Introduction
Welcome to my website. This Privacy Policy outlines how I handle personal data and ensure compliance with global data protection regulations, including GDPR and CCPA. My goal is to provide a clear understanding of how your data is collected, used, and protected.
Data Collection
I collect data through the use of cookies and other technologies. Specifically, I use Google Analytics and Vimeo, which collect data to analyze website traffic and improve user experience. The data collected includes information about your interaction with my website, such as pages visited and videos viewed.
Legal Basis for Processing
We process your personal data based on the following legal grounds: legitimate interests for analytics purposes (Google Analytics), and consent for non-essential cookies (Vimeo video player when not essential for basic functionality).
Categories of Personal Information (CCPA)
In the past 12 months, we have collected the following categories of personal information:
Internet or network activity information (through Google Analytics and Vimeo), device information and identifiers. This information is used for website analytics, service improvement, and providing video content.
Types of Cookies
I use two types of cookies:
Essential Cookies: These are necessary for the basic functioning of my website, such as Vimeo used for a video player, and ensuring the website operates correctly.
Non-Essential Cookies: These cookies are used for analytical purposes, such as Google Analytics. These cookies help me understand how users interact with my site.
You can manage your cookie preferences through your browser settings or by using the cookie consent mechanism provided on my website.
Detailed Cookie Information
Google Analytics: Uses cookies like _ga, _ga_*, _gid to collect anonymous usage statistics. Retention: up to 2 years. Purpose: Website analytics and improvement.
Vimeo: Uses cookies for video player functionality and viewing preferences. Retention: varies by cookie type, up to 1 year. Purpose: Video delivery and user experience optimization.
Data Retention
We retain analytics data from Google Analytics for 26 months (Google's default setting). Video interaction data from Vimeo is retained for as long as necessary to provide the service and analyze user preferences, typically 12 months. You can request earlier deletion of your data by contacting us.
International Data Transfers
Your data may be transferred to and processed in countries outside the European Economic Area, including the United States, through our use of Google Analytics and Vimeo. These transfers are protected by appropriate safeguards, including Google's compliance with the EU-US Data Privacy Framework and standard contractual clauses.
Your Rights Under GDPR
You have the right to access, rectify, erase, restrict processing, object to processing, and data portability. You also have the right to withdraw consent at any time and lodge a complaint with your local supervisory authority. To exercise these rights, contact us at filip@krejci3d.com.
California Consumer Rights
If you are a California resident, you have additional rights under the CCPA:
Right to know what personal information we collect, use, and share; Right to delete your personal information; Right to opt-out of the sale or sharing of personal information (Note: We do not sell personal information); Right to correct inaccurate personal information; Right to non-discrimination for exercising your rights; Right to limit use of sensitive personal information.
Data Security
We implement appropriate technical and organizational measures to protect your personal data, including: encryption of data in transit and at rest where technically feasible; regular security assessments of our systems and third-party services; access controls and authentication measures; regular software updates and security patches.
Data Breach Notification
In the event of a data breach that is likely to result in high risk to your rights and freedoms, we will notify you without undue delay as required by applicable law.
Compliance
I am committed to complying with GDPR and CCPA regulations. I ensure that your data is collected and processed in a manner that aligns with these regulations, providing you with transparency and control over your personal information.
Contact Information
Data Controller: Filip Krejci
Email: filip@krejci3d.com
Supervisory Authority: You have the right to lodge a complaint with your local data protection authority. For EU residents, you can find your local authority at: https://edpb.europa.eu/about-edpb/about-edpb/members_en
Policy Updates
I may update this Privacy Policy to reflect changes in my practices or legal requirements. Any changes will be posted on this page, and I encourage you to review this policy periodically to stay informed about my data practices.
Conclusion
I am dedicated to protecting your privacy and ensuring a transparent and trustworthy online experience. This Privacy Policy is designed to be clear and comprehensive, providing you with the information you need to make informed decisions about your data.