Privacy Policy

It is CINDY CARROLL’s policy to respect your privacy regarding any information we may collect from you or which you may provide to us, in the circumstances set out below. Accordingly, we have developed this privacy policy in order for you to understand how we collect, use, communicate, disclose, safeguard and otherwise make use of your personally identifiable information (“Personal Data”).

We will only collect and use your Personal Data where:

• we have lawful grounds to do so, including to comply with our legal obligations;
• we are performing a contract with you for our services; or
• we have legitimate interests in using your Personal Data and your interests and fundamental rights do not override those interests.

For the purposes of the EU General Data Protection Regulation ((EU) 2016/679) (“GDPR”), we, Cindy Carroll, are the “data controller”. If you have any questions about this policy or about how we use your Personal Data, please contact us via our contact details at the end of this policy.

This policy is effective as of May 25th, 2018. We review our privacy practices on an ongoing basis, and as such we may change this privacy policy from time to time. Please check this page frequently to ensure you are familiar with its current content.

1. Personal Data we collect via our website CINDY CARROLL (the “Website”)

Personal Data that you provide to us

We only collect Personal Data where you choose to interact with us on the Website in the following ways:

 

Activity	Types of Personal Data Collected
When you sign-up to: • receive free content, including eBooks, videos and offers;	• Email address • First name • Last name
When you purchase a book directly from us	• Name • Email address • Phone number • Any Personal Data which you provide to us in the free text box of the form • Payment method choice (payment details are held by our payment processor, not us)
When you complete the media enquiries form	• Name • Email address • Phone number • Any Personal Data which you provide to us in the free text box of the form

 

 

Data that we collect automatically We automatically collect certain information when you visit our Website – such as the type of browser and operating system you are using, and the domain name of your Internet service provider. We do not link this information with any Personal Data. We may also collect data automatically through our use of cookies on the Website. Please see the cookies section and Google Analytics section to find out about the types of cookies we set and why, and how you can adjust your settings to disable cookies.

1a. Subscription to our newsletters

On the website of Cindy Carroll, users are given the opportunity to subscribe to our enterprise’s newsletter. The input mask used for this purpose determines what personal data are transmitted, as well as when the newsletter is ordered from the controller.

Cindy Carroll informs her readers regularly by means of a newsletter about her books. The enterprise’s newsletter may only be received by the data subject if (1) the data subject has a valid e-mail address and (2) the data subject registers for the newsletter shipping. A confirmation e-mail will be sent to the e-mail address registered by a data subject for the first time for newsletter shipping, for legal reasons, in the double opt-in procedure. This confirmation e-mail is used to prove whether the owner of the e-mail address as the data subject is authorized to receive the newsletter.

During the registration for the newsletter, we also store the IP address of the computer system assigned by the Internet service provider (ISP) and used by the data subject at the time of the registration, as well as the date and time of the registration. The collection of this data is necessary in order to understand the (possible) misuse of the e-mail address of a data subject at a later date, and it therefore serves the aim of the legal protection of the controller.

The personal data collected as part of a registration for the newsletter will only be used to send our newsletter. In addition, subscribers to the newsletter may be informed by e-mail, as long as this is necessary for the operation of the newsletter service or a registration in question, as this could be the case in the event of modifications to the newsletter offer, or in the event of a change in technical circumstances. There will be no transfer of personal data collected by the newsletter service to third parties. The subscription to our newsletter may be terminated by the data subject at any time. The consent to the storage of personal data, which the data subject has given for shipping the newsletter, may be revoked at any time. For the purpose of revocation of consent, a corresponding link is found in each newsletter. It is also possible to unsubscribe from the newsletter at any time by communicating this to the controller in a different way.

1b. Newsletter-Tracking

The newsletter of Cindy Carroll contains so-called tracking pixels. A tracking pixel is a miniature graphic embedded in such e-mails, which are sent in HTML format to enable log file recording and analysis. This allows a statistical analysis of the success or failure of online marketing campaigns. Based on the embedded tracking pixel, Cindy Carroll may see if and when an e-mail was opened by a reader, and which links in the e-mail were called up by data subjects.

Such personal data collected in the tracking pixels contained in the newsletters are stored and analyzed by the controller in order to optimize the shipping of the newsletter, as well as to adapt the content of future newsletters even better to the interests of the data subject. These personal data will not be passed on to third parties. Data subjects are at any time entitled to revoke the respective separate declaration of consent issued by means of the double-opt-in procedure. After a revocation, these personal data will be deleted by the controller. Cindy Carroll automatically regards a withdrawal from the receipt of the newsletter as a revocation.

