PRIVACY POLICY
Welcome to Story Through. We take the protection of your personal data very seriously and process your data in accordance with the UK`s Data Protection Act 2018 (“DPA”) and the General Data Protection Regulation (“GDPR”).
With the help of this Privacy Policy, we inform you comprehensively about the processing of your personal data by us and the rights to which you are entitled.
In principle, personal data is any information relating to personal or material circumstances that relate to an identified or identifiable individual. This includes, for example, your name, date of birth, e-mail address, postal address, or telephone number as well as online identifiers such as your IP address. In contrast, information of a general nature that cannot be used to determine your identity is not personal data. This includes, for example, the number of users of a website.
Responsible for data processing
Responsible for data processing in accordance with the provisions of the GDPR and DPA is:
Story Through
57 Meadowvale, Waringstown
Co. Down, BT66 7RL
Northern Ireland
Tel: 07715 618162
E-mail: jamie@storythrough.video
Facebook: https://www.facebook.com/StoryThrough
Instagram: https://www.instagram.com/storythrough.video/
General information on data processing
In the course of our business and website operations, we not only process data but may also need to disclose or transmit it to third parties and, where applicable, to so-called third countries outside Northern Ireland, the UK and the EEA. Where we transfer data outside Northern Ireland, the UK or EEA, we have highlighted this accordingly below.
Data processing
The individual data concerned, processing purposes, legal bases, recipients and, where applicable, transfers to third countries are listed below:
a) Log file during website visit
We log your website visit. In doing so, we process:
Name(s) of our accessed web site(s),
date and time of the access,
the amount of data transferred,
the browser type and version,
the operating system you use,
the referrer URL (the previously visited web site),
your IP address,
the requesting provider.
The legal basis for data processing is our legitimate interest in the ongoing provision and security of our web site in accordance with Art. 6 (1) f GDPR.
The log file is deleted after seven days, unless it is needed to prove or clarify specific legal violations that have become known within the retention period.
b) Hosting
To provide our website, we use the services of Squarespace located at Manhattan's West Village at 8 Clarkson Street, United States who process the above-mentioned data and all data to be processed in connection with the operation of this website (log file when visiting the website) on our behalf. The legal basis for the data processing is our legitimate interest in providing our web site in accordance with Art. 6 (1) f GDPR.
c) Contacting us
If you contact us per e-mail, phone, social media or our enquiry form, we process the following data from you for the purpose of processing and handling your enquiry: Name, contact details -if provided by you- and your message. The legal basis of the data processing is our obligation to fulfil the contract and/or to fulfil our pre-contractual obligations in accordance with Art. 6 (1) b) GDPR and/or our legitimate interest in processing your enquiry in accordance with Art. 6 (1) f) GDPR.
d) Contract fulfilment and data management in the context of service provision
We process various data within the framework of the provision of our services and for the initiation and processing of the existing contractual relationship between you and us.
If you have commissioned us to provide a service, we process your data, if provided:
inventory data (e.g., customer master data, such as names or addresses), contact data (e.g., e-mail, telephone numbers),
content data (e.g., text entries, and messages),
contract data (e.g., subject matter of contract, term),
payment data (e.g., bank details, payment history),
usage data and metadata (e.g., in the context of evaluating and measuring the success of marketing measures), and
all information that is necessary in the context of fulfilling the services, exclusively for the purpose of processing and handling the contractual relationship.
This includes in particular our appropriate advice and support, correspondence with you, invoicing, fulfilment of our accounting and tax obligations. Accordingly, the data is processed on the basis of Art. 6 (1) b) GDPR as well as to fulfil our legal obligations pursuant to Art. 6 (1) c) GDPR.
e) Use of cookies
We use so-called cookies on our web site. Cookies are small text files that are stored on your respective device (PC, smartphone, tablet, etc.) and saved by your browser. For further information please refer to our Cookie Policy. The legal basis for the use of cookies is your consent in accordance with Art. 6 para. 1 a) GDPR as well as our legitimate interest in accordance with Art. 6 (1) f) GDPR.
Transfer of personal data
We will not disclose or otherwise distribute your personal data to third parties unless this is necessary for the performance of our services (legal basis for processing: Art. 6 (1) b) GDPR), you have consented to the disclosure (legal basis for processing: Art. 6 (1) a) GDPR) or the disclosure of data is permitted by relevant legal provisions.
However, we are entitled to outsource the processing of your personal data in whole or in part to external service providers acting as processors on our behalf pursuant to Art. 4 No. 8 GDPR within the framework of the data protection provisions. External service providers support us, for example, in the technical operation and support of the website, data management, the provision and performance of services, marketing, as well as the implementation and fulfilment of reporting obligations.
The service providers commissioned by us process your data exclusively in accordance with our instructions. Nonetheless, we remains responsible for the protection of your data, which is ensured by strict contractual regulations, technical and organisational measures and additional controls by us.
