PRIVACY POLICY
OVERVIEW
As the operator of the website marcialanyon.co.uk, the protection of your personal data is a matter we take very seriously. We therefore exclusively collect and process your personal data on the basis of the applicable legal regulations EU-General Data Protection Regulation [“GDPR”], if applicable). Below, we will inform you about the most important aspects of data processing with regard to our website.
SECTION 1 – CONTACT
If you have any questions, you can contact us using the following contact details:
Email: sales@marcialanyon.com
Address:
Marcia Lanyon Ltd
PO BOX 74713,
London,
W8 9HY
If you send us enquiries by e-mail, the contact data you voluntarily provide there will be stored by us for the purpose of processing the enquiry. We will not pass this information on without your consent. The personal data entered by you in your e-mail will remain with us until you request us to delete the personal data, you revoke your consent or the purpose of data storage ceases to apply (e.g. after the request has been processed). Mandatory statutory provisions, in particular retention periods, remain unaffected.
SECTION 2 – DATA COLLECTION WHEN VISITING OUR WEBSITE
Server log files
When you visit our website, the provider collects information from the browser used on your device and automatically transmits it to the server on our website. This information is temporarily stored in so-called server log files.
The following information is stored:
- IP address
- Date and time of access
- Name and URL of the retrieved file
- Website from which access is made (referrer URL)
- Browser type/version used
- Operating system used
- Name of your access provider
- Amount of data sent in bytes
We will process the mentioned data for the following purposes:
- Ensuring a smooth connection of the website
- Ensuring comfortable use of the website
- Evaluation of system security and system stability
- For other administrative purposes
- The legal basis for the data processing is Art. 6 para. 1 lit. f) GDPR (legitimate interest). Our legitimate interest follows from the above-mentioned purposes of data processing.
The above mentioned personal data are not combined with other data sources.
Under no circumstances do we use this data for the purpose of drawing conclusions about your person.
Contact forms
Contact form submission data — IP address, user agent, name, email address, website, and message — is submitted to the Akismet service (also owned by Automattic) for the sole purpose of spam checking. The actual submission data is stored in the database of the site on which it was submitted and is emailed directly to the owner of the form (i.e. the site author who published the page on which the contact form resides). This email will include the submitter’s IP address, timestamp, name, email address, website, and message.
Both post and post meta data associated with a user’s contact form submission is synced. The IP address and user agent originally submitted with the comment are synced, as well, as they are stored in post meta.
SECTION 3 – COOKIES
Our website uses so-called cookies. Cookies are small text files that your browser automatically creates and stores on your terminal device.
We use cookies to make the use of our site more comfortable for you. Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your device until you delete them. These cookies enable us to recognize your browser on your next visit (so-called persistent cookies).
If you do not wish this, you can set your browser so that it informs you about the setting of cookies and you can decide in individual cases whether you allow the setting or not. You can also set up your browser in such a way that the storage of cookies is generally excluded.
However, deactivating cookies may limit the functionality of our website, so that some functions of our Internet offer may not be usable or may not be fully usable.
The processing of personal data by cookies as described below is required for the above-mentioned purposes in order to safeguard our legitimate interests pursuant to Art. 6 para. 1 lit. f) GDPR.
Mobile Themes
If a visitor declares a preference for viewing the mobile version of a site, a cookie (akm_mobile) is stored for 3.5 days to remember whether or not a visitor of the site wishes to view its mobile version.
SECTION 4 – WEB-ANALYSIS
In order to constantly improve and optimize our offer we make use of so-called tracking technologies. Personal data usually will not be collected or only after anonymisation or pseudonymisation. We use the following applications or tools.
- Google Analytics
- Google AdWords Conversion-Tracking
- Facebook-Pixels
The relationship with the web analytics provider Google is based on the EU-US data protection agreement “Privacy Shield.” US-based Google LLC is certified under the EU-US data protection agreement “Privacy Shield” and is committed to complying with EU privacy regulations. The data processing as described above is based on Art. 6 para. 1 lit. a) (Consent) and/or Art. 6 para. 1 lit. f) (legitimate interest) of the GDPR. Our legitimate interest consists in the improvement of our service and our website. Since the privacy of our users is important to us, the user data is anonymised or pseudonymised.
Google Analytics
On the basis of Art. 6 para. 1 lit. f) GDPR (legitimate interest), we use Google Analytics, a web analytics service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA. With the tracking measures used, we want to ensure a design that is tailored to the needs and the on-going optimization of our website. In addition, we use the tracking measures to statistically record the use of our website and to evaluate it for the purpose of optimizing our offerings.
Google uses cookies. Cookies are text files that are stored on your computer and allow for an analysis of how the website is being used. The information generated by the cookie about your use of the website (such as access time, location from which access was made, the frequency of your visits to our website and the IP address) are usually transferred to a Google server in the USA and stored there.
Google will use this information on our behalf to evaluate the use of our online service in order to compile reports on the activities within this online service and to provide us with other services related to website activity and internet usage. This information may also be transferred to third parties if required by law, or if third parties process this data on behalf of Google. Under no circumstances will your IP address be merged with any other data provided by Google.