2. Use of your Personal Data

We will only use your Personal Data when the law allows us to. Most commonly, we use your Personal Data to:

• process and manage your use of our website;
• respond to your questions, comments and requests;
• where you have opted-in to receive marketing from us, deliver communications that are relevant to your preferences / may be of interest to you;
• improve our services and Website through analysis of information.

 

3. Sharing of your Personal Data

We take your privacy seriously and will not share your Personal Data with others, except as permitted by applicable law or as set out below:

We share Personal Data as necessary with third parties who provide services or functions on our behalf and who require the information to provide those specific services to us. These third parties may include social media advertising platforms such as Facebook and Google Adwords for the purpose of custom audience generation and the development of targeting criteria for other audiences. Please note that we have appropriate data privacy safeguards in place with third parties with whom we share Personal Data as described above and who are providing services or functions on our behalf.

 

4. Keeping your Personal Data secure

We have implemented security policies and technical measures to safeguard the Personal Data we collect. We maintain physical, electronic and procedural safeguards that comply with applicable law, including the GDPR, to safeguard Personal Data from accidental loss, destruction or damage and unauthorised access, use and disclosure.

 

5. Retention periods for use of your Personal Data

We will use and store your Personal Data only for as long as necessary, bearing in mind the uses of your Personal Data as described in this privacy policy and otherwise as communicated to you. We review the Personal Data we hold at regular intervals and delete permanently or anonymise any Personal Data which is no longer necessary.

 

6. Children

This Website and our services are aimed at adults, and we do not knowingly collect any Personal Data relating to children aged under 15 years old. If you are under the age of 15, please do not provide us with any of your Personal Data, including your email address.

 

7. Change of purpose

We will only use your Personal Data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to have an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us.

If we need to use your Personal Data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.

8. Cookies

The Internet pages of the Cindy Carroll website use cookies. Cookies are text files that are stored in a computer system via an Internet browser.

Many Internet sites and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a character string through which Internet pages and servers can be assigned to the specific Internet browser in which the cookie was stored. This allows visited Internet sites and servers to differentiate the individual browser of the data subject from other Internet browsers that contain other cookies. A specific Internet browser can be recognized and identified using the unique cookie ID.

Through the use of cookies, Cindy Carroll can provide the users of this website with more user-friendly services that would not be possible without the cookie setting.

By means of a cookie, the information and offers on our website can be optimized with the user in mind. Cookies allow us, as previously mentioned, to recognize our website users. The purpose of this recognition is to make it easier for users to utilize our website. The website user that uses cookies, e.g. does not have to enter access data each time the website is accessed, because this is taken over by the website, and the cookie is thus stored on the user’s computer system. Another example is the cookie of a shopping cart in an online shop. The online store remembers the articles that a customer has placed in the virtual shopping cart via a cookie.

The data subject may, at any time, prevent the setting of cookies through our website by means of a corresponding setting of the Internet browser used, and may thus permanently deny the setting of cookies. Furthermore, already set cookies may be deleted at any time via an Internet browser or other software programs. This is possible in all popular Internet browsers. If the data subject deactivates the setting of cookies in the Internet browser used, not all functions of our website may be entirely usable.

 

8a. Data protection provisions about the application and use of Google Analytics (with anonymization function)

On this website, the controller has integrated the component of Google Analytics (with the anonymizer function). Google Analytics is a web analytics service. Web analytics is the collection, gathering, and analysis of data about the behavior of visitors to websites. A web analysis service collects, inter alia, data about the website from which a person has come (the so-called referrer), which sub-pages were visited, or how often and for what duration a sub-page was viewed. Web analytics are mainly used for the optimization of a website and in order to carry out a cost-benefit analysis of Internet advertising.

The operator of the Google Analytics component is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, United States.

For the web analytics through Google Analytics the controller uses the application “_gat. _anonymizeIp”. By means of this application the IP address of the Internet connection of the data subject is abridged by Google and anonymised when accessing our websites from a Member State of the European Union or another Contracting State to the Agreement on the European Economic Area.

The purpose of the Google Analytics component is to analyze the traffic on our website. Google uses the collected data and information, inter alia, to evaluate the use of our website and to provide online reports, which show the activities on our websites, and to provide other services concerning the use of our Internet site for us.

