We are currently working towards making this website GDPR compliant. In the meantime, you should know this about our current information handling:
- We do not share your information with anyone- EVER. Spam is not cool.
- We use third parties for information processing like ConvertKit for collecting email addressing and emailing you our super, awesome newsletters. We use Google Analytics to track visitors to this page so that I know if people are reading what I write, or if I’m just talking to myself over here. 😉 We probably also use some other kinds of techie stuff like cookies or pixels due to affiliates or ad companies we work with to keep the lights on over here. I’m looking into this so that I can give you an exact description of what we currently use. I will update as soon as I have this knowledge to share with you.
- If you leave a comment on my website it will show your name.
- I currently do not sell anything via this website. Everything on this site is yours to use for your personal enjoyment for FREE! (And just because there are some nasty people out there in InternetLand I have to say, do not copy or redistribute anything you find here without my expressed consent and written permission. You can contact me via my contact page if you want to work on a project together.)
In future this page will include:
Where you collect the data, how much you collect, what you do with it, how you process it, who else you tell about it, where you store it, how long you store it, what your legal basis for collecting it is and what controls someone can take over it.
The GDPR says that the information you provide to people about how you process their personal data must be:
- concise, transparent, intelligible and easily accessible;
- written in clear and plain language, particularly if addressed to a child; and
- free of charge.
If you need a more explicit explanation of the categories in the table above, Article 13 Paragraphs one and two elaborate on what must be disclosed to a data subject at the point of collection:
(a) the identity and the contact details of the controller and, where applicable, of the controller’s representative;
(b) the contact details of the data protection officer, where applicable;
(c) the purposes of the processing for which the personal data are intended as well as the legal basis for the processing;
(d) where the processing is based on point (f) of Article 6(1), the legitimate interests pursued by the controller or by a third party;
(e) the recipients or categories of recipients of the personal data, if any;
(f) where applicable, the fact that the controller intends to transfer personal data to a third country or international organisation and the existence or absence of an adequacy decision by the Commission, or in the case of transfers referred to in Article 46 or 47, or the second subparagraph of Article 49(1), reference to the appropriate or suitable safeguards and the means by which to obtain a copy of them or where they have been made available.
Depending on the circumstances, Article 13 Paragraph 2 (a-f) states that controllers will also need to provide some of the following;
(a) the period for which the personal data will be stored, or if that is not possible, the criteria used to determine that period;
(b) the existence of the right to request from the controller access to and rectification or erasure of personal data or restriction of processing concerning the data subject or to object to processing as well as the right to data portability;
(c) where the processing is based on point (a) of Article 6(1) or point (a) of Article 9(2), the existence of the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal;
(d) the right to lodge a complaint with a supervisory authority;
(e) whether the provision of personal data is a statutory or contractual requirement, or a requirement necessary to enter into a contract, as well as whether the data subject is obliged to provide the personal data and of the possible consequences of failure to provide such data;
(f) the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
Get your free copy of my ebook!
Subscribe below and your free copy of MamaBear's Decluttering Guide & Workbook for Busy Mamas Who Need Change will be emailed to you right away! Good luck, mama!