Source: https://www.sirimangalo.org/info/our-privacy-policy/
Timestamp: 2019-04-23 16:55:28+00:00

Document:
The data “controller” according to Art. 4 (7) GDPR is Sirimangalo International, 31 Beaucourt Rd, Hamilton, ON, L8S 2R1, Canada.
Data is collected if you either directly provide it to us (like by filling out a form on our website) or it is automatically stored by our IT systems when you use our services (see section 3.1).
Some data we need to ensure the proper functioning of the website, other data you consent to provide us will only be used in manners as described for this special purpose in section 3.
We secure our traffic – especially the transmission of sensitive information – using SSL/TLS encryption. This is indicated by the “s” in the “https” of the requested URL in your browser’s address bar.
If we disclose data to other persons and companies (contract processors or third parties) within the course of our processing, transmit it to them or otherwise grant them access to the data, this shall only take place on the basis of a legal permission (e.g. if a transmission of the data to third parties, such as payment service providers, is required for contract fulfilment pursuant to Art. 6 (1) (b) GDPR), if you have consented, if this is provided for by a legal obligation or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.).
If we commission third parties with the processing of data on the basis of a so-called “data processing agreement” (DPA), this is done on the basis of Art. 28 GDPR.
You have the right to request confirmation as to whether or not personal data is being processed and to request information about these data as well as further information and a copy of the data in accordance with Art. 15 GDPR.
You have the right to request that the data concerning you which you have provided to us be received in accordance with Art. 20 GDPR and to request its transmission to other persons responsible.
You have the right to revoke granted consents according to Art. 7 (3) GDPR with effect for the future.
We store this information for supporting technical trouble shooting and protection against security threats. We will store this information for no longer than 60 days. The basis for this processing is Art. 6 (1) (b) GDPR.
for the purpose of answering your request at a later time. By clicking on “Send“ you agree to provide this information according to Art. 6 (1)(a) GDPR. You may revoke your consent at any time by contacting us (i.e. via email). We will store the data you provide until its deletion after the person responsible for processing considers the purpose of your request to be completed or because you revoked your consent for storing it.
This information is necessary for us to organize and plan our applications and to contact you. We will keep that data for as long as we think we might need it to contact you or you request its deletion.
in addition to your inquiry on the base of Art. 6 (1) (a) GDPR. This data will only be used for contacting you.
This information is necessary for us to stay in contact with you and will only be used for that purpose on the basis of Art. 6 (1) (f) GDPR.
The data will be only used for sending you the booklet, to reply to your request via email, to inform you about the feasibility of your request or to send details about the shipment.
If you would like to receive our newsletter, we require you to enter a valid email address and to confirm this email address before being subscribed (double opt-in method). Optionally you can provide your name which will only be used for setting a custom header in the newsletter emails you receive from us. This data will be stored and processed separately from other data we might have stored about you. We do not use this data for other purposes than sending you the newsletter and you can unsubscribe anytime from it by clicking on the “Unsubscribe” link at the bottom of every newsletter email.
Your email address will not be publicly visible and only be used to protect against unlawful misuse of our comment section. We have a legitimate interest in storing your email for such security measures according to Art. 6 (1) (f) GDPR.
We use the infrastructure services of DigitalOcean for hosting our websites. This service is provided by DigitalOcean LLC, 101 Avenue of the Americas, 10th Floor, New York, NY 10013. DigitalOcean is certified under the EU-US Privacy Shield and therefore ensures compliance with European privacy standards in the United States. By using their services, we automatically entered into a “data processing agreement” with them. For more information see https://www.digitalocean.com/security/gdpr/.
Our website includes plugins for the social network Facebook, Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. The Facebook plugins can be recognized by the Facebook logo or the comment box on our site. For an overview of Facebook plugins, see https://developers.facebook.com/docs/plugins/.
We use the service Gravatar of Automattic Inc. 60 29th Street #343, San Francisco, CA 94110, USA, within our online offer.
Gravatar is a service where users can log in and store profile pictures and their email addresses. If users leave contributions or comments with the respective email address on other online presences (above all in blogs), their profile pictures can be displayed next to the contributions or comments. For this purpose, the email address provided by the user is transmitted to Gravatar in encrypted form for the purpose of checking whether a profile has been saved for it. This is the sole purpose of the transmission of the email address and it will not be used for other purposes, but will be deleted thereafter.
The use of Gravatar is based on our legitimate interests within the meaning of Art. 6 (1) (f) GDPR, as we offer the possibility of personalising your contributions with a profile picture with the help of Gravatar.
If users do not want an image associated with their email address to appear in Gravatar’s comments, you should use a non-Gravatar email address for commenting. We would also like to point out that it is also possible to use an anonymous or no email address if users do not wish their own email address to be sent to Gravatar. Users can completely prevent the transfer of data by not using our comment system.
We accept donations via PayPal. The provider of this service is PayPal (Europe) S.à.r.l & Cie, S.C.A. (22-24 Boulevard Royal, L-2449 Luxembourg. If you click on the donation button, you will be redirected to PayPal. In order to meet legal requirements, we store your name and the amount you donated.

References: Art. 4
 Art. 6
 Art. 28
 Art. 15
 Art. 20
 Art. 7
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6