PRIVACY POLICY
1) Information on the collection of personal data and contact details of the person responsible.
1.1 We are delighted that you have chosen to visit our website and express our gratitude for your interest. Below, we outline the procedures concerning your personal data when utilizing our website. Personal data refers to any information that can be used to identify you individually.
1.2 The entity responsible for data processing on this website, as defined by the General Data Protection Regulation (GDPR), is Cosmin-Dionisie Cazacu, operating under the name Sole Proprietorship Cosmin-Dionisie Cazacu, located at Madchamo, Kürnbergblick 1, 4048 Puchenau, Austria. You can reach us via telephone at +4368184453787 or via email at studio@madchamo.com. The data controller is the natural or legal person who, either alone or jointly with others, determines the purposes and means of processing personal data.
1.3 To ensure security and safeguard the transmission of personal data and other confidential content (such as orders or inquiries to the responsible party), we employ SSL or TLS encryption. You can identify a secure connection by the presence of “https://” and a lock symbol in your browser’s address bar.
2) Data collection
During your visit to our website for informational purposes, i.e., without registering or transmitting information to us, we only collect data that your browser automatically sends to our server (referred to as “server log files”). Upon accessing our website, we collect the following data, which is essential for the proper functioning and display of the website:
– The specific webpage visited
– Date and time of access
– Amount of data transmitted in bytes
– Referring source/link that led to the page
-Browser type used
– Operating system utilized
– IP address (anonymized, if applicable)
This processing is conducted in accordance with Article 6(1)(f) of the GDPR, based on our legitimate interest in enhancing the stability and functionality of our website. The data is not transferred or used for other purposes. However, we reserve the right to retrospectively review server log files in case of concrete indications of unlawful activity.
3) Cookies
To enhance your experience while visiting our website and enable the utilization of specific features, we employ cookies on various pages. These are small text files that are stored on your device. Some of these cookies are deleted once you close your browser (session cookies), while others remain on your device, allowing us or our partner companies to recognize your browser during your subsequent visits (persistent cookies). If cookies are utilized, they collect and process certain user information, such as browser and location data, as well as IP address values, to varying extents. Persistent cookies are automatically removed after a predetermined period, which may vary depending on the cookie.
If individual cookies implemented by us also process personal data, the processing is conducted in accordance with Article 6(1)(b) of the GDPR for contract execution or Article 6(1)(f) for our legitimate interests in optimizing website functionality and creating a user-friendly and effective page visit experience.
We may collaborate with advertising partners to enhance the appeal of our website to you. Consequently, cookies from partner companies may also be stored on your device when you visit our website (third-party cookies). In cases where we work with such advertising partners, you will be individually and separately informed about the use of these cookies and the extent of information collected in each instance in the subsequent sections.
Kindly note that you can configure your browser settings to receive notifications about cookie placement and make individual decisions regarding their acceptance or rejection for specific cases or overall exclusion. Each browser manages cookie settings differently, and instructions on how to modify these settings can be found in the help menu of each respective browser. Here are links for configuring cookie settings in popular browsers:
Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
Opera: http://help.opera.com/Windows/10.20/de/cookies.html
Please note that if you do not accept cookies, the functionality of our website may be limited.
4) Contact
Personal data is gathered when you reach out to us, such as through a contact form or email. The specific data collected via a contact form is outlined within the respective form. This data is stored and utilized solely for the purpose of addressing your inquiry or contacting you, along with the associated technical administration. The legal basis for processing this data is our legitimate interest in responding to your inquiry, as stipulated in Article 6(1)(f) of the GDPR. If your contact pertains to entering into a contract, the additional legal basis for processing is Article 6(1)(b) of the GDPR. Your data will be deleted once your inquiry has been conclusively addressed, provided that the circumstances indicate resolution, and there are no conflicting statutory retention obligations.
5) Utilization of Customer Data for Direct Marketing
5.1 Subscription to Our Email Newsletter:
Upon subscribing to our email newsletter, you will receive regular updates about our offers. The only mandatory information required for newsletter delivery is your email address. Optional data provided will be used to personalize your experience. We employ the double opt-in procedure for newsletter subscription, meaning we will only send you newsletters after you have explicitly confirmed your consent. Upon subscription, you will receive a confirmation email requesting you to verify your intention to receive the newsletter by clicking a designated link.
