Privacy Statement
for finershots.com
Who we are
This is the Privacy Statement for finershots.com. At finershots.com we are dedicated to protecting your data and privacy.
We recognise that your privacy is important. This document outlines the types of personal information we receive and collect when you use finershots.com, as well as some of the steps we take to safeguard information.
We recommend you carefully read this statement. In our processing we comply with the requirements of data protection and privacy legislation. That means, among other things, that:
- Our processing it lawful, fair and transparent, and we clearly state the purposes for which we process personal data. We do this by means of this privacy statement;
- We aim to limit our collection of personal data to only the personal data required for legitimate purposes and will not store personal data for longer than required for these legitimate purposes;
- We first request your explicit consent to process your personal data in cases requiring your consent;
- We take appropriate security measures to protect your personal data and also require this from parties that process personal data on our behalf;
- We respect your right to access your personal data or have it corrected or deleted, at your request;
- Processing is done with minimal data. We only gather and process the minimal amount of personal data required for any purpose;
- We will do our best to ensure the accuracy of data;
- We will do our best to ensure the integrity and confidentiality of data.
If you have any questions or want to know exactly what data we keep of you, please contact us.
Definitions
- “Personal data” refers to any information relating to an identified or identifiable natural person;
- “Processing” refers to any operation or set of operations which is performed on personal data or on sets of personal data;
- “Data subject”, “you/your” or “consumer”, refers to a natural person whose personal data is being processed;
- “Child/children” refers to a natural person(s) under 16 years of age;
- “We/us” refers tocom.
Purpose, Categories of Data and Retention Period
We may collect both personally identifiable information and non-personally identifiable information from you in a variety of ways, including but not limited to: when you visit our site, register with us, fill out a form, and in connection with other activities, services, features, or resources we make available on our site. The data we gather may include information you have provided with or information that is automatically collected about you. The data we collect about you is outlined below.
1. We use your data for the following purpose:
Contact – Through phone, mail, email and/or webforms
For this purpose, we use the following categories of data:
Name, Address and City
Email address
The basis on which we may process these data is:
Consent obtained
Retention period
We retain this data until the service is terminated.
2. We use your data for the following purpose:
Compiling and analysing statistics for website improvement.
For this purpose, we use following categories of data:
Visitor behaviour, Internet activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an Internet Web site, application, or advertisement
The basis on which we may process these data is:
Consent obtained.
Retention period
We retain this data upon termination of the service for the following number of months: 2
3. We use your data for the following purpose:
Security, the prevention of malicious activity and brute force attacks.
For this purpose, we use following categories of data:
The IP address of visitors, user ID of logged in users, and username of login attempts are conditionally logged to check for malicious activity and to protect the site from specific kinds of attacks. Examples of conditions when logging occurs include login attempts, log out requests, requests for suspicious URLs, changes to site content, and password updates.
The basis on which we may process these data is:
Protecting the vital interests of the data subject.
Retention period
We retain this data upon termination of the service for the following number of days: 60
You can always refuse to supply personally identifiable information and visit our site anonymously. However, it may prevent you from engaging in certain site-related activities.
Sharing With Other Parties
We do not share your Personal data with unknown entities. Personal data about you is in some cases provided to our trusted partners in order to provide you with the services we offer, make our site more secure, or to enhance your customer experience.
Processors
Name: A2 Hosting, Inc. PO. Box 2998, Ann Arbor, MI 48106
Country: United States
Purpose: Storage
Data: As laid out in the A2 Hosting Privacy Policy.
Third parties
Name: Google reCAPTCHA
Country: United States of America
Purpose: Website Security
Data: As laid out in the Google Privacy Policy.
Name: iThemes Security
Country: United States of America
Purpose: Website Security
Data: IP address of visitors, user ID of logged in users, and username of login attempts. See the Liquid Web Privacy Policy for more details.
We disclose personal information if we are required by law or by a court order, in response to a law enforcement agency, to the extent permitted under other provisions of law, to provide information, or for an investigation on a matter related to public safety.
Cookies
Our website uses cookies. For more information about cookies, please refer to our Cookie Policy. We have concluded a data processing agreement with Google. Google may not use the data for any other Google services. The inclusion of full IP addresses is blocked by us.
how we respond to do not track signals & global privacy control
Our website does not respond to and does not support the Do Not Track (DNT) header request field.
Security
We are committed to the security of personal data. We take appropriate security measures to limit abuse of and unauthorised access to personal data. This ensures that only the necessary persons have access to your data, that access to the data is protected, and that our security measures are regularly reviewed.
The security measures we use consist of:
- TLS / SSL
- Security software
- IP Anonymisation
Personally identifiable information and non-personally identifiable information collected by this site is stored on our host’s servers. That host is A2 Hosting, Inc. PO. Box 2998, Ann Arbor, MI 48106. A2 Hosting. For more information on how they use and store data please view their privacy policy.
third party websites
This privacy statement does not apply to third party websites connected by links on our website. We cannot guarantee that these third parties handle your personal data in a reliable or secure manner. We recommend you read the privacy statements of these websites prior to making use of these websites.
data protection, accessing and modifying your data
If you have any questions or want to review, modify or erase any personal data we hold on you, please contact us. Please make sure to always clearly state who you are, so that we can be certain that we do not modify or delete any data of the wrong person. We shall provide the requested information only upon receipt of a verifiable consumer request.
