Data Privacy Policy
Compiiant to the EU-General Data Protection Rules, GDPR
Effective: 25.05.2018
www.mikes-media.com is the website of the artist Mike Scholz, in this following text named as MIKES-MEDIA.
Use of Facebook components
MIKES-MEDIA employs components provided by facebook.com. Facebook is a service of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA.
Each time MIKES-MEDIA receives an access request equipped with a Facebook component, the component prompts your browser to download an image of this Facebook component. Through this process, Facebook is informed precisely which page of our website is being visited.
When you access MIKES-MEDIA while logged into Facebook, Facebook uses information gathered by this component to identify the precise page you are viewing and associates this information to your personal account on Facebook. Whenever you click on the “Like“ button, for example, or enter a comment, this information is transmitted to your personal account on Facebook and stored there. In addition, Facebook is informed of your visit to MIKES-MEDIA This occurs regardless of whether you click on a component or not.
If you wish to prevent the transfer to and storage of data by Facebook about you and your interaction with MIKES-MEDIA, you must first log out of Facebook before visiting MIKES-MEDIA.
The data protection policies of Facebook provide additional information, in particular about the collection and use of data by Facebook, your rights in this regard as well as the options available to you for protecting your privacy:
You can find an overview of Facebook plugins at: https://www.facebook.com/privacy/explanation
Use of Vimeo components
MIKES-MEDIA uses Vimeo components on its site. Vimeo is a service of Vimeo LCC, 555 West 18th Street, New York, New York 10011, USA. Whenever you visit MIKES-MEDIA, which is equipped with such a component, this component causes the browser you are using to download a corresponding display of the Vimeo component. When you visit MIKES-MEDIA and are at the same time logged into Vimeo, Vimeo recognizes by means of the information collected by the component, which specific page you are visiting and assigns this information to your personal account at Vimeo. If, for example, you click on the “Play” button or make comments, this information will be conveyed to your personal user account at Vimeo and stored there. In addition, the information that you have visited MIKES-MEDIA will be passed on to Vimeo. This is done regardless of whether you click on the component/comment or not.
If you want to prevent this transmission and storage of data by Vimeo about you and your behaviour on our website, you must log out of Vimeo before you visit MIKES-MEDIA.
Vimeo’s Privacy Policy provides more detailed information concerning this, in particular regarding the collection and use of data by Vimeo: https://vimeo.com/privacy
If your personal data are processed, you are affected by the GDPR (EU-General Data Protection Rules) and you as the data subject are entitled to the following rights from your controller:
Find more Information here: https://ec.europa.eu/commission/priorities/justice-and-fundamental-rights/data-protection/2018-reform-eu-data-protection-rules_en
Responsible supervisory authority:
MIKES-MEDIA may be used without entering personal information.
Different rules may apply to certain services on our site, however, and are explained separately below. We collect personal information from you (e.g. name, address, email address, telephone number, etc.) in accordance with the provisions of EU data protection statutes. Information is considered personal if it can be associated exclusively to a specific natural person. The legal framework for data protection may be found in the The provisions below serve to provide information as to the manner, extent and purpose for collecting, using and processing personal information by the provider.
Please be aware that data transfer via the internet is subject to security risks and, therefore, complete protection against third-party access to transferred data cannot be ensured.
Cookies
Our website makes use of so-called session-cookies in order to recognize repeat use of our website by the same user/internet connection subscriber. Cookies are small text files that your internet browser downloads and stores on your computer. They are used to improve our website and services. MIKES-MEDIA uses so-called "Session-Cookies" in order to recognize repeat use of our website by the same user.
These Cookies will be deleted automatically after your visit.
You can prevent cookies from being installed by adjusting the settings on your browser software accordingly.
Recognition occurs through an IP address saved to the cookies. The information thereby obtained is used to improve our services and to expedite your access to the website.
You should be aware, however, that by doing so you may not be able to make full use of all the functions of our website.
Server Data
For technical reasons, data such as the following, which your internet browser transmits to us or to our web space provider (so called server log files), is collected:
- type and version of the browser you use
- operating system
- websites that linked you to our site (referrer URL)
- websites that you visit
- date and time of your visit
- your Internet Protocol (IP) address.
