How do we collect and use (process) personal information about you?
We collect personal information about you when you provide it to us, such as through your use of our https://callitamber.com/ website and its features, when you contact us directly by email, phone, in writing, or via social media, when you order services, when you use any of our other websites or applications or any other means by which you provide personal information to us. Where permitted or authorised by law, we may also receive information about you from other sources, if so allowed by law and if such is necessary for the functioning of Studio Alp website.
What type of personal information we collect or obtain about you?
The type of information we collect about you may include information such as:
- your name;
- your email address;
- your address;
- your phone number;
- information about your computer (e.g. your IP address and browser type);
- information about how you use our callitamber.com website (e.g. which pages you have viewed, the time you viewed them and what you clicked on); and
- information about your mobile device (such as your geographical location).
We may also obtain personal information about you from certain publicly accessible sources, including (but not limited to) the electoral register, online customer databases, business directories, media publications, social media, websites and other publicly accessible sources.
- you already have the information;
- providing you with the information would prove impossible or would involve a disproportionate effort;
- we are under an EU or EU member state law obligation to obtain or disclose the information which provides appropriate measures to protect your legitimate interests; or
- we are obliged to keep the information confidential as a result of an obligation of professional secrecy regulated by EU or EU member state law.
- if we intend to use your personal information to communicate with you, at the point when we first communicate with you;
- if we envisage that we will disclose your personal information to a third party, when we disclose your personal information to that third party (at the latest); and
- in any other circumstances, within a reasonable period after obtaining your personal information (and in any event within one month at the latest), taking into account the specific circumstances in which we use your personal information.
How we use your personal information
We may use your personal information for one or more of the following purposes:
- Administering, running and improving our DataFund platform or website and business, including personalising our website experience for you. This is necessary for our legitimate interest of better understanding our other customers’ and potential customers’ preferences and tailoring our website, products and services to their needs and preferences.
- Communicating directly with you in relation to updates to our callitamber.com website, your purchase(s) of our services, and in response to enquiries we receive from you. This will be necessary either to update you from time to time about changes to our website, to perform a contract which we have entered into with you (or to take steps, at your request, to enter into a contract with you) or for our legitimate interest of satisfying and confirming your requirements in order to provide you with our products or services and to answer questions we receive from you.
- Protecting our business and our business interests, including for the purposes of credit and background checks, fraud prevention and debt recovery. This is necessary for our legitimate interests of preventing criminal activity such as fraud or money laundering, for ensuring that our website and services are not misused and protecting our business. We will only carry out such checks to the extent that we are permitted or authorised by law to do so.
- Communicating with our business advisors and legal representatives. This is necessary for our legitimate interests of obtaining legal or professional business advice, and we will only share your personal information where it is necessary to do so, to the minimum extent necessary and on an anonymised basis wherever possible.
- Sharing your personal information with third parties which are either related to or associated with us in relation to our provision of services to you such as our business partners, affiliates, associates, suppliers, independent contractors, email provider and IT service providers. This will be necessary either to perform a contract which we have entered into with you (or to take steps, at your request, to enter into a contract with you), for our legitimate interest of running and managing our business effectively, for compliance with a legal obligation to which we are subject, or for our own direct marketing purposes. Where we share your personal information, we will do so strictly on a need-to-know basis, subject to appropriate confidentiality restrictions, on an anonymised basis as far as possible and only to the extent strictly necessary for any of these purposes.
- Enforcing our legal rights. This is necessary for our legitimate interest of protecting our business and enforcing our contractual and other legal rights.
- Ensuring physical, network and information security and integrity. This is necessary for our legitimate interest of ensuring that our IT systems and networks are secure and uncompromised, including, for example, backup and archiving, preventing malware, viruses, bugs or other harmful code, preventing unauthorised access to our systems, and any form of attack on, or damage to, our IT systems and networks.
