Privacy policy (trusted-news.com)

Privacy policy (short version)

Your protection and data confidentiality is of utmost importance to us ("eyeo", "we", "our"). The following privacy notice shall provide you with a general overview about the collection, processing and use (hereinafter together referred to as "processing") of your personal data on our website www.trusted-news.com (hereinafter referred to as “website”) and in our extension “Trusted News” (hereinafter referred to as “extension”). For more information regarding our processing activities, please view our complete privacy policy.

What kind of data do we process?

  1. While using the trusted-news.com website:
  2. While using our extension:

How do we collect data?

List of techniques and tools we use for data collection:

  1. On our website
  2. In our extension:

How and why do we use your data?

For technical purposes, such as, but not limited to, preventing security attacks, to improve our website/extension and to ensure website/extension security.

What is the legal basis of data processing?

We process your personal data in compliance with the European General Data Protection Regulation (Regulation (EU) 2016/679) (“GDPR”), the applicable EU laws and German national data protection laws.

How long do we keep data?

Note: “Aggregated usage statistics” and data without any connection to single users may be retained beyond these periods.

Our values

We collect as little data as possible. As far as anonymous or pseudonymous use is possible we anonymize or pseudonymize your data.

What rights do you have?

In compliance with the GDPR, and the applicable EU laws and German national data protection laws and to the extent legally permitted you have the right to:

Questions?

Contact our data protection officer Dr. Judith Nink at privacy@eyeo.com or Phone: +49 (0) 221 / 65028 598.

Privacy policy (long version)

Your protection and data confidentiality is of utmost importance to us ("eyeo", "we", "our"). We take the protection of your personal data very seriously and collect as little data as possible. This privacy policy shall inform you about the collection, processing and use of your personal data. Some personal data are necessary to provide our website www.trusted-news.com (hereinafter referred to as “website”) and our extension Trusted News (hereinafter referred to as “extension”). We gather and use personal data firmly within the provisions of the European General Data Protection Regulation (Regulation (EU) 2016/679) (“GDPR”), the applicable EU Laws and German national data protection laws. In the following text we will inform you about the specific data we collect, the scope and purpose of the collection and use of personal data by us when using our website and our extension, the legal basis for such collection and processing as well as your rights to protect your personal data.

Who is responsible for the data collection and processing (contacts)?

Controller

The legal person responsible for the collection, processing and/or use of personal data in connection with our products ("Controller") is:

eyeo GmbH
Lichtstraße 25
50825 Cologne
Germany

Data Protection Officer

If you have any queries relating your personal data, please do not hesitate to contact our Data Protection Officer: Dr. Judith Nink

What is personal data?

The purpose of data protection is to protect personal data. Personal data means any information relating to an identified or identifiable natural person ("data subject"). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. This information includes, for example, details such as name, postal address, email address or telephone number, but also nicknames, certificates and information about your interests.

What kind of data do we collect and process, and how?

Collection and processing of data on our website

Automatically collected and processed information

Website logs

While using our website, we automatically record website logs and are thereby collecting the following data for technical and for security reasons, and to provide you with our services:

The legal basis for processing such website logs is Art. 6 (1) f GDPR. Detailed logs are retained for a period of 30 days, after which only the “aggregated usage statistics” that cannot be connected to a single user, remain. Everything else will be deleted. We do not combine website log data with any other information about you. Please see the section below, What rights do you have?, for information about your rights to protect your personal data.

1 For more information, please refer to https://tools.ietf.org/html/rfc7231#section-5.5.3.
2 For more information, please refer to https://tools.ietf.org/html/rfc7231#section-5.5.2.
Information you give to us on a voluntary basis

Newsletter data

When using our website, we are optionally collecting and processing personal data you are submitting to us when you are subscribing to our newsletter. We are thereby collecting and processing your email address, IP address and the date and time of the subscription. We are only collecting and processing such data during the newsletter registration for purposes of sending out the newsletter and for security purposes. When subscribing to our newsletter, we will ask you to consent in the collection and processing of such data. You can withdraw your consent at any time by cancelling the subscription or by contacting us. You can cancel the subscription using the unsubscribe option provided in the newsletter.

The legal basis for collecting and processing such data is Art. 6 (1) a GDPR. Please see the section below, What rights do you have?, for information about your rights to protect your personal data.