This anonymous data is stored separately from any personal information you may have provided, thereby making it impossible to connect it to any particular person. The data is used for statistical purposes in order to improve our website and services.
Contacting Us
On our website we offer you the opportunity to contact us, either by email and/or by using a contact form. In such event, information provided by the user is stored for the purpose of facilitating communications with the user.
No data is transferred to third parties. Nor is any of this information matched to any information that may be collected by other components of our website.
MIKES-MEDIA doesn´t track your activities..
Right of access by the data subject – Art. 15 GDPR
The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the following information:
(1) the purposes of the processing;
(2) the categories of personal data concerned;
(3) the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
(4) where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
(5) the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;
(6) the right to lodge a complaint with a supervisory authority;
(7) where the personal data are not collected from the data subject, any available information as to their source;
(8) the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
Where personal data are transferred to a third country or to an international organisation, the data subject shall have the right to be informed of the appropriate safeguards pursuant to Article 46 relating to the transfer. Please also see the Right to data portability, Art. 20 GDPR.
Right to rectification – Art. 16 GDPR
The data subject shall have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
Right to restriction of processing – Art. 18 GDPR
The data subject shall have the right to obtain from the controller restriction of processing where one of the following applies:
(1) the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data;
(2) the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
(3) the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims;
(4) the data subject has objected to processing pursuant to Article 21 (1) pending the verification whether the legitimate grounds of the controller override those of the data subject.
Where processing has been restricted under paragraph 1, such personal data shall, with the exception of storage, only be processed with the data subject’s consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
A data subject who has obtained restriction of processing pursuant to paragraph 1 shall be informed by the controller before the restriction of processing is lifted.
Right to erasure – Art. 17 GDPR
a) (‘right to be forgotten’)
The data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay and the controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies:
(1) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
(2) the data subject withdraws consent on which the processing is based according to point (a) of Article 6 (1), or point (a) of Article 9 (2), and where there is no other legal ground for the processing;
(3) the data subject objects to the processing pursuant to Article 21 (1) and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21 (2);
(4) the personal data have been unlawfully processed;
(5) the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject;
(6) the personal data have been collected in relation to the offer of information society services referred to in Article 8 (1).
Information to third parties
Where the controller has made the personal data public and is obliged pursuant to paragraph 1 to erase the personal data, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that the data subject has requested the erasure by such controllers of any links to, or copy or replication of, those personal data.
Exceptions:
Paragraphs 1 and 2 shall not apply to the extent that processing is necessary:
(1) for exercising the right of freedom of expression and information;
(2) for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
(3) for reasons of public interest in the area of public health in accordance with points (h) and (i) of Article 9 (2) as well as Article 9 (3);
(4) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89 (1) in so far as the right referred to in paragraph 1 is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
(5) for the establishment, exercise or defence of legal claims.
Notification obligation – Art. 19 GDPR
The controller shall communicate any rectification or erasure of personal data or restriction of processing carried out in accordance with Article 16, Article 17 (1) and Article 18 to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort.
The controller shall inform the data subject about those recipients if the data subject requests it.
The right to data portability does not apply to processing personal data which is required for performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
Right to data portability – Art. 20 GDPR
The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where:
2. the processing is based on consent pursuant to point (a) of Article 6 (1) or point (a) of Article 9 (2) or on a contract pursuant to point (b) of Article 6 (1); and
3. the processing is carried out by automated means.
In exercising his or her right to data portability pursuant to paragraph 1, the data subject
shall have the right to have the personal data transmitted directly from one controller to another, where technically feasible.
Right to object – Art. 21 GDPR
The data subject shall have the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on point (e) or (f) of Article 6 (1), including profiling based on those provisions.
The controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.
Conditions for consent – Art. 7 Paragraph 3 GDPR
The data subject shall have the right to withdraw his or her consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
Right to lodge a complaint with a supervisory authority – Art. 77 GDPR
Without prejudice to any other administrative or judicial remedy, every data subject shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement if the data subject considers that the processing of personal data relating to him or her infringes this Regulation.
The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Article 78.