Personal data may also be disclosed to third parties if we are legally obliged to do so e.g., by court order (legal basis for processing: Art. 6 (1) (c) GDPR) or if this is necessary to support criminal or legal investigations or other legal investigations or proceedings at home or abroad or to fulfil our legitimate interests (legal basis for processing: Art. 6 (1) (f) GDPR).
Automated decision-making
Automated decision-making including profiling pursuant to Art. 22 (1) and (4) GDPR does not take place.
Direct marketing in the context of a customer relationship
Insofar as you have also given us your separate consent to process your data for consulting, marketing and advertising purposes, we are entitled to contact you for these purposes via the communication channels you have given your consent to.
Your data subject rights
a) Information
Upon request, we will provide you at any time and free of charge with information about all personal data that we have stored about you.
b) Correction, deletion, restriction of processing (blocking), objection
If you no longer agree with the storage of your personal data or if this data has become incorrect, we will arrange for the deletion or blocking of your data or make the necessary corrections (insofar as this is possible according to the applicable law) on the basis of a corresponding instruction. The same applies if we are only to process data in a restrictive manner in the future. You have the right to object in particular in cases where your data is required for the performance of a task that is in the public interest or in our legitimate interest, as well as profiling based on this. You also have such a right of objection in the event of data processing for the purpose of direct advertising.
c) Right to revoke consent with effect for the future
You may revoke your consent at any time with effect for the future. Your revocation will not affect the lawfulness of the processing up to the time of revocation.
d) Data portability
If data is processed on the basis of a contract, pre-contractual negotiations, consent or with the help of automated procedures, you have the right to data portability. Upon request, we will provide you with your data in a common, structured and machine-readable format so that you can transfer the data to another data controller if you wish.
f) Exercise of your data subject rights and right of appeal
To assert these rights, please contact us. The same applies if you have questions about data processing in our company. You also have the right to lodge a complaint with a data protection supervisory authority. The Information Commissioner`s Office (ICO) is the relevant authority in matters of data protection in the UK. You have the right to make a complaint at any time to the ICO (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO in the first instance.
Security
State-of-the-art internet technologies are used to ensure the security of your data. During the online enquiry process, your details are secured with SSL encryption. For secure storage of your data, the systems are protected by firewalls that prevent unauthorised access from outside. In addition, technical and organisational security measures are used to protect the personal data you have provided against accidental or intentional manipulation, loss, destruction or access by unauthorised persons.
Social Media
We maintain online presences in Facebook, Twitter and LinkedIn on the basis of our legitimate interests within the meaning of Art. 6 (1) f GDPR, we maintain online presences within social networks and platforms in order to be able to communicate with the customers, interested parties and users active there and to inform them about our services there. When calling up the respective networks and platforms, the terms and conditions and data processing policies of their respective operators apply.
Unless otherwise stated in our data protection policy, we process the data of users if they communicate with us within the social networks and platforms, e.g., write posts on our online presences or send us messages.
Updating your information
If you believe that the information, we hold about you is inaccurate or that we are no longer entitled to use it and want to request its rectification, deletion, or object to its processing, please do so by contacting us.
For your protection and the protection of all of our users, we may ask you to provide proof of identity before we can answer the above requests.
Please keep in mind, we may reject requests for certain reasons, including if the request is unlawful or if it may infringe on trade secrets or intellectual property or the privacy of another user. Also, we may not be able to accommodate certain requests to object to the processing of personal information, notably where such requests would not allow us to provide our service to you anymore.
Links to other providers
Our website also contains – clearly recognisable – links to the websites of other companies. Insofar as there are links to websites of other providers, we have no influence on their contents. Therefore, no guarantee or liability can be assumed for these contents. The respective provider or operator of the pages is always responsible for the content of these pages.
The linked pages were checked for possible legal violations and recognisable infringements at the time of linking. Illegal contents were not recognisable at the time of linking. However, permanent monitoring of the content of the linked pages is not reasonable without concrete indications of a legal violation. Such links will be removed immediately if infringements of the law become known.
Personal information and children
Our services are aimed at people aged 18 and over. We will not knowingly collect, use or disclose personal information from minors under the age of 18 without first obtaining consent from a legal guardian through direct offline contact.
Changes and updates to the privacy policy
We kindly ask you to regularly inform yourself about the content of our privacy policy. We will amend the privacy policy as soon as changes to the information processing activities we carry out make this necessary. We will inform you as soon as the changes require an act of cooperation on your part (e.g., consent) or other individual notification.
Concerns and Contact
If you have any concerns about a possible compromise of your privacy or misuse of your personal information on our part, or any other questions or comments, you can contact us.
This Privacy Policy was last updated on Friday, 16 June, 2023.