Google Analytics

We use Google Analytics on our Website,a web analysis service of Google Inc. ("Google"). Google Analytics uses so-called "cookies" (text files which are stored on your computer and which enable you to analyse your use of our Website). The information generated by the cookie on your use of our Website (including your abbreviated IP address) is transmitted to a Google server in the United States and are stored there. Google will use this information to assess your use of our Website, to compile reports on the activities for us and to provide more services connected with use of our Website and the internet. It is also possible that Google may transmit this information to third parties if this is required by law, or if third parties process this information on behalf of Google.

You can deactivate Google Analytics by means of a browser add-on if you do not want to participate in Website analysis. You can download this here

Changes to this privacy

This privacy policy can be changed from time to time. The respective current version is available at: https://trusted-news.com/privacy

Collection and processing of data in our extension

Automatically collected and processed information

When using our extension, we automatically collect and process the following data:

Subscription downloads

The extension is pre-bundled with a filter list containing information about the classification of websites which will be automatically updated frequently. When updating, our servers will receive your IP address as well as some general information like your extension version, date of the last update, the URL accessed on our servers, operating system, browser name as well as browser version and last filter version. If a subscription download fails on several consecutive occasions, the updated address of the filter list is requested from our servers. The data transmitted includes the extension version, subscription address and any information about the error encountered. This data is used to identify issues that have not been reported by other filter list contributors and is subject to this privacy policy. The legal basis for processing such data is Art. 6 (1) f GDPR. Please see the section below, What rights do you have?, for information about your rights to protect your personal data.

Extension update checks

Your browser periodically checks for updates of the extension. Some general information – browser name and version, extension version, date of the last update, operating system and your IP address – are transmitted during an update check. Updates to our extension for Chrome are handled by Google and are only subject to the Google Privacy Policy. We are not collecting and processing any such data.

Emergency notifications

Our extension contains an emergency notification mechanism that allows it to notify you about important issues affecting your extension installation. This feature requires all extension installations to query an address in our website domain regularly to retrieve the list of active notifications. This request makes your IP address visible to our website and also sends some general information like your extension version, date of the last update, browser name, browser version and the number of previous extension downloads (the download number is limited to four, and will be displayed as 4+ after reaching this number). This data allows serving different notifications to different clients and is subject to this privacy policy. The legal basis for processing such data is Art. 6 (1) f GDPR. Please see the section below, What rights do you have?, for information about your rights to protect your personal data.

Geolocation data

While using our extension we collect and process information concerning your geolocation. We collect and process such data for technical reasons and security reasons and to provide you with our services. The legal basis for such collecting and processing is Art. 6 (1) f GDPR. Please see the section below, What rights do you have?, for information about your rights to protect your personal data.

Information you give to us on a voluntary basis

Feedback data

When using our extension, we collect and process information you submit to us via our feedback form. We are thereby collecting and processing your IP address, the date and time of submission, your geolocation and the subject and content of your message. The legal basis for collecting and processing such data is Art. 6 (1) f GDPR. Please see the section below, What rights do you have?, for information about your rights to protect your personal data.

What is the purpose of data processing and what is the legal basis?

Purpose of data collection and processing

In compliance with Art. 5 (b) GDPR, we collect and process your personal data for specified, explicit and legitimate purposes and do not further process your data in a manner that is incompatible with those purposes.

We collect and process your personal data solely for the following purposes:

Firstly, we collect and process your personal data, such as website logs and data relating to subscription downloads, extension update checks (such data is collected and processed by Google), emergency notifications, newsletter subscriptions and feedback data sent by you, for technical purposes. We mainly collect and process such data to prevent security attacks and are thus able to provide our services to you in a secure and data-efficient manner. Secondly, we collect and process your personal data relating to subscription downloads, extension updates, emergency downloads, and feedback data sent to us by you to improve and evaluate our products.

Legal basis of data collection and processing

We collect and process your personal data in compliance with the GDPR, and the applicable EU laws and German national data protection laws.

Collection and processing is based on your consent - Art. 6 (1) a GDPR, Art. 4 (11) GDPR

We will always ask for your consent to the collection and processing of your personal data for the aforementioned specific purposes, unless the collection and processing of your personal data is permitted by statutory laws. Where you have provided us with your consent to the collection and processing of your personal data for the aforementioned specific purposes, you have the right to withdraw your consent at any time.