By activating the confirmation link, you provide consent for the use of your personal data in accordance with Article 6(1)(a) of the GDPR. Upon newsletter registration, we store your IP address, provided by your Internet service provider (ISP), as well as the date and time of registration to detect any potential misuse of your email address. The data collected during newsletter registration is exclusively used for advertising purposes via the newsletter. You can unsubscribe from the newsletter at any time using the provided link in the newsletter or by contacting the responsible party mentioned at the outset. Upon unsubscribing, your email address will be promptly removed from our newsletter distribution list, unless you have expressly consented to further use of your data, or we reserve the right to use your data in a manner permitted by law, which will be indicated in this declaration.
5.2 Newsletter Dispatch via MailChimp:
Our email newsletters are dispatched using the services of The Rocket Science Group, LLC d/b/a MailChimp, located at 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA (http://www.mailchimp.com/). We provide MailChimp with the data you supplied during newsletter registration, in accordance with Article 6(1)(f) of the GDPR, serving our legitimate interest in utilizing an efficient, secure, and user-friendly newsletter system. Please note that your data is typically transferred to a MailChimp server in the USA and stored there.
MailChimp employs this data to dispatch newsletters on our behalf and to perform statistical evaluations. Sent emails may contain web beacons or tracking pixels, single-pixel image files stored on our website, enabling MailChimp to determine if a newsletter has been opened and which links have been clicked. Web beacons also collect data on newsletter recipients (email address, retrieval time, IP address, browser type, and operating system) for statistical evaluation, allowing MailChimp to create automated statistics indicating whether a recipient has opened a newsletter.
If you wish to deactivate data analysis for statistical purposes, you must unsubscribe from the newsletter.
MailChimp may utilize this data for its own purposes, in line with Article 6(1)(f) of the GDPR, such as service optimization and market research, but does not contact recipients directly or share data with third parties.
To safeguard your data in the USA, we have entered into a data processing agreement (“Data Processing Agreement”) with MailChimp, based on the standard contractual clauses of the European Commission, enabling the transfer of personal data to MailChimp. The data processing agreement can be accessed at the following URL:
https://mailchimp.com/legal/privacy/
6) Web Analytics Services – Google Analytics
This website utilizes Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google (Universal) Analytics employs “cookies,” text files placed on your computer, to analyze user interaction with the site. Information generated by the cookie regarding your website usage (including your IP address) is transmitted to and stored by Google on servers in the United States.
Google (Universal) Analytics on this website is configured exclusively with the “_anonymizeIp()” extension, ensuring anonymization of IP addresses by shortening and eliminating direct personal identification. With this extension, your IP address is shortened by Google within the European Union or other countries participating in the Agreement on the European Economic Area before transmission. Only in exceptional circumstances will the full IP address be transmitted to a Google LLC server in the USA and shortened there. Google employs this information on our behalf to evaluate website usage, compile reports on website activity, and provide other services related to website activity and internet usage. The IP address transmitted by your browser as part of Google (Universal) Analytics will not be merged with other data from Google.
Google Analytics also facilitates the creation of statistics on the age, gender, and interests of website visitors based on an evaluation of interest-based advertising and the inclusion of third-party data via a feature known as “demographics.” This enables the categorization and differentiation of user groups for targeted marketing efforts. However, data collected through “demographics” cannot be attributed to specific individuals.
All aforementioned processes, particularly the use of Google Analytics cookies to retrieve information from the device used, will only occur with your explicit consent in accordance with Article 6(1)(a) of the GDPR. Without your consent, Google Analytics will not be active during your website visit.
You can withdraw your consent at any time for future effect. To do so, please disable this service in the “Cookie Consent Tool” provided on the website. We have entered into a data processing agreement with Google for the use of Google Analytics, obligating Google to safeguard the data of our website visitors and refrain from sharing it with third parties.
Regarding data transfer from the EU to the USA, Google adheres to standard data protection clauses issued by the European Commission, ensuring compliance with European data protection standards in the USA.
For more information on Google (Universal) Analytics, please visit: https://policies.google.com/privacy?hl=de&gl=de
7) Page functionalities
7.1 Facebook Plugins with 2-Click Solution:
Our website incorporates social plugins (“plugins”) from the social network Facebook, operated by Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”).