- In connection with disclosure requests and in the case of a business or share sale or sale or purchase of a business and/or assets, whether actual or potential. This is necessary for our legitimate interests of selling and/or ensuring and promoting the success of our business.
- For statistical and research purposes. We will anonymize your data and use them for our legitimate interests of processing personal information for research purposes, including market research, better understanding our respective customers, and tailoring our respective products and services to their needs.
- Indicating possible criminal acts or threats to public security to a competent authority. This is necessary for our legitimate interest of promoting the success of our business, preventing crime, for compliance with a legal obligation to which we are subject, in the general public interest or for the legitimate interests of governmental bodies and competent authorities that prevent crime.
- In connection with any legal or potential legal dispute or proceedings. This is necessary for our legitimate interest of promoting and ensuring the success of our business, resolving disputes and making such disclosures as are required by law or which we consider, acting reasonably, are required by law.
We may also collect or process your personal information for the following purposes:
- Complying with laws, regulations and other legal requirements. We may need to use and process your personal information in order to comply with legal obligations to which we are subject. For example, we may require your personal information pursuant to a statutory obligation to conduct anti-money-laundering checks or to disclose your information to a court following receipt of a court order or subpoena. We may also need your personal information to comply with ongoing legal obligations, such as tax laws and regulations to which we are subject.
Data storage and retention
Studio Alp will store your information for no longer than necessary, taking into account the following:
- the purpose(s) for which we are processing your personal information, such as whether it is necessary to continue to store that information in order to continue to perform our obligations under a contract with you or for our legitimate interests;
- whether we have any legal obligation to continue to process your information, such as any record-keeping obligations imposed by applicable law; and
- whether we have any legal basis to continue to process your personal information, such as your consent.
For more information on where and how long your personal data is stored, and for more information on your rights of erasure and portability, please contact DataFund at firstname.lastname@example.org.
How we secure your personal information
We take appropriate technical and organisational measures to secure your personal information and to protect it against unauthorised or unlawful use or processing as well as against the accidental loss or destruction of, or damage to, your personal information, including:
- only sharing and providing access to your personal information to the minimum extent necessary, subject to confidentiality restrictions where appropriate, and on an anonymised basis wherever possible;
- training our employees about the importance of confidentiality and maintaining the privacy and security of your information;
- commiting to taking appropriate disciplinary measures to enforce our employees’ privacy responsibilities;
- updating and testing our security technology on an ongoing basis;
- using secure servers to store your personal information;
- requiring proof of identity from any individual who requests access to personal information; and
- using Secure Sockets Layer (SSL) software or other similar encryption technologies to encrypt any payment transactions you make on or via our website;
Transmission of information (including personal information) over the internet is not entirely secure, and if you submit any information to us over the internet (whether by email, via our callitamber.com website or any other means), you do so entirely at your own risk. We cannot be responsible for any costs, expenses, loss of profits, harm to reputation, damages, liabilities or any other form of loss or damage suffered by you as a result of your transmission of information to us by such means.
Most of the cookies we use are so-called “session cookies.” They are automatically deleted after your visit. Other cookies remain in your device’s memory until you delete them. These cookies make it possible to recognize your browser when you next visit the site.
Server log files
The website provider automatically collects and stores information that your browser automatically transmits to us in “server log files”. These are:
- IP address / hostname of the requesting device
- date and time of the request
- type of the request (read, write, delete)
- communication protocol (http, ftp, etc.)
- URL of the requested resource (website, file, etc.)
- status code of the request response (success, failure, etc.)
- type, version and user-agent of the web browser used
- operating system on the requesting device
These data will not be combined with data from other sources.
The basis for data processing is Art. 6 (1) (b) GDPR, which allows the processing of data to fulfill a contract or for measures preliminary to a contract.
Additional basis is Art. 6 (1) (f) GDPR. Callitamber.com as a website operator has the legitimate interest to protect his offers against misuse and unauthorized access. These log files are only accessible to system administrators and privileged programmers.
