Artificial intelligence — tools, work, ethics● New dispatches weekly
AIANAAI Magazine
Index

Privacy Policy

1) Introduction and contact details of the controller

1.1  We are pleased that you are visiting our website and thank you for your interest. Below we inform you about how your personal data is handled when you use our website. Personal data means all data by which you can be personally identified.

1.2  The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is isla.marketing, Norbert Davidt, Carrer Bernat Pomar 14, 07013 Palma de Mallorca, Spain, phone/WhatsApp: +34 657 785 998, e-mail: info@isla-marketing.com. The controller for the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data. Responsibility for the editorial content is set out in our legal notice.

2) Data collected when you visit our website

2.1  If you use our website for information purposes only, i.e. if you do not register or otherwise transmit information to us, we only collect the data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

  • The page of our website you visited
  • Date and time of access
  • Volume of data sent, in bytes
  • Source/reference from which you reached the page
  • Browser used
  • Operating system used
  • IP address used (where applicable, in anonymised form)

Processing takes place in accordance with Art. 6 (1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used in any other way. However, we reserve the right to check the server log files retrospectively if there are concrete indications of unlawful use.

2.2  For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries addressed to the controller), this website uses SSL or TLS encryption. You can recognise an encrypted connection by the character string "https://" and the padlock symbol in your browser bar.

3) Hosting and content delivery network

For the hosting of our website and the presentation of its content we use a provider that renders its services, either itself or through selected subcontractors, exclusively on servers within the European Union.

All data collected on our website is processed on these servers.

We have concluded a data processing agreement with the provider which ensures the protection of our site visitors' data and prohibits any unauthorised disclosure to third parties.

4) Contacting us via WhatsApp Business

You have the option of contacting us via the messaging service WhatsApp provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For this purpose we use the so-called "Business version" of WhatsApp.

If you contact us via WhatsApp in connection with a specific transaction (for example an order placed), we store and use the mobile number you use on WhatsApp and – if provided – your first and last name in accordance with Art. 6 (1)(b) GDPR in order to process and answer your request. On the same legal basis we may ask you via WhatsApp to provide further data (order number, customer number, address or e-mail address) so that we can assign your enquiry to a specific matter.

If you use our WhatsApp contact for general enquiries (for example about our range of services, availability or our website), we store and use the mobile number you use on WhatsApp and – if provided – your first and last name in accordance with Art. 6 (1)(f) GDPR on the basis of our legitimate interest in providing the requested information efficiently and promptly.

Your data is only ever used to answer your request via WhatsApp. It is not passed on to third parties.

Please note that WhatsApp Business is granted access to the address book of the mobile device we use for this purpose and automatically transfers telephone numbers stored in that address book to a server of its parent company Meta Platforms Inc. in the USA. To operate our WhatsApp Business account we use a mobile device whose address book contains exclusively the WhatsApp contact details of users who have themselves contacted us via WhatsApp.

This ensures that every person whose WhatsApp contact details are stored in our address book has already consented, when first using the app on their device by accepting the WhatsApp terms of use, to the transfer of their WhatsApp telephone number from the address books of their chat contacts in accordance with Art. 6 (1)(a) GDPR. A transfer of data relating to users who do not use WhatsApp and/or have not contacted us via WhatsApp is therefore excluded.

For the purpose and scope of the data collection and the further processing and use of the data by WhatsApp, as well as your related rights and settings options for protecting your privacy, please refer to WhatsApp's privacy notices: https://www.whatsapp.com/legal/?eea=1#privacy-policy

We have concluded a data processing agreement with the provider which protects our site visitors' data and prohibits disclosure to third parties.

In the course of the processing described above, data may be transferred to servers of Meta Platforms Inc. in the USA.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which on the basis of an adequacy decision of the European Commission ensures compliance with the European level of data protection.

5) Contacting us by form or e-mail

Personal data is collected when you contact us (e.g. via a contact form or by e-mail). Which data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of answering your request or for making contact and for the associated technical administration.

The legal basis for processing this data is our legitimate interest in answering your request in accordance with Art. 6 (1)(f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 (1)(b) GDPR. Your data will be deleted once your enquiry has been conclusively dealt with. This is the case if it can be inferred from the circumstances that the matter concerned has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.

6) Rights of the data subject

Applicable data protection law grants you the following data subject rights (rights to information and intervention) vis-à-vis the controller with regard to the processing of your personal data, whereby reference is made to the legal basis cited for the respective conditions of exercise:

  • Right of access pursuant to Art. 15 GDPR;
  • Right to rectification pursuant to Art. 16 GDPR;
  • Right to erasure pursuant to Art. 17 GDPR;
  • Right to restriction of processing pursuant to Art. 18 GDPR;
  • Right to notification pursuant to Art. 19 GDPR;
  • Right to data portability pursuant to Art. 20 GDPR;
  • Right to withdraw consent given pursuant to Art. 7 (3) GDPR;
  • Right to lodge a complaint pursuant to Art. 77 GDPR.

7) Right to object

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST AS PART OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING. YOU MAY EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

8) Duration of storage of personal data

The duration for which personal data is stored is determined by the respective legal basis, the purpose of processing and – where applicable – additionally by the respective statutory retention period (e.g. commercial and tax law retention periods).

Where personal data is processed on the basis of express consent pursuant to Art. 6 (1)(a) GDPR, the data concerned is stored until you withdraw your consent.

Where statutory retention periods exist for data processed in the context of contractual or quasi-contractual obligations on the basis of Art. 6 (1)(b) GDPR, such data is routinely deleted after the retention periods have expired, provided it is no longer required for the performance or initiation of a contract and/or we no longer have a legitimate interest in its continued storage.

Where personal data is processed on the basis of Art. 6 (1)(f) GDPR, such data is stored until you exercise your right to object pursuant to Art. 21 (1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Where personal data is processed for the purpose of direct marketing on the basis of Art. 6 (1)(f) GDPR, such data is stored until you exercise your right to object pursuant to Art. 21 (2) GDPR.

Unless otherwise stated in the other information in this declaration on specific processing situations, stored personal data is otherwise deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

Controller: isla.marketing · Norbert Davidt · Carrer Bernat Pomar 14 · 07013 Palma de Mallorca · Legal notice