Source: https://www.mrjinx.tv/privacy-policy/
Timestamp: 2019-04-19 20:13:14+00:00

Document:
– Content data (e.g., text input, photos, videos).
Visitors and users of the online offer. These are either customers that use our online platform to conduct research or participants of the online studies (hereinafter we refer to the affected persons as “users”).
“Personal data” means any information relating to an identified or identifiable natural person (hereinafter referred to as “affected person”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by assignment to an identifier such as a name, an identification number, location data, an online identifier (e.g. cookie) or to one or more special features that express the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person.
“Processing” means any process performed with or without the aid of automated procedures or any such process associated with personal data. The term is broadly defined and includes virtually every handling of data.
“Pseudonymisation” means the processing of personal data in such a way that the personal data can no longer be assigned to a specific affected person without additional information being provided, provided that such additional information is kept separate and subject to technical and organizational measures to ensure that the personal data not assigned to an identified or identifiable natural person.
“Profiling” means any kind of automated processing of personal data which involves the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular aspects relating to job performance, economic situation, health, personal preferences, interests, reliability, behavior, whereabouts or relocation in order to analyze or predict these aspects of that natural person.
“Controller” means the natural or legal person, public authority, body or body that decides, alone or in concert with others, on the purposes and means of processing personal data.
Such measures shall in particular include ensuring the confidentiality, integrity and availability of data by controlling physical access to the data, as well as the access, input, transmission, security of availability and its separation. Furthermore, we have established procedures to ensure the exercise of rights of data subjects, deletion of data and reaction to endangerment of data. Furthermore, we already consider the protection of personal data during the development or selection of hardware, software and procedures, in accordance with the principle of data protection through technology design and data protection-friendly pre-settings (Art. 25 GDPR).
If we commission third parties to process data on the basis of a so-called “data processing contract”, this is done on the basis of Art. 28 GDPR.
You have the right to demand that the data relating to you, which you have provided to us, be obtained in accordance with Art. 20 GDPR and request their transmission to other responsible entities.
In accordance with Art. 77 GDPR, you also have the right to file a complaint with the governing authority.
You have the right to revoke your consent, provided according to Art. 7 para. 3 GDPR, at any time with future effect.
In accordance with the Dutch tax law, we are required to keep data to fulfil our tax obligations for 7 years and 10 years regarding our electronic services.
We process the data of our customers in the context of the order processes in our online platform to enable them to select and order the selected products and services, as well as their payment and delivery, respectively execution.
The processed data includes inventory data, communication data, contract data, payment data and the persons affected by the processing include our customers, interested parties and other business partners. The processing takes place for the purpose of providing contractual services in the context of operating an online platform, billing, delivery and customer services. We use session cookies for storing the contents of the shopping cart and permanent cookies for storing the login status.
Users have to create a user account, in particular to view their orders. During the registration process, the required information will be communicated to the users. The user accounts are not public and cannot be indexed by search engines. If users have terminated their user account, their data will be deleted with regard to the user account, subject to its storage is necessary for commercial or tax reasons according to Art. 6 Para. 1 lit. c GDPR. Data in the customer account remain up to its deletion with subsequent archiving in the case of a legal obligation. It is up to the users to save their data before the end of the contract if they have given notice of termination.
The deletion takes place after the expiry of statutory warranty and comparable obligations, the necessity of data storage is reviewed every three years; in the case of statutory archiving obligations, the deletion takes place after their expiry (end of commercial law (10 years) and tax law (10 years) storage obligation).
We process inventory data (e.g., customer master data, such as names or addresses), contact data (e.g., e-mail, telephone numbers), content data (e.g., text entries, photographs, videos), contract data (e.g., subject matter of the contract, term), payment data (e.g., bank details, payment history), and usage and metadata (e.g. as part of the evaluation and performance measurement of marketing measures). We do not process special categories of personal data unless these are part of commissioned processing. This includes our customers, prospects, their customers, users, website visitors or employees, as well as third parties. The purpose of the processing is to provide contractual services, billing and our customer service. The legal basis for processing results from Art. 6 para. 1 lit. b GDPR (contractual services), Art. 6 para. 1 lit. f GDPR (analysis, statistics, optimisation, safety measures). We process data which are necessary to justify and fulfil the contractual services and point out the necessity of their disclosure. Disclosure to external parties only takes place if it is necessary within the framework of an order. When processing the data provided to us within the scope of an order, we act in accordance with the instructions of the client and the legal requirements for order processing pursuant to Art. 28 GDPR and process the data for no other purposes than those stipulated in the order.