To enhance your data protection while browsing our website, these plugins are initially deactivated through a “2-click” solution integrated into the page. You can identify deactivated plugins as they appear grayed out. This setup ensures that upon accessing a page containing such plugins, no connection is established with Facebook servers until you activate the plugins, giving consent for data transfer in accordance with Art. 6(1)(a) DSGVO. Upon activation, your browser establishes a direct connection to Facebook servers. The plugin’s content is then transmitted directly to your browser and integrated into the page. Subsequently, the plugin sends data (including your IP address) to Facebook. We have no control over the extent of data collected by Facebook through these plugins. As far as we know, Facebook receives information about the pages of ours you are currently and previously accessing. Additionally, even if you don’t have a Facebook profile or aren’t logged in, Facebook receives information when your browser accesses our page. This collected information (including your IP address) is sent from your browser directly to a Meta Platforms Inc. server in the USA and stored there. Interactions with these plugins result in the transmission of corresponding information directly to a Facebook server, where it is stored and displayed on Facebook to your contacts.
You can withdraw your consent at any time by deactivating the activated plugin. However, revocation does not affect data already transferred to Facebook.
For details on data collection, processing, and use by Facebook, and your privacy rights and settings, refer to Facebook’s privacy policy: https://www.facebook.com/policy.php
7.2 Instagram plugin as shariff solution
Our website incorporates social plugins (“plugins”) from the online service Instagram, operated by Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland (“Facebook”).
To bolster data protection while browsing our website, these buttons are integrated as HTML links instead of unrestricted plugins. This ensures that when you access a page containing such buttons, no connection is made to Instagram servers until you click the button. Clicking the button opens a new browser window, directing you to the Instagram page, where you can interact with the plugins (possibly after logging in).
For details on data collection, processing, and use by Instagram, and your privacy rights and settings, refer to Instagram’s privacy policy: https://help.instagram.com/155833707900388/
7.3 LinkedIn plugin with 2-click solution
Our website integrates social plugins (“plugins”) from the online service LinkedIn, operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”).
To enhance your data protection while browsing our website, these plugins are initially deactivated through a “2-click” solution. Deactivated plugins are recognizable as they appear grayed out. This setup ensures that when you access a page containing such plugins, no connection is established with LinkedIn servers until you activate the plugins, thereby providing consent for data transfer in accordance with Art. 6(1)(a) DSGVO. Upon activation, your browser establishes a direct connection to LinkedIn servers. The plugin’s content is then transmitted directly to your browser and integrated into the page. Subsequently, the plugin sends data (including your IP address) to LinkedIn. We have no control over the extent of data collected by LinkedIn through these plugins. As far as we know, LinkedIn receives information about the pages of ours you are currently and previously accessing. Additionally, even if you don’t have a LinkedIn profile or aren’t logged in, LinkedIn receives information when your browser accesses our page. This collected information (including your IP address) is sent from your browser directly to a LinkedIn Inc. server in the USA and stored there. Interactions with these plugins result in the transmission of corresponding information directly to a LinkedIn server, where it is stored and displayed on LinkedIn to your contacts.
You can withdraw your consent at any time by deactivating the activated plugin. However, revocation does not affect data already transferred to LinkedIn.
For details on data collection, processing, and use by LinkedIn, and your privacy rights and settings, refer to LinkedIn’s privacy policy: https://www.linkedin.com/legal/privacy-policy
7.4 X plugins with 2-click solution
Our website incorporates social plugins (“plugins”) from the microblogging service X, operated by Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland (“Twitter”).
To enhance the protection of your data during your visit to our website, these plugins are initially deactivated using a “2-click” solution integrated into the page. You can identify deactivated plugins by their grayed-out appearance. This integration ensures that when you access a page containing such plugins, no connection is established with Twitter servers until you activate the plugins, thereby providing consent for data transfer in accordance with Art. 6(1)(a) DSGVO. Upon activation, your browser establishes a direct connection to Twitter servers. The content of the respective plugin is then transmitted directly to your browser and integrated into the page. Subsequently, the plugin transmits data (including your IP address) to Twitter. We have no influence over the extent of data collected by Twitter through these plugins. To the best of our knowledge, Twitter receives information about the pages you are currently and previously accessing on our website. By integrating these plugins, Twitter also receives information if your browser accessed the corresponding page of our website, even if you do not have a Twitter profile or are not currently logged in. The collected information (including your IP address) is sent from your browser directly to a Twitter Inc. server in the USA and stored there. If you interact with the plugins, the corresponding information is also transmitted directly to a Twitter server and stored there. The information is subsequently published on Twitter and displayed to your contacts.
You can revoke your consent at any time by deactivating the activated plugin by clicking on it again. However, revocation does not affect data that has already been transferred to Twitter.
