Privacy Policy (trusted-news.com)

Privacy Policy (short version)

Your protection and data confidentiality is of utmost importance to us ("eyeo", "we", "our"). The following privacy notice shall provide you with a general overview about the collection, processing and use (hereinafter together referred to as "processing") of your personal data on our website www.trusted-news.com (hereinafter referred to as “website”) and in our extension “Trusted News” (hereinafter referred to as “extension”). For more information regarding our processing activities, please view our complete Privacy Policy.

What kind of personal data do we process?

  1. While using the trusted-news.com website:
  2. While using our extension:
  3. Voluntary:
  4. How do we collect data?

    List of techniques and tools we use for data collection:

    1. On our website
      • Log files
      • Newsletter subscriptions
      • Via Google Analytics
    2. In our extension:
      • Extension update checks
      • Subscription downloads
      • Feedback form
      • Via Google Analytics

    How and why do we use your data?

    For technical purposes, such as, but not limited to, preventing security attacks, to improve our website/extension and to ensure website/extension security.

    What is the legal basis of data processing?

    We process your personal data in compliance with the European General Data Protection Regulation (Regulation (EU) 2016/679) (“GDPR”), the applicable EU laws and German national data protection laws.

    How long do we keep data?

    Note: “Aggregated usage statistics”, as but not limited to analytics data, and data without any connection to single users may be retained beyond these periods.

    Our values

    We collect as little data as possible. As far as anonymous or pseudonymous use is possible we anonymize or pseudonymize your data.

    What rights do you have?

    In compliance with the GDPR, and the applicable EU laws and German national data protection laws and to the extent legally permitted you have the right to:

    Questions?

    Contact our Data Protection Officer, Dr. Judith Nink, via email at privacy@eyeo.com or via phone at +49 (0) 221 / 65028 598.

    Privacy Policy (long version)

    General notes

    Your protection and data confidentiality is of utmost importance to us ("eyeo", "we", "our"). We take the protection of your personal data very seriously and collect as little data as possible. Nevertheless, collecting data helps our products and websites function correctly, and allows us to communicate with you. Our general privacy policy is to avoid collecting more data than necessary. Collected data is anonymized, if possible, and deleted when no longer needed.

    This privacy policy shall inform you about the collection, processing and use of your personal data. Some personal data is necessary so that we can continue to provide our website, www.trusted-news.com (hereinafter referred to as “website”), and our extension, Trusted News (hereinafter referred to as “extension”). We gather and use personal data firmly within the provisions of the European General Data Protection Regulation (Regulation (EU) 2016/679) (“GDPR”), the applicable EU Laws and German national data protection laws. In the following text we will inform you about the specific data we collect, the scope and purpose of the collection, the use of personal data by us when using our website and our extension, the legal basis for such collection and processing, as well as your rights to protect your personal data.

    Who is responsible for the data collection and processing (contacts)?

    Controller

    The legal person responsible for the collection, processing and/or use of personal data in connection with our products ("Controller") is:

    Controller

    eyeo GmbH
    Lichtstraße 25
    50825 Cologne
    Germany

    Data Protection Officer

    If you have any questions regarding your personal data, please do not hesitate to contact our Data Protection Officer, Dr. Judith Nink:

    What is personal data?

    The purpose of data protection is to protect personal data. Personal data means any information relating to an identified or identifiable natural person ("data subject"). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. This information includes, for example, details such as name, postal address, email address or telephone number, but also nicknames, certificates and information about your interests.

    What kind of data do we collect and process, and how?

    Collection and processing of data on our website

    Automatically collected and processed information

    Website logs

    While using our website, we automatically record website logs and are thereby collecting the following data for technical and for security reasons, and to provide you with our services:

    The legal basis for processing such website logs is Art. 6 (1) f GDPR. Detailed logs are retained for a period of 30 days, after which only the “aggregated usage statistics” that cannot be connected to a single user, remain. Everything else will be deleted. We do not combine website log data with any other information about you. Please see the section below, What rights do you have?, for information about your rights to protect your personal data.

    1 For more information, please refer to https://tools.ietf.org/html/rfc7231#section-5.5.3.
    2 For more information, please refer to https://tools.ietf.org/html/rfc7231#section-5.5.2.
    Information you give to us on a voluntary basis

    Newsletter data

    When using our website, we optionally collect and process personal data you submit to us when you subscribe to our newsletter. We are thereby collecting and processing your email address, IP address, and the date and time of the subscription. We only collect and process such data during the newsletter registration for purposes of sending out the newsletter and for security purposes. When subscribing to our newsletter, we ask you to consent in the collection and processing of such data. You can withdraw your consent at any time by cancelling the subscription or by contacting us. You can cancel the subscription using the unsubscribe option provided in the newsletter. The legal basis for collecting and processing such data is Art. 6 (1) a GDPR. Please see What rights do you have? for information about your rights to protect your personal data.

