser name; time; session cookies; salutation; name; email address; identifier local; password; address; and telephone.

We Process Your Data in 4 Different Ways

Process: Web Site Analytics and All Other Processing Common to All Web Site Users

Dataset Process Legal Basis Purposes
gdpr360 weblogs web site analytics and all other processing common to all web site users legitimate interests web server security; visitor compliance with intellectual property and criminal law; and web monitoring.

Data Categories Used in This Process

Our process engages 4 data categories: ip address; nation; browser name; and time.

Storage

We store your data in Germany (DE), and United Kingdom (UK).

Data Retention Criteria

We retain your data for 365 days.

Legal Bases for Processing

Our processing legal basis is legitimate interests.

Legitimate Interests

Our legitimate interests justifications are: webserver security; visitor compliance; and web site monitoring.

Sources from Which We Receive Your Data

Our data source is yourself.

Categories of Recipients of Your Data

law enforcement

Process: Web Services Processing for Customers/Prospects

Dataset Process Legal Basis Purposes
gdpr360 weblogs web services processing for customers/prospects legitimate interests managing web site accounts.

Data Categories Used in This Process

Our process engages 6 data categories: session cookies; salutation; name; email address; identifier local; and password.

Storage

We store your data in Germany (DE), and United Kingdom (UK).

Data Retention Criteria

We retain your account data until 7 years after we cease to deliver services to you or invoicing to you.

Legal Bases for Processing

Our processing legal basis is legitimate interests.

Legitimate Interests

Our legitimate interests justification is managing website accounts.

Sources from Which We Receive Your Data

Our data source is yourself.

Categories of Recipients of Your Data

Yourself

Process: Business Communications

Dataset Process Legal Basis Purposes
All users Business communications legitimate interests staying in touch with business contacts.

Data Categories Used in This Process

Our process engages 4 data categories: name; address; telephone; and email address.

Storage

We store your data in Germany (DE), and United Kingdom (UK).

Data Retention Criteria

We retain your data until 7 years after we cease to deliver services to you or invoicing to you, or until you have notified us you have left the company.

Legal Bases for Processing

Our processing legal basis is legitimate interests.

Legitimate Interests

Our legitimate interests justification is business communications.

Sources from Which We Receive Your Data

Our data source is yourself.

Categories of Recipients of Your Data

Yourself

Process: General Cookie Management Processing

Dataset Process Legal Basis Purposes
All users General cookie management processing legitimate interests managing web site accounts.

Data Categories Used in This Process

Our process engages 1 data category: session cookies.

Storage

We store your data in Germany (DE), and United Kingdom (UK).

Data Retention Criteria

We retain session cookies until the end of your browser session.

Legal Bases for Processing

Our processing legal basis is legitimate interests.

Legitimate Interests

Our legitimate interests justification is managing website accounts.

Sources from Which We Receive Your Data

Our data source is yourself.

Categories of Recipients of Your Data

none

Your Rights

You have qualified rights to access, rectify, and erase your personal data; and to restrict or object to processing; and to make your data portable.

Supervisory Authority

You have the right to complain to a Supervisory Authority, and in the UK that is the ICO.

Contact Details

Our name/contact details are GDPR360 Limited of GW House, 41 Mayfield Way, Cambourne, CB23 5JA, UK, info@gdpr360.com.