For details regarding the purpose, scope, and further processing of data by Twitter, as well as your privacy rights and settings, please refer to Twitter’s privacy policy: https://twitter.com/privacy
7.5 Use of Youtube videos
The website utilizes the YouTube embedding function to present and play videos from the provider “YouTube,” which is owned by Google Ireland Limited, located at Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).
We employ the extended data protection mode, wherein user information is reportedly only stored when videos are played. When playback of embedded YouTube videos commences, “YouTube” uses cookies to gather data on user behavior. According to information from “YouTube,” these cookies are employed to gather video statistics, enhance user-friendliness, and prevent abusive behavior. If you are logged into Google, your data is directly linked to your account upon clicking on a video. To prevent this association with your YouTube profile, you must log out before activating the button. You have the right to object to the creation of these user profiles, but this action requires contacting YouTube. Utilizing YouTube may also lead to the transmission of personal data to Google LLC servers in the USA.
In addition, a connection to the Google network is established each time the website is accessed, which may trigger further data processing operations beyond our control.
All the described processing, particularly the extraction of information from the end device via tracking pixels, is conducted only if you expressly consent in accordance with Art. 6 para. 1 lit. a DSGVO. Without this consent, YouTube videos will not be utilized during your site visit.
You can revoke your consent at any time for future effect. To do so, deactivate this service in the “cookie consent tool” provided on the website or via alternative options communicated on the website.
For further information on data protection at “YouTube,” refer to the YouTube terms of use at https://www.youtube.com/static?template=terms and Google’s privacy policy at https://www.google.de/intl/de/policies/privacy.
7.6 Use of Vimeo videos
The website integrates plugins from the video portal Vimeo, operated by Vimeo, LLC, located at 555 West 18th Street, New York, New York 10011, USA. When you access a page containing such a plugin, your browser establishes a direct connection to Vimeo’s servers. The plugin’s content is then transmitted directly to your browser and integrated into the page. Through this process, Vimeo is informed that your browser has accessed the corresponding page of our website, even if you do not have a Vimeo account or are not logged in to Vimeo. This information, including your IP address, is sent by your browser directly to a Vimeo server in the USA and stored there.
If you are logged in to Vimeo, your visit to our website can be directly associated with your Vimeo account. Additionally, if you interact with the plugins (such as by pressing the start button of a video), this information is transmitted directly to a Vimeo server and stored there.
To prevent Vimeo from directly linking the data collected via our website to your Vimeo account, you must log out of Vimeo before visiting our website.
For details regarding the purpose and scope of data collection, as well as the further processing and use of data by Vimeo, and your rights in this regard, please consult Vimeo’s privacy policy: https://vimeo.com/privacy
For videos from Vimeo embedded on our site, Vimeo’s own tracking, which we have no control over, is automatically integrated with Google Analytics, operated by Google Ireland Limited. Google Analytics uses cookies for tracking, allowing analysis of your website usage. The information generated by the cookie about your use of the website is transmitted to and stored by Google on servers in the United States.
All the processing described above, including the extraction of information from the end device via tracking pixels, will only occur if you have provided express consent in accordance with Art. 6 (1) a DSGVO. Without this consent, Vimeo videos will not be used during your visit to the site.
You can revoke your consent at any time for future effect. To do so, deactivate this service in the “cookie consent tool” provided on the website, or use alternative options communicated to you on the website.
7.7 Web fonts
This website utilizes web fonts provided by various font services for consistent font display. Here’s a breakdown of the font services used:
Adobe Fonts (Typekit):
Web fonts provided by Adobe Systems Incorporated are used for uniform font display. Your browser loads these web fonts from Adobe’s servers when you visit the site, which may involve the transmission of personal data to Adobe’s servers in the USA. Processing of personal data occurs only if you have given explicit consent, and you can revoke this consent at any time. For more information about Adobe Fonts and Adobe’s privacy policy, visit https://fonts.adobe.com/ and https://www.adobe.com/de/privacy.html respectively.
FontAwesome:
Web fonts from FontAwesome, a service of Fonticons, Inc., are used for consistent font display. Your browser loads these web fonts from FontAwesome’s servers when you access the site, potentially transmitting personal data to FontAwesome’s servers in the USA. Processing of personal data only occurs with your express consent, which you can revoke at any time. If your browser doesn’t support web fonts, a default font will be used.
Learn more about FontAwesome at https://fontawesome.com/privacy.