1. UK and European Economic Area citizens. You have the following rights with respect to your personal data:
- You have the right to know why your personal data is needed, what will happen to it, and how long it will be retained for;
- Right of access: You have the right to access your personal data that is known to us;
- Right to rectification: you have the right to supplement, correct, have deleted or blocked your personal data whenever you wish;
- If you give us your consent to process your data, you have the right to revoke that consent and to have your personal data deleted;
- Right to restriction of processing, meaning that where certain condition apply you have the right to restrict the processing of your personal data;
- Right to transfer your data: you have the right to request all your personal data from the controller and transfer it in its entirety to another controller;
- Right to object: you may object to the processing of your data. We comply with this, unless there are justified grounds for processing;
- Right to data portability, meaning you have the right to obtain your personal data in a machine readable format or if it is feasible, as a direct transfer from one processor to another.
- Right to object to automated processing, meaning you have the right to object to automated processing, including profiling, and not to be subject to a decision based solely on automated processing. This right you can exercise whenever there is an outcome of the profiling that produces legal effects concerning or significantly affecting you.
Please make sure to always clearly state who you are, so that we can be certain that we do not modify or delete any data of the wrong person.
2. Canadian citizens. You have the following rights with respect to your personal data:
- You may submit a request for access to the data we process about you.
- You may request an overview, in a commonly used format, of the data we process about you.
- You may request correction or deletion of the data if it is incorrect or not or no longer relevant. Where appropriate, the amended information shall be transmitted to third parties having access to the information in question.
- You have the right to withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice. You will be informed of the implications of such withdrawal.
- You have the right to address a challenge concerning non-compliance with PIPEDA to our organisation and, if the issue is not resolved, to the Office of the Privacy Commissioner of Canada.
- We shall give access to personal information in an alternative format to an individual with a sensory disability who has a right of access to personal information under PIPEDA and who requests that it be transmitted in the alternative format if (a) a version of the information already exists in that format; or (b) its conversion into that format is reasonable and necessary in order for the individual to be able to exercise rights.
3. US citizens. You have the following rights with respect to your personal data:
Right to know what personal information is being collected about you
- A consumer shall have the right to request that a business that collects personal information about the consumer disclose to the consumer the following:
- The categories of personal information it has collected about that consumer;
- The categories of sources from which the personal information is collected;
- The business or commercial purpose for collecting or selling personal information;
- The categories of third parties with whom the business shares personal information;
- The specific pieces of personal information it has collected about that consumer.
The right to know whether personal information is sold or disclosed and to whom
- A consumer shall have the right to request that a business that sells the consumer’s personal information, or that discloses it for a business purpose, disclose to that consumer:
- The categories of personal information that the business collected about the consumer;
- The categories of personal information that the business sold about the consumer and the categories of third parties to whom the personal information was sold, by category or categories of personal information for each third party to whom the personal information was sold;
- The categories of personal information that the business disclosed about the consumer for a business purpose.
The Right to equal service and price, even if you exercise your privacy rights
We shall not discriminate against a consumer because the consumer exercised any of the consumer’s privacy rights, including, but not limited to, by:
- Denying goods or services to the consumer;
- Charging different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties;
- Providing a different level or quality of goods or services to the consumer, if the consumer exercises the consumer’s privacy rights;
- Suggesting that the consumer will receive a different price or rate for goods or services or a different level or quality of goods or services. However, nothing prohibits us from charging a consumer a different price or rate, or from providing a different level or quality of goods or services to the consumer, if that difference is reasonably related to the value provided to the consumer by the consumer’s data.
The right to delete any personal information
- A consumer shall have the right to request that a business delete any personal information about the consumer which the business has collected from the consumer.
- A business that receives a verifiable request from a consumer to delete the consumer’s personal information pursuant to subdivision (a) of this section shall delete the consumer’s personal information from its records and direct any service providers to delete the consumer’s personal information from their records.
- A business or a service provider shall not be required to comply with a consumer’s request to delete the consumer’s personal information if it is necessary for the business or service provider to maintain the consumer’s personal information in order to:
- Complete the transaction for which the personal information was collected, provide a good or service requested by the consumer, or reasonably anticipated within the context of a business’s ongoing business relationship with the consumer, or otherwise perform a contract between the business and the consumer;
- Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity; or prosecute those responsible for that activity;
- Debug to identify and repair errors that impair existing intended functionality;
- (Exercise free speech, ensure the right of another consumer to exercise his or her right of free speech, or exercise another right provided for by law;
- Comply with the California Electronic Communications Privacy Act pursuant to Chapter 3.6 (commencing with Section 1546) of Title 12 of Part 2 of the Penal Code;
- Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the businesses’ deletion of the information is likely to render impossible or seriously impair the achievement of such research, if the consumer has provided informed consent;
- To enable solely internal uses that are reasonably aligned with the expectations of the consumer based on the consumer’s relationship with the business;
- Comply with a legal obligation;
- Otherwise use the consumer’s personal information, internally, in a lawful manner that is compatible with the context in which the consumer provided the information.
Submitting a complaint (UK)
If you are not satisfied with the way in which we handle (a complaint about) the processing of your personal data, you have the right to submit a complaint to the Information Commissioner’s Office:
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Selling and Disclosure of data to third parties
We have not sold consumers’ personal data in the preceding 12 months.
A list of the categories we have disclosed for a business purpose in the preceding 12 months:
- A first and last name
- Account name or alias
- An email address
- IP address
- Internet activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an Internet Web site, application, or advertisement
- Geolocation data
Children
Our website is not designed to attract children and it is not our intent to collect personal data from children under the age of consent in their country of residence. We therefore request that children under the age of consent do not submit any personal data to us.
Amendments to privacy statement
We reserve the right to make amendments to this privacy statement. It is recommended that you consult this privacy statement regularly in order to be aware of any changes. In addition, we will actively inform you wherever possible.
Agreeing to terms
If you do not agree to our privacy statement as posted here on this website, please do not consent to the setting of cookies and the collection and storage of your personally identifiable information.
Your explicit consent indicates acceptance of this privacy policy in its entirety.
Last updated: 10 April 2021.