Share content via plugins (Facebook, Google+1, Twitter, etc.)
The content on our pages can be shared on other social networks like Facebook, Twitter, or Google+. This page uses the eRecht24 Safe Sharing Tool. This tool establishes direct contact between the networks and users only after users click on one of these buttons.
This tool does not automatically transfer user data to the operators of these platforms. If users are logged into one or more of the social networks, the Like, +1, and Share buttons for Facebook, Google+1, Twitter, etc. will display an information window in which the user can edit the text before it is sent.
Our users can share the content of this page on social networks without their providers creating profiles of users’ surfing behavior.
Analytics and advertising
This website uses Google Analytics, a web analytics service. It is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses so-called “cookies”. These are text files that are stored on your computer and that allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.
Google Analytics cookies are stored based on Art. 6 (1) (f) GDPR. DataFund as the website operator has a legitimate interest in analyzing user behavior to optimize both its website and its advertising.
You can prevent these cookies being stored by selecting the appropriate settings in your browser. However, we wish to point out that doing so may mean you will not be able to enjoy the full functionality of this website. You can also prevent the data generated by cookies about your use of the website (incl. your IP address) from being passed to Google, and the processing of these data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en
Objecting to the collection of data
You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to this site: Disable Google Analytics
Outsourced data processing
We have entered into an agreement with Google for the outsourcing of our data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
Demographic data collection by Google Analytics
This website uses Google Analytics’ demographic features. This allows reports to be generated containing statements about the age, gender, and interests of site visitors. This data comes from interest-based advertising from Google and third-party visitor data. This collected data cannot be attributed to any specific individual person. You can disable this feature at any time by adjusting the ads settings in your Google account or you can forbid the collection of your data by Google Analytics as described in the section “Refusal of data collection”.
Google Analytics Remarketing
Our websites use the features of Google Analytics Remarketing combined with the cross-device capabilities of Google AdWords and DoubleClick. This service is provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.
This feature makes it possible to link target audiences for promotional marketing created with Google Analytics Remarketing to the cross-device capabilities of Google AdWords and Google DoubleClick. This allows advertising to be displayed based on your personal interests, identified based on your previous usage and surfing behavior on one device (e.g. your mobile phone), on other devices (such as a tablet or computer).
Once you have given your consent, Google will associate your web and app browsing history with your Google Account for this purpose. That way, any device that signs in to your Google Account can use the same personalized promotional messaging.
To support this feature, Google Analytics collects Google-authenticated IDs of users that are temporarily linked to our Google Analytics data to define and create audiences for cross-device ad promotion.
You can permanently opt out of cross-device remarketing/targeting by turning off personalized advertising in your Google Account; follow this link: https://www.google.com/settings/ads/onweb/ .
The aggregation of the data collected in your Google Account data is based solely on your consent, which you may give or withdraw from Google per Art. 6 (1) (a) GDPR. For data collection operations not merged into your Google Account (for example, because you do not have a Google Account or have objected to the merge), the collection of data is based on Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in analyzing anonymous user behavior for promotional purposes.
Google AdWords and Google Conversion Tracking
This website uses Google AdWords. AdWords is an online advertising program from Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, United States (“Google”).
As part of Google AdWords, we use so-called conversion tracking. When you click on an ad served by Google, a conversion tracking cookie is set. Cookies are small text files that your internet browser stores on your computer. These cookies expire after 30 days and are not used for personal identification of the user. Should the user visit certain pages of the website and the cookie has not yet expired, Google and the website can tell that the user clicked on the ad and proceeded to that page.
Each Google AdWords advertiser has a different cookie. Thus, cookies cannot be tracked using the website of an AdWords advertiser. The information obtained using the conversion cookie is used to create conversion statistics for the AdWords advertisers who have opted for conversion tracking. Customers are told the total number of users who clicked on their ad and were redirected to a conversion tracking tag page. However, advertisers do not obtain any information that can be used to personally identify users. If you do not want to participate in tracking, you can opt-out of this by easily disabling the Google Conversion Tracking cookie by changing your browser settings. In doing so, you will not be included in the conversion tracking statistics.