We only use Google Analytics with IP anonymisation activated. This will result in your IP address being truncated by Google prior to transmission within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.
You can prevent the installation of cookies by setting the browser software accordingly. However, please note, that when doing so, it won’t be possible to fully use all features of the website.
You can also prevent the collection of data generated by the cookie about your use of the website (including the IP address), as well as the processing of this data by Google, by downloading and installing the browser plug-in found at the following link:
For more information about data usage by Google, settings and options to appeal visit: https://www.google.com/intl/de/policies/privacy/partners (“How Google uses data in relation to your use of websites or partner apps”) http://www.google.com/policies/technologies/ads (“Data use for advertising purposes”) and http://www.google.de/settings/ads (“Manage information that Google uses to show you advertising”).
We have a data processing agreement with Google.
Google AdWords Conversion Tracking
This website uses the online advertising program “Google AdWords” and as part of Google AdWords, the conversion tracking of Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). We use the Google AdWords service to bring awareness to our attractive offers through the help of advertising materials (so-called Google AdWords) on external websites. With the data obtained from these advertising campaigns, we can determine how successful each individual advertising campaign is. This helps us to pursue our goal of showing you advertisements that are of interest to you, making our website more interesting to you, and to achieve a fair calculation of advertising costs.
The conversion tracking cookie is set when a user clicks on a Google sponsored AdWords advertisement. Cookies are small text files that are stored on your computer system. These cookies usually lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, we (as well as Google) can recognize that the user clicked on the ad and was redirected to this page. Every Google AdWords customer receives a different cookie. Therefore, cookies cannot be tracked through AdWords advertisers’ websites. The information gathered using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. Customers are told the total number of users who clicked on their ad and were redirected to a conversion tracking tag page. However, they do not receive information that personally identifies users. If you do not want to participate in tracking, you can block this usage by disabling the Google Conversion Tracking cookie through your Internet browser under User Preferences. You will then not be included in the conversion tracking statistics. We use Google AdWords based on our legitimate interest in targeted advertising pursuant to Art. 6 para. 1 lit. f GDPR.
US-based Google LLC is certified under the EU-US data protection agreement “Privacy Shield” which ensures compliance with current EU data protection regulations.
For more information about Google’s privacy policy, visit the following Internet address: http://www.google.de/policies/privacy/
You can permanently deactivate ad specific cookies by adjusting your Browser’s software settings to block them or by downloading and installing the Browser Plug-in found at the following link: http://www.google.com/settings/ads/plugin?hl=de
Please note, that if you deactivate cookies, certain features of this site may not be usable or only usable to a limited extent.
Facebook Pixel
We use the so-called “Facebook Pixel” of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA, to build so-called “Custom Audiences.” This serves to optimize our advertising on Facebook’s social network, to only post relevant ads, as well as to measure to the success of our Facebook advertising campaigns. With Facebook Pixel, it is possible for Facebook to identify visitors of our website as the target audience for the display of advertisement on Facebook’s social network.
Through the use of Facebook Pixel on our website, a direct connection is made to the Facebook server when visiting our website. Your visit to our website and the pages you have viewed are transmitted to the Facebook server. In addition, information and parameters are transmitted that are required for the optimization of our advertisements, the increase in relevance as well as for measuring their success. In particular, this is information about so-called “conversion-events” (ie., whether a registration or a purchase has been completed).
For more information about the collection and use of data by Facebook, as well as about your rights in relation to this matter and ways to protect your privacy, please refer to Facebook’s privacy policy found at: https://www.facebook.com/about/privacy/.
SECTION 5 – SOCIAL NETWORKS
On the basis of Art. 6 para. 1 lit. f) GDPR (legitimate interest) we place social plug-ins for the following social networks on our website
In order to increase awareness of our company. The underlying commercial purpose is to be regarded as a legitimate interest within the context of the GDPR. The responsibility for data protection compliant services is to be guaranteed by their respective provider.
Facebook
Our website uses social media plug-ins from Facebook to make the user experience more personalized. For this we use the Facebook button. This is an offer from Facebook.
Facebook is a service of Facebook Inc., 1601 Willow Road, Menlo Park, CA 94025, USA.
When you visit a page of our website that contains such a plug-in, your browser connects directly to the Facebook servers. The content of the plug-in is transmitted by Facebook directly to your browser and integrated by the latter into the website.
By integrating the plug-in, Facebook receives the information that your Browser has accessed the corresponding page of our website, even if you don’t have a Facebook profile or are not currently logged in. This information (including your IP address) is transmitted by your browser directly to the Facebook servers and stored there.
If you are logged in as a member of Facebook, Facebook can assign the visit to your Facebook profile. When using plug-in functions (for example, pressing the “LIKE” button or leaving a comment), this information is also transmitted directly from your browser to Facebook and stored there. The information will also be published on your Facebook profile and displayed to your Facebook friends.
Facebook may use this information for the purpose of advertising, market research and tailor-made Facebook pages. For this purpose, Facebook creates usage, interest and relationship profiles, for example, to evaluate your use of our website with regard to the advertisements displayed on your Facebook, to inform other Facebook users about your activities on our website, and to further inform you about the use of Facebook related services.