    Google Analytics

    We use Google Analytics, a web analytics service from Google Inc. ("Google"), on our website and in our extension. Google Analytics uses so-called "cookies" (text files stored on your computer that enable us to analyze your use of our Websites). Information generated by the cookies (including your abbreviated IP address) is transmitted to and stored at a Google server in the United States. Google uses this information to assess your use of our website and our extension, to compile activity reports, and to provide more services connected with the use of our website and our extension. It is possible that Google may transmit this information to third parties if required by law, or if third parties process this information on behalf of Google.

    You can deactivate Google Analytics by means of a browser add-on if you do not want to help us improve our products. You can download this here: http://tools.google.com/dlpage/gaoptout

    Google Tag Manager

    This website uses Google Tag Manager. Google Tag Manager is a solution that allows marketed website tags to be managed using an interface. The Tag Manager tool itself (which implements the tags) is a cookie-less domain and does not register personal data. The tool causes other tags to be activated which may, for their part, register data under certain circumstances. Google Tag Manager does not access this information. If recording has been deactivated on domain or cookie level, this setting will remain in place for all tracking tags implemented with Google Tag Manager.

    Collection and processing of data in our extension

    Automatically collected and processed information

    When using our extension, we automatically collect and process the following data:

    Subscription downloads

    The extension is pre-bundled with a filter list containing information about the classification of websites which will be automatically updated, frequently. When updating, our servers will check to see if the timestamp of the local version is older than the timestamp of the remote version. If there is a newer filter list available, i.e. the remote timestamp is more recent than the local timestamp, the extension proceeds with downloading the new filter list. If the current version is up-to-date, the extension does not download the filter list. The only data transmitted is the timestamp. This data is used to identify issues that have not been reported by other filter list contributors and is subject to this privacy policy. The legal basis for processing such data is Art. 6 (1) f GDPR. Please see What rights do you have? for information about your rights to protect your personal data.

    Extension update checks

    Your browser periodically checks for updates of the extension. Some general information – browser name and version, extension version, date of the last update, operating system and your IP address – is transmitted during an update check. Updates to our extension for Chrome are handled by Google and are only subject to the Google Privacy Policy. We do not collect and process any such data.

    Geolocation data

    While using our extension, we collect and process information concerning your geolocation. We collect and process such data for technical reasons and security reasons, and to provide you with our services. The legal basis for such collecting and processing is Art. 6 (1) f GDPR. Please see What rights do you have? for information about your rights to protect your personal data.

    Information you give to us on a voluntary basis

    Feedback data

    When using our extension, we collect and process information you submit to us via our feedback form. We are thereby collecting and processing your IP address, the date and time of submission, your geolocation and the subject and content of your message. The legal basis for collecting and processing such data is Art. 6 (1) f GDPR. Please see What rights do you have? for information about your rights to protect your personal data.

    What is the purpose of data processing and what is the legal basis?

    Purpose of data collection and processing

    In compliance with Art. 5 (b) GDPR, we collect and process your personal data for specified, explicit and legitimate purposes and do not further process your data in a manner that is incompatible with those purposes.

    We collect and process your personal data solely for the following purposes:

    1. We collect and process your personal data, such as website logs and data relating to subscription downloads, extension update checks (such data is collected and processed by Google, see Google Privacy Policy), newsletter subscriptions and feedback data sent by you, for technical purposes. We mainly collect and process such data to prevent security attacks and are thus able to provide our services to you in a secure and data-efficient manner.
    2. We collect and process your personal data relating to subscription downloads, extension updates and feedback data sent to us by you to improve and evaluate our products.

    Legal basis of data collection and processing

    We collect and process your personal data in compliance with the GDPR, and the applicable EU laws and German national data protection laws.

    Collection and processing is based on your consent - Art. 6 (1) a GDPR, Art. 4 (11) GDPR

    We will always ask for your consent to the collection and processing of your personal data for the aforementioned specific purposes, unless the collection and processing of your personal data is permitted by statutory laws. Where you have provided us with your consent to the collection and processing of your personal data for the aforementioned specific purposes, you have the right to withdraw your consent at any time.

    Collection and processing is necessary for taking steps prior to enter into a contract - Art. 6 (1) b GDPR

    The collection and processing of your personal data may be necessary for the performance of a contract to which you may be a party. Prior to entering into such contract, the collection and processing of your personal data may also be necessary in order to take steps at your request. This applies for installation (data gathered by the browser) and the use of our extension, Trusted News (subscription updates).