Conversion cookies are stored based on Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in analyzing user behavior to optimize both its website and its advertising.
We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on our websites. This service is provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (“Google”).
reCAPTCHA is used to check whether the data entered on our website (such as on a contact form) has been entered by a human or by an automated program. To do this, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis starts automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, how long the visitor has been on the website, or mouse movements made by the user). The data collected during the analysis will be forwarded to Google.
The reCAPTCHA analyses take place completely in the background. Website visitors are not advised that such an analysis is taking place.
Data processing is based on Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in protecting its site from abusive automated crawling and spam.
Hotjar web analytics:
This website uses Hotjar web analytics service to improve the user experience on our website (http://www.hotjar.com, 3 Lyons Range, 20 Bisazza Street, Sliema SLM 1640, Malta, Europe). Hotjar may record mouse clicks, mouse movements and scrolling activity where we use this information to improve user experience. Hotjar collects information regarding pages visited, actions which are taken, country, device used, operating system, and browser used. Hotjar does not collect personally identifiable information that you do not voluntarily enter in this website. Hotjar does not track your browsing habits across web sites which do not use Hotjar services. You can find out more about Hotjar data processing here: https://www.hotjar.com/privacy.
If you do not want to be tracked by Hotjar on websites, you can turn it off with a “do not track” header. Hotjar does not collect form submissions or any personal information. You can find information about this on the following website https://www.hotjar.com/opt-out.
Hotjar data processing is based on Art. 6 (1) (f) GDPR. DataFund as the website operator has a legitimate interest in analyzing user behavior to optimize both its website and its advertising.
If you subscribe to our newsletter, you submit the above personal information and give us the right to contact you via email. We use the data stored in the registration for the newsletter exclusively for our newsletter and not for any other purposes.
If you unsubscribe from the newsletter we delete all data that was saved with the registration for the newsletter. You can find the link to unsubscribe at the bottom of each newsletter.
We use MailChimp to send newsletters, and we use MailChimp services to record newsletter signup on our website.
General Information about MailChimp
When you sign up for our newsletter on our website, the data entered will be stored by MailChimp.
Deletion of your Data
You can withdraw your consent to receive our newsletter at any time by clicking the link at the bottom the email. If you unsubscribe by clicking the link, your data will be deleted from MailChimp.
When you receive a newsletter via MailChimp, information such as IP address, browser type and e-mail program are stored to give us information about the performance of our newsletter. MailChimp can use the images embedded in the HTML emails called “web beacons” (see https://kb.mailchimp.com/reports/about-open-tracking for details); MailChimp can tell whether the email arrived, whether it was opened, and whether links in it have been clicked. All this information is stored on the servers of MailChimp, not on this website.
MailChimp Order Data Processing Contract
We have a contract with MailChimp for ‘Data Processing Addendum’. This agreement secures your personal information and ensures that MailChimp adheres to applicable privacy policies and does not share your personal information with third parties.
More information about this contract can be found at https://mailchimp.com/legal/forms/data-processing-agreement.
Plugins and tools
Our website uses features provided by the Vimeo video portal. This service is provided by Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.
If you visit one of our pages featuring a Vimeo plugin, a connection to the Vimeo servers is established. Here the Vimeo server is informed about which of our pages you have visited. In addition, Vimeo will receive your IP address. This also applies if you are not logged in to Vimeo when you visit our website or do not have a Vimeo account. The information is transmitted to a Vimeo server in the US, where it is stored.
If you are logged in to your Vimeo account, Vimeo allows you to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your Vimeo account.
Our website uses plugins from YouTube, which is operated by Google. The operator of the pages is YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
If you visit one of our pages featuring a YouTube plugin, a connection to the YouTube servers is established. Here the YouTube server is informed about which of our pages you have visited.