Google Web Fonts:
Web fonts provided by Google Ireland Limited are used for consistent font display. Your browser loads these web fonts from Google’s servers, which may result in the transmission of personal data to Google LLC’s servers in the USA. Personal data processing is contingent upon your express consent, which can be revoked at any time. If your browser doesn’t support web fonts, a default font will be used. Get further information on Google Web Fonts at https://developers.google.com/fonts/faq and review Google’s privacy policy at https://www.google.com/policies/privacy/.
You can manage your consent for these font services through the “Cookie Consent Tool” provided on the website.
7.8 Google Translate
This website employs the Google Translate service, provided by Google Ireland Limited, for language translation purposes. When you select a national language, your browser connects to Google’s servers to display the translation automatically. Google utilizes cookies to analyze how users interact with the site, storing information such as your IP address on servers located in the United States.
The processing of personal data, if undertaken, is based on our legitimate interest in ensuring universal accessibility of our website, as per Article 6(1)(f) of the GDPR.
For more details regarding Google Translate and Google’s privacy practices, please refer to their privacy policy available at: https://www.google.com/policies/privacy/
8) Data subject rights
Under the applicable data protection law, you have the following rights concerning the processing of your personal data by the controller:
– Right to Information (Art. 15 DSGVO): You have the right to obtain information from the controller about the processing of your personal data.
– Right to Rectification (Art. 16 DSGVO): You have the right to request the correction of inaccurate or incomplete personal data held by the controller.
– Right to Erasure (Art. 17 DSGVO): You have the right to request the deletion of your personal data under certain circumstances, such as when the data is no longer necessary for the purpose for which it was collected.
– Right to Restriction of Processing (Art. 18 DSGVO): You have the right to request the restriction of the processing of your personal data under certain circumstances, for example, if you contest the accuracy of the data.
– Right to Information (Art. 19 GDPR): If you have exercised your right to rectification, erasure, or restriction of processing, the controller is obliged to inform each recipient to whom the personal data have been disclosed.
– Right to Data Portability (Art. 20 DSGVO): You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit those data to another controller without hindrance from the controller to which the personal data were provided.
– Right to Revoke Consent (Art. 7 (3) DSGVO): If the processing of your personal data is based on your consent, you have the right to revoke that consent at any time.
– Right to Lodge a Complaint (Art. 77 GDPR): You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data infringes data protection regulations.
These rights enable you to intervene in the processing of your personal data and ensure that your data protection rights are respected by the controller.
8.2 Right of objection
Under certain circumstances, you have the right to object to the processing of your personal data. Here are the details:
Objection to Processing Based on Legitimate Interest: If we process your personal data based on our legitimate interests, you have the right to object to this processing at any time, provided there are grounds relating to your particular situation. If you object, we will cease processing your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or if the processing is necessary for the establishment, exercise, or defense of legal claims.
Objection to Direct Marketing: If we process your personal data for direct marketing purposes, you have the right to object to such processing at any time. If you exercise this right, we will stop processing your data for direct marketing purposes.
To exercise your right to object, you can follow the procedure described above. We will respect your wishes and cease processing your personal data for the specified purposes.
9) Duration of the storage of personal data
The duration for which we store your personal data depends on various factors, including the legal basis for processing and the purpose for which the data was collected. Here’s a breakdown:
– Consent-based Processing (Art. 6(1)(a) DSGVO): If we process your personal data based on explicit consent, we will store this data until you revoke your consent.
– Legal Retention Periods (Art. 6(1)(b) DSGVO): If there are legal retention periods applicable to the data processed for business or similar obligations, we will delete the data after these retention periods expire, provided it is no longer necessary for contract fulfillment or initiation, and there is no legitimate interest on our part to continue storing it.
– Legitimate Interest (Art. 6(1)(f) DSGVO): Personal data processed based on our legitimate interests will be stored until you exercise your right to object under Art. 21(1) DSGVO, unless we have compelling legitimate grounds for processing that override your interests, rights, and freedoms, or the processing is necessary for asserting, exercising, or defending legal claims.
– Direct Marketing (Art. 6(1)(f) DSGVO): Data processed for direct marketing purposes will be stored until you exercise your right to object under Art. 21(2) DSGVO.
In summary, the duration of storage varies depending on the legal basis and specific circumstances of the data processing. We ensure compliance with applicable laws and regulations regarding data retention.
Changes
Although most changes are likely to be minor, Madchamo may change its Privacy Policy from time to time in Madchamo’s sole discretion. Therefore we encourage visitors to frequently check this page for any changes. If you are subscribed to our Newsletter, you will be informed of these changes. Using our website and our services will constitute your acceptance of our Privacy Policy and the changes.