We delete the data after the expiry of statutory warranty and comparable obligations. The necessity of storing the data is checked every three years; in the case of statutory archiving obligations, the data is deleted after their expiry. In the case of data disclosed to us within the scope of an order by the customer, we delete the data in accordance with the specifications of the order, generally after the end of the order.
As part of the fulfilment of contracts, we suspend the payment service providers on the basis of Art. 6 para. 1 lit. b. GDPR. Furthermore, we employ external payment service providers on the basis of our legitimate interests pursuant to Art. 6 para. 1 lit. f. GDPR to provide our users with effective and secure payment options.
We disclose or transmit data to the tax authorities, consultants, such as tax consultants or auditors, as well as similar service providers.
In order to operate our business economically, to be able to recognize market tendencies, wishes of the contracting parties and users, we analyze the data available to us to business processes, contracts, inquiries, etc. We process inventory data, communication data, contract data, payment data, usage data, and metadata on the basis of Art. 6 para. 1 lit. f. GDPR, whereby the persons concerned include contractual partners, interested parties, customers, visitors and users of our online offer.
The application procedure requires that applicants provide us with personal data. If we offer an online form, the necessary data for application will be explicitly stated or otherwise result from the job descriptions and generally include personal data, postal and contact addresses and the documents belonging to the application, such as cover letter, curriculum vitae and certificates. In addition, applicants may voluntarily provide us with additional information.
If special categories of personal data within the meaning of Art. 9 para. 1 GDPR are voluntarily communicated within the scope of the application procedure, they are additionally processed in accordance with Art. 9 para. 2 letter b GDPR (e.g. health data, e.g. severely disabled status or ethnic origin). If special categories of personal data within the meaning of Art. 9 para. 1 GDPR are requested from applicants during the application procedure, they are additionally processed in accordance with Art. 9 para. 2 lit. a GDPR (e.g. health data, if these are required for the exercise of the profession).
As part of the use of our registration and login functions as well as the use of the user account, we store the IP address and the time of the respective user action. The data is stored on the basis of our legitimate interests as well as the user’s protection against misuse and other unauthorized use. A passing on of this data to third parties does not take place in principle, unless it is necessary to pursue our claims or there is a legal obligation in accordance with Art. 6 para. 1 lit. c. GDPR. The IP addresses are anonymized or deleted after 7 days at the latest.
On the basis of our legitimate interests in an efficient, secure and user-friendly comment management pursuant to Art. 6 para. 1 letter f. GDPR we make use of the commentary service DISQUS, offered by DISQUS, Inc. 301 Howard St, Floor 3 San Francisco, California- 94105, USA. DISQUS is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with European data protection law: https://www.privacyshield.gov/participant?id=a2zt0000000TRkEAAW&status=Active.
To use the DISQUS comment feature, users can log in via their own DISQUS user account or an existing social media account (e.g. OpenID, Facebook, Twitter or Google). DISQUS obtains the user’s login data from the platforms. It is also possible to use the DISQUS comment function as a guest, without creating or using user accounts at DISQUS or one of the specified social media providers.
We only embed DISQUS with its functions into our website, whereby we can influence the comments of the users. However, the users enter into a direct contractual relationship with DISQUS, in the context of which DISQUS processes the comments of the users and is a contact for any deletion of the user’s data. We refer to the DISQUS data protection declaration: https://help.disqus.com/terms-and-policies/disqus-privacy-policy and also point out to users that they can assume that DISQUS stores not only the comment content but also their IP address and the time of the comment and can store cookies on the users’ computers and use them to display advertising. However, users may object to the processing of their data for the purpose of displaying advertisements: https://disqus.com/data-sharing-settings.