If you’re logged in to your YouTube account, YouTube allows you to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account.
YouTube is used to help make our website appealing. This constitutes a legitmate interest pursuant to Art. 6 (1) (f) GDPR.
Further information about handling user data, can be found in the data protection declaration of YouTube under https://www.google.de/intl/en/policies/privacy.
For uniform representation of fonts, this page uses web fonts provided by Google. When you open a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly.
When you call up a page of our website that contains a social plugin, your browser makes a direct connection with Google servers. Google thus becomes aware that our web page was accessed via your IP address. The use of Google Web fonts is done in the interest of a uniform and attractive presentation of our website. This constitutes a legitimate interest pursuant to Art. 6 (1) (f) GDPR.
If your browser does not support web fonts, a standard font is used by your computer.
This site uses the Google Maps map service via an API. It is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
To use Google Maps, it is necessary to save your IP address. This information is generally transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer.
The use of Google Maps is in the interest of making our website appealing and to facilitate the location of places specified by us on the website. This constitutes a justified interest pursuant to Art. 6 (1) (f) DSGVO.
Further information about handling user data, can be found in the data protection declaration of Google at https://www.google.de/intl/en/policies/privacy/.
Do not track
“Do Not Track” is a privacy preference that users can set in their web browsers. When a user turns on a Do Not Track signal in their browser, the browser sends a message to websites requesting that they do not track the user. For information about Do Not Track, please visit www.allaboutdnt.org
At this time, we do not respond to Do Not Track browser settings or signals. In addition, we may use other technology that is standard to the internet, such as pixel tags, web beacons, and other similar technologies, to track visitors to the website, or one of the affiliated pages. Those tools may be used by us and by third parties to collect information about you and your internet activity, even if you have turned on the Do Not Track signal.
Transfers of your personal information to other countries and safeguards used
We don’t intend to transfer your data outside the European Economic Area but it may be necessary for us to do so from time to time. Where we transfer your personal information outside the European Economic Area, the country to which it is transferred will either be subject to an adequacy decision by the European Commission, or if not (or if we transfer your personal information to an international organisation), we will ensure that the transfer takes place on the basis of one or more of the following safeguards:
- data protection policies adhered to by the data controller and other companies and entities within our corporate group from time to time, which comply with applicable laws, known as “binding corporate rules” or “BCRs”;
- standard data protection clauses adopted by the European Commission or adopted by the Slovenian Information Commissioner (Informacijski pooblaščenec) and approved by the European Commission in accordance with relevant law;
- a code or codes of conduct produced by an association or other body approved by the Slovenian Information Commissioner (Informacijski pooblaščenec);
- an approved certification mechanism (such as the EU-US Privacy Shield); or
- where authorised by the Information Commissioner, contractual clauses between the data controller or processor and the data controller, processor or recipient of the personal information in the third country or international organisation.
Your rights in relation to your personal information
You have the following rights in relation to your personal information, which you can exercise by an email to email@example.com.
- to request access to your personal information and information related to our use and processing of your personal information;
- to request the correction or deletion of your personal information;
- to request that we restrict our use of your personal information;
- to receive personal information which you have provided to us in a structured, commonly used and machine-readable format (e.g. an Excel spreadsheet) and the right to have that personal information transferred to another data controller (including a third party data controller);
- to object to the processing of your personal information for certain purposes (for further information, see the section below entitled ‘Your right to object to the processing of your personal information for certain purposes’); and
- to withdraw your consent to our use of your personal information at any time where we rely on your consent to use or process that personal information. If you withdraw your consent, this will not affect the lawfulness of our use and processing of your personal information on the basis of your consent before the point in time when you withdraw your consent.