Collection and processing is necessary for taking steps prior to enter into a contract - Art. 6 (1) b GDPR

The collection and processing of your personal data may be necessary for the performance of a contract to which you may be a party. Prior to entering into such contract, the collection and processing of your personal data may also be necessary in order to take steps at your request. This applies for installation (data gathered by the browser) and the use of our extension Trusted News (subscription updates).

Collection and processing is necessary for compliance with a legal obligation to which the controller is subject – Art. 6 (1) c GDPR

Collection and processing of your personal data may be necessary for compliance with a legal obligation to which we are subject under EU laws or the laws of a EU Member State.

Collection and processing is necessary for the purposes of our legitimate interests - Art. 6 (1) f GDPR

The collection and processing may be necessary for the purposes of our legitimate interests. We collect and process website logs for technical reasons, such as, but not limited to, preventing denial of service attacks. Denial of service is typically accomplished by flooding the targeted machine or resource with superfluous requests in an attempt to overload systems and prevent some or all legitimate requests from being fulfilled. Preventing such overloads of our systems and any security issues by denial of service attacks is in your and our vital interest and therefore we use the website logs. We use information collected and processed via subscription downloads, extension update checks, emergency notifications and feedback data sent by you, for technical reasons, such as, but not limited to, ensuring the security of the extension version used by you. Ensuring the security of our extension is in your and our vital interest and therefore we use such data. Furthermore, we collect and process such data to ensure that our website and extension are constantly improved and adjusted to the changing requirements for an efficient usability and the technical environment. Ensuring the usability of our website and of our extension is in your and our vital interest and therefore we use such data.

Do we disclose any personal data?

We may only transfer your personal data to third parties without informing you separately beforehand in the following exceptional cases as explained below:

We will not transfer your personal data to third parties as a matter of course without letting you know in advance. We will ask for your prior permission unless the transfer of such data is permitted by Art. 6 (1) b, c, f GDPR or any other applicable EU laws and German national data protection laws.

Data retention

Detailed website logs are retained for a period of 30 days, after which only the “aggregated usage statistics” that cannot be connected to a single user remain. Everything else is deleted. We never combine website log data with any other information about you. Data collected and processed by us via subscription downloads, extension update checks (such data are collected and processed by Google), emergency notifications, newsletter subscriptions (IP address, date and time of subscription) and feedback forms sent by you are retained for a period of three months, after which only aggregated data remains. This data cannot be connected to a single user. Your email address, which is collected and processed by us via newsletter subscriptions is retained as long as you are subscribing to our newsletter. Please see the section below, What rights do you have?, for information about your rights to protect your personal data.

What rights do you have?

In compliance with the GDPR and the applicable EU laws and German national data protection laws and to the extent legally permitted, you have the following rights to protect your personal data collected and processed by us:

Information, access, rectification and restriction rights

Naturally you have the right to receive, upon request, information about the personal data stored by us about you and information about how we collect, process and store your personal data. Where that is the case, you have the right to gain access to such personal data stored by us. You have the right to request from us the rectification of your inaccurate personal data. Taking into account the purposes of collecting and processing your data, you have the right to have incomplete personal data completed. You have the right to request restriction of processing.

Right to data portability

You also have the right (1) to receive all personal data concerning you and which you have provided to us, in a structured, commonly used and machine-readable format and (2) to transmit that data to another controller.

Right to erasure of your data

You have the right to demand from us the erasure of your personal data, where – inter alia - one of the following grounds applies:

Please note, if data needs to be retained for legal purposes pursuant to Art. 17 (3) GDPR, we will restrict the use of the respective data.

Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the collection and processing of personal data relating to you infringes the GDPR.

Right to object to the processing of your data

You have the right to object at any time to the collection processing of your personal data on grounds relating to your particular situation, when collection and processing is based on our legitimate interest (Art. 6 (1) f GDPR).

Right to withdraw your consent at any time

You have the right to withdraw your consent at any time, when you have provided us with your consent to the collection and processing of your personal data for one or more specific purposes.

How to exercise your rights

To exercise your rights, please contact us via privacy@eyeo.com or mail to:

eyeo GmbH
Lichtstraße 25
50825 Cologne
Germany

Changes to this privacy

This privacy policy can be changed from time to time. The respective current version is available at: https://trusted-news.com/privacy-policy.html

July 2018