    Collection and processing is necessary for compliance with a legal obligation to which the controller is subject – Art. 6 (1) c GDPR

    Collection and processing of your personal data may be necessary for compliance with a legal obligation to which we are subject under EU laws or the laws of a EU Member State.

    Collection and processing is necessary for the purposes of our legitimate interests - Art. 6 (1) f GDPR

    The collection and processing may be necessary for the purposes of our legitimate interests. We collect and process website logs for technical reasons, such as, but not limited to, preventing denial of service attacks. Denial of service is typically accomplished by flooding the targeted machine or resource with superfluous requests in an attempt to overload systems and prevent some or all legitimate requests from being fulfilled. Preventing such overloads of our systems and any security issues by denial of service attacks is in your and our vital interest and therefore we use the website logs. We use information collected and processed via subscription downloads, extension update checks and feedback data sent by you, for technical reasons, such as, but not limited to, ensuring the security of the extension version used by you. Ensuring the security of our extension is in your and our vital interest and therefore we use such data. Furthermore, we collect and process such data to ensure that our website and extension are constantly improved and adjusted to the changing requirements for an efficient usability and the technical environment. Ensuring the usability of our website and of our extension is in your and our vital interest and therefore we use such data.

    Do we disclose any personal data?

    We may only transfer your personal data to third parties without informing you separately beforehand in the following exceptional cases as explained below:

    We will not transfer your personal data to third parties as a matter of course without letting you know in advance. We will ask for your prior permission unless the transfer of such data is permitted by Art. 6 (1) b, c, f GDPR or any other applicable EU laws and German national data protection laws.

    International data transfers

    For the following services, we use non-EU/EEA service providers. We have carefully selected these external service providers and review them regularly to ensure that your privacy is preserved. The service providers provide sufficient guarantees to ensure an adequate level of data protection and may only use personal data for the purposes stipulated by us and in accordance with our instructions. We also contractually require the service providers to treat your personal data solely in accordance with this Privacy Policy and the European data protection laws.

    We use external service provider tools for email (GSuite); to analyze your use of our Websites (Google Analytics). These services are provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. In order to ensure an adequate level of data protection, we have entered into a data processing agreement including the EU Standard Contractual Clauses (processors) – Commission Decision C(2010)593. You can access a copy of this agreement here.

    Data retention

    Detailed website logs are retained for a period of 30 days, after which only the “aggregated usage statistics” that cannot be connected to a single user remain. Everything else is deleted. We never combine website log data with any other information about you. Data collected and processed by us via subscription downloads, extension update checks (such data are collected and processed by Google), newsletter subscriptions (IP address, date and time of subscription) and feedback forms sent by you are retained for a period of three months, after which only aggregated data remains. This data cannot be connected to a single user. Your email address, which is collected and processed by us via newsletter subscriptions is retained as long as you are subscribing to our newsletter. Please see What rights do you have? for information about your rights to protect your personal data.

    What rights do you have?

    In compliance with the GDPR and the applicable EU laws and German national data protection laws and to the extent legally permitted, you have the following rights to protect your personal data collected and processed by us:

    Information, access, rectification and restriction rights

    Naturally you have the right to receive, upon request, information about the personal data stored by us about you and information about how we collect, process and store your personal data. Where that is the case, you have the right to gain access to such personal data stored by us. You have the right to request from us the rectification of your inaccurate personal data. Taking into account the purposes of collecting and processing your data, you have the right to have incomplete personal data completed. You have the right to request restriction of processing.

    Right to data portability

    You also have the right (1) to receive all personal data concerning you and which you have provided to us, in a structured, commonly used and machine-readable format and (2) to transmit that data to another Controller.

    Right to erasure of your data

    You have the right to demand from us the erasure of your personal data, where – inter alia - one of the following grounds applies:

    Please note, if data needs to be retained for legal purposes pursuant to Art. 17 (3) GDPR, we will restrict the use of the respective data.

    Right to lodge a complaint with a supervisory authority

    You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the collection and processing of personal data relating to you infringes the GDPR.

    Right to object to the processing of your data

    You have the right to object at any time to the collection processing of your personal data on grounds relating to your particular situation, when collection and processing is based on our legitimate interest (Art. 6 (1) f GDPR).

    Right to withdraw your consent at any time

    You have the right to withdraw your consent at any time, when you have provided us with your consent to the collection and processing of your personal data for one or more specific purposes.

    How to exercise your rights

    To exercise your rights, please contact us via privacy@eyeo.com or mail to:

    eyeo GmbH
    Lichtstraße 25
    50825 Cologne
    Germany

Changes to this Privacy Policy

This Privacy Policy may be changed from time to time. The respective current version is available at: https://trusted-news.com/privacy-policy.html

March 2019