If there has been a breach of data protection legislation, you also have the right to lodge a complaint with a supervisory authority, which, for the purposes of Slovenia, the Information Commissioner, the contact details of which are available here: https://www.ip-rs.si/kazalo-kontakt-iskalnik/kontakt/
For further information about your rights in relation to your personal information, including certain limitations which apply to some of those rights, please see Articles 12 to 23 of the General Data Protection Regulation (GDPR), which is available here:
Where you request access to personal information, we are required by law to use reasonable means to verify your identity before doing so. In order for us to verify your identity, we require you to provide us with an original or certified copy of a document from each of the following two categories of documents:
- Category One: a full current signed Slovenian or overseas passport, a full current Slovenian or EU photocard driving licence or a national identity card.
- Category Two: a copy of your bank statement, utility bill (gas, electric, water, landline phone), TV licence renewal statement or council tax bill with your address, dated no earlier than three months before the date when you request access to your personal information.
Where you provide a certified copy of these documents, these must be certified by an appropriate professional such as a notary public.
We will not be able to provide you with access to your personal information until you provide us with your proof of identity as set out above and we have been able to successfully verify your identity.
Your right to object to the processing of your personal information for certain purposes
You have the following rights in relation to your personal information, which you may exercise in the same way as you may exercise the rights in the preceding section (Your rights in relation to your personal information):
- to object to us using or processing your personal information where we use or process it in order to carry out a task in the public interest, where we do so in the exercise of official authority or for our legitimate interests, including ‘profiling’ (i.e. predicting your behaviour based on your personal information) based on any of these purposes; and
- to object to us processing your personal information for direct marketing purposes (including any automated evaluation we make about you or any of your characteristics as a person, to the extent that it is related to such direct marketing).
You may also exercise your right to object to us using or processing your personal information for direct marketing purposes by:
- clicking the unsubscribe link contained at the bottom of any marketing email we send to you and following the instructions which appear in your browser following your clicking on that link; or
- sending an email to firstname.lastname@example.org. asking that we stop sending you marketing communications or by including the words “OPT OUT”.
Whenever you object to direct marketing from us by a different communication method to that of the marketing communications you have received from us, you must provide us with your name and sufficient information to enable us to identify you in relation to the communications you have received (for example, if you have received text messages from us and you wish to unsubscribe by email, we may need you to provide us with your phone number in that email).
Consequences of not providing your personal information to us
Where you wish to purchase goods or services from us, we require your personal information in order to enter into a contract with you. We may also require your personal information pursuant to a statutory obligation (in order to be able to send you an invoice for products and services you wish to order from us, for example).
If you do not provide your personal information, we will not be able to enter into a contract with you or to provide you with those products or services.
Where we intend to use your personal information for a new purpose other than the purpose(s) for which we originally collected it, we will provide you with information about that purpose and any other relevant information before we use your personal information for that new purpose and obtain your consent if required.
Changes to your information
Please inform us of any changes to any information (including personal information) which we hold about you so we can keep the information we hold about you accurate and up-to-date.
The accuracy of your information is important to us. We’re working on ways to make it easier for you to review and correct the information that we hold about you.
We offer a ‘My details’ page (also known as Dashboard), where you can update your personal information at any time, and change your marketing preferences.
You have the right to ask for a copy of the information DataFund hold about you (we may charge for information requests to cover our costs).
We do not knowingly contact or collect personal information from children under the age of 13. The website is not intended to solicit information of any kind from children under the age of 13.
It is possible that we may receive information pertaining to children under the age of 13 by fraud or deception. If we are notified of this, as soon as we verify the information, we will immediately obtain the appropriate parental consent to use that information or, if we are unable to obtain such parental consent, we will delete the information from our servers. If you would like to notify us of our receipt of information about children under the age of 13, please do so by sending an email to email@example.com.
Our use of automated decision-making, including profiling
We may analyse your personal information to create a profile of your interests and preferences so that we can contact you with information relevant to you. We may make use of additional information about you when it is available from external sources to help us do this effectively. We may also use your personal information to detect and reduce fraud and credit risk.
Questions, concerns or complaints
Please contact Studio Alp by sending an email to firstname.lastname@example.org .