Google Analytics places a cookie on the information technology system of the data subject. The definition of cookies is explained above. With the setting of the cookie, Google is enabled to analyze the use of our website. With each call-up to one of the individual pages of this Internet site, which is operated by the controller and into which a Google Analytics component was integrated, the Internet browser on the information technology system of the data subject will automatically submit data through the Google Analytics component for the purpose of online advertising and the settlement of commissions to Google. During the course of this technical procedure, the enterprise Google gains knowledge of personal information, such as the IP address of the data subject, which serves Google, inter alia, to understand the origin of visitors and clicks, and subsequently create commission settlements.

The cookie is used to store personal information, such as the access time, the location from which the access was made, and the frequency of visits of our website by the data subject. With each visit to our Internet site, such personal data, including the IP address of the Internet access used by the data subject, will be transmitted to Google in the United States of America. These personal data are stored by Google in the United States of America. Google may pass these personal data collected through the technical procedure to third parties.

The data subject may, as stated above, prevent the setting of cookies through our website at any time by means of a corresponding adjustment of the web browser used and thus permanently deny the setting of cookies. Such an adjustment to the Internet browser used would also prevent Google Analytics from setting a cookie on the information technology system of the data subject. In addition, cookies already in use by Google Analytics may be deleted at any time via a web browser or other software programs.

In addition, the data subject has the possibility of objecting to a collection of data that are generated by Google Analytics, which is related to the use of this website, as well as the processing of this data by Google and the chance to preclude any such. For this purpose, the data subject must download a browser add-on under the link https://tools.google.com/dlpage/gaoptout and install it. This browser add-on tells Google Analytics through a JavaScript, that any data and information about the visits of Internet pages may not be transmitted to Google Analytics. The installation of the browser add-ons is considered an objection by Google. If the information technology system of the data subject is later deleted, formatted, or newly installed, then the data subject must reinstall the browser add-ons to disable Google Analytics. If the browser add-on was uninstalled by the data subject or any other person who is attributable to their sphere of competence, or is disabled, it is possible to execute the reinstallation or reactivation of the browser add-ons.

Further information and the applicable data protection provisions of Google may be retrieved under https://www.google.com/intl/en/policies/privacy/ and under http://www.google.com/analytics/terms/us.html. Google Analytics is further explained under the following Link https://www.google.com/analytics/.

 

9. Comments function in the blog on the website

Cindy Carroll offers users the possibility to leave individual comments on individual blog contributions on a blog, which is on the website of the controller. A blog is a web-based, publicly-accessible portal, through which one or more people called bloggers or web-bloggers may post articles or write down thoughts in so-called blogposts. Blogposts may usually be commented by third parties.

If a data subject leaves a comment on the blog published on this website, the comments made by the data subject are also stored and published, as well as information on the date of the commentary and on the user’s (pseudonym) chosen by the data subject. In addition, the IP address assigned by the Internet service provider (ISP) to the data subject is also logged. This storage of the IP address takes place for security reasons, and in case the data subject violates the rights of third parties, or posts illegal content through a given comment. The storage of these personal data is, therefore, in the own interest of the data controller, so that he can exculpate in the event of an infringement. This collected personal data will not be passed to third parties, unless such a transfer is required by law or serves the aim of the defense of the data controller.

 

10. Subscription to comments in the blog on the website

The comments made in the blog of Cindy Carroll may be subscribed to by third parties. In particular, there is the possibility that a commenter subscribes to the comments following his comments on a particular blog post.

If a data subject decides to subscribe to the option, the controller will send an automatic confirmation e-mail to check the double opt-in procedure as to whether the owner of the specified e-mail address decided in favor of this option. The option to subscribe to comments may be terminated at any time.

 

11. Access to and control over your Personal Data

You have legal rights under applicable law in relation to your Personal Data. You can ask the following questions, or take the following actions, at any time by contacting us via email [privacy@cindycarroll.com] or via our postal address:

• see what Personal Data we hold about you (if any), including why we are holding it and who it could be disclosed to;
• ask us to change/correct your Personal Data;
• ask us to delete your Personal Data;
• object to the processing of your Personal Data;
• ask us to restrict the processing of your Personal Data;
• withdraw any consents you have given us to the processing of your Personal Data; and
• express any concerns you have about third parties’ use of your Personal Data.

 

12. Contact Us

Our full details are: CINDY CARROLL

Email for Privacy Questions: privacy@cindycarroll.com

Postal Address: 3-304 Stone Rd W, Suite 548, Guelph, ON N1G 4W4