To learn more about the purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as your rights in relation to this matter and setting options for the protection of your privacy, please refer to Facebook’s privacy policy:
https://www.facebook.com/about/privacy/
If you are a Facebook member and do not want Facebook to assign the data collected via our website to your Facebook profile, you must log out of Facebook before visiting our website.
Twitter
We use Twitter, a service of Twitter Inc., One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland for target audience based online advertising and conversion tracking. For this we have implemented a Twitter tag on our website. Through this tag, when you visit the website, a direct connection is made with Twitter’s servers and transmits that you have visited our site and whether you have made an inquiry or other action. Twitter assigns this information to your personal Twitter account. That way, we can target ads based on your recent page views and activities (remarketing). The data processed by Twitter does not allow us to identify you. This pseudonymous information will not be combined with other information about you. For more information about the collection and use of data by Twitter, as well as your related rights and ways to protect your privacy, please refer to the Twitter’s privacy policy at https://twitter.com/privacy?lang=de.
SECTION 6 – E-NEWSLETTER AND MAILING LIST
We run our email marketing through Mailchimp and take care to adhere to their Acceptable Use and Terms of Service policies. We may share subscriber contact data with that company but only in exceptional circumstances and to ensure smooth running of the service.
Subscribers can view and manage their data stored on this list by using the link in the footer of each email received from us.
We always endeavour to follow email marketing best practice and include unsubscribe links within every email.
You can read more about Mailchimp’s Privacy Policy here.
SECTION 7 – DATA SECURITY
For security reasons, we use SSL or TLS encryption during a visit to the website. You can identify an encrypted connection by noticing the address bar of the browser changing from “http: //” to “https: //” and by the lock icon appearing in your browser bar.
In order to check login activity and potentially block fraudulent attempts, the following information is used: attempting user’s IP address, attempting user’s email address/username (i.e. according to the value they were attempting to use during the login process), and all IP-related HTTP headers attached to the attempting user.
Failed login attempts (these include IP address and user agent) will be synced with Akismet. We also set a cookie (jpp_math_pass) for 1 day to remember if/when a user has successfully completed a math captcha to prove that they’re a real human.
For this reason, the synced data will include failed login attempts, which contain the user’s IP address, attempted username or email address, and user agent information.
SECTION 8 – THIRD COUNTRIES
Data transfer to third countries takes place, but only in compliance with the statutory admissibility requirements. If we do not have your consent, the transfer is not required for asserting, exercising or defending any legal claim, and no other exceptions apply, we will only transfer your data to a third country if there is an adequacy decision pursuant to Art. 45 EU-GDPR, or an appropriate safeguard pursuant to Art. 46- EU-GDPR.
One of these adequacy decisions is the so-called “Privacy Shield” for the USA. For transfers to Privacy Shield certified companies, the level of data protection is generally considered appropriate i.S.v. Art. 45 EU GDPR.
However, as a rule, we don’t rely on the Privacy Shield, we create appropriate safeguards pursuant to Art. 46 EU-GDPR as well as an adequate level of data protection, by completing the EU standard data protection clauses, adopted by the European Commission, with the receiving agency. Copies of the EU Standard data protection clauses can be found on the European Commission’s website: https://ec.europa.eu/info/law/law-topic/data-protection_en
SECTION 9 – RIGHTS OF THE PERSON CONCERNED
You have the following rights:
Right of opposition to the processing of personal data If your personal data are processed on the basis of legitimate interests pursuant to Art. 6 para. 1 lit. f) GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, insofar as there are reasons for this arising from your particular situation. If the objection is directed against direct advertising, you have a general right of objection, without there having to be reasons from a particular situation.
Right to free information about the personal data stored on your person in accordance with Art. 15 GDPR.
Right to correct inaccurate personal data In accordance with Art. 16 GDPR, you have the right to immediately demand the correction of incorrect or complete personal data stored by us.
Right to cancellation (right to “oblivion”) In accordance with Art. 17 GDPR, you have the right to request the deletion of your personal data stored with us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.
Right to limitation of processing According to Art. 18 GDPR, you have the right to request the restriction of the processing of your personal data if the correctness of the personal data is denied by you, the processing is unlawful, but you refuse to delete the personal data and instead request that the use of the personal data be restricted, we no longer need your personal data, but you do need it to assert, exercise or defend legal claims, you have lodged an objection against the processing pursuant to Art. 21 GDPR, as long as it is not yet clear whether our justified reasons outweigh yours.
Right to data transferability In accordance with Art. 20 GDPR, you have the right to receive the personal data you have provided to us in a structured, current and machine-readable format or to request its transfer to another person responsible.
Right to revoke consent given You may revoke your consent once given to us at any time in accordance with Art. 7 Para. 3 GDPR. The legality of the data processing on the basis of the consent until the notification remains unaffected.
If you are of the opinion that the processing of your data violates data protection regulations, you can complain to a supervisory authority pursuant to Art. 77 GDPR.