If users leave comments or other contributions, their IP addresses may be used on the basis of our legitimate interests within the meaning of Art. 6 (1) (f). GDPR for 7 days. This takes place for our safety, if someone leaves illegal contents in comments and contributions (insults, forbidden political propaganda, etc.). In this case, we can be prosecuted ourselves for the comment or contribution and are therefore interested in the identity of the author.
Our online offer uses the service “Akismet” offered by Automattic Inc, 60 29th Street #343, San Francisco, CA 94110, USA. The use is based on our legitimate interests within the meaning of Art. 6 para. 1 lit. f) GDPR. With the help of this service, comments of real people are distinguished from spam comments. All comment information is sent to a server in the USA, where it is analyzed and stored for four days for comparison purposes. If a comment has been classified as spam, the data will be stored after this time. This information includes the name entered, the e-mail address, the IP address, the comment content, the referrer, information on the browser used, the computer system and the time of entry.
By displaying the images, Gravatar obtains the IP address of the users, as this is necessary for communication between a browser and an online service. Further information on the collection and use of data by Gravatar can be found in Automattic’s data protection information: https://automattic.com/privacy/.
Emojis are used on the basis of our legitimate interests, i.e. interest in an attractive design of our online offer in accordance with Art. 6 para. 1 lit. f. GDPR.
We use the CRM system of hubspot.com HubSpot Inc, 25 First Street, 2nd Floor, Cambridge, MA 02141, USA, in order to process user inquiries faster and more efficiently (legitimate interest according to art. 6 par. 1 lit. f. GDPR).
HubSpot is certified under the Privacy Shield Agreement, providing an additional guarantee to comply with European data protection law if data is processed in the USA. (https://www.privacyshield.gov/participant?id=a2zt0000000TN8pAAG&status=Active).
HubSpot uses the user data only for technical processing of the requests and does not pass them on to third parties. To use HubSpot, at least a correct e-mail address is required. Pseudonymous use is possible. During the processing of service requests, it may be necessary to collect further data (name, address).
If users do not agree to the collection and storage of data in HubSpot’s external system, we offer them alternative contact options for submitting service requests by e-mail, telephone, fax or post.
Users can find further information in HubSpot’s data protection declaration: https://legal.hubspot.com/privacy-policy.
Credentials: To subscribe to the newsletter, simply enter your name and e-mail address. We ask you to enter your name in the newsletter in order to address you personally.
The sending of the newsletter and the performance measurement associated with it are carried out on the basis of the recipients’ consent pursuant to Art. 6 para. 1 lit. a, Art. 7 GDPR or, if consent is not required, on the basis of our legitimate interests in direct marketing pursuant to Art. 6 para. 1 lt. f. GDPR.
Cancellation/Revocation – You can cancel the subscription to our newsletter at any time, i.e. revoke your consent. You will find a link to cancel the newsletter at the end of each newsletter. We may store the e-mail addresses we have unsubscribed for up to three years on the basis of our legitimate interests before we delete them in order to be able to prove a previously given consent. The processing of these data is limited to the purpose of a possible defence against claims. An individual application for cancellation is possible at any time, provided that at the same time the former existence of a consent is confirmed.
The newsletter is sent through the email marketing service Mailerlite Paupio g. 28, Vilnius 11341, Lithuania. The data protection regulations of the service provider can be viewed here: https://www.mailerlite.com/privacy-policy. The service provider will be used on the basis of our legitimate interests in accordance with Art. 6 para. 1 lit. f. GDPR and an order processing contract pursuant to Art. 28 para. 3 sentence 1 GDPR.
The service provider can use the recipient’s data in pseudonymous form, i.e. without assignment to a user, to optimize or improve its own services, e.g. to technically optimize the dispatch and presentation of the newsletter or for statistical purposes. However, the shipping service does not use the data of our newsletter recipients to write them down itself or to pass the data on to third parties.
We or our hosting provider process inventory data, contact data, content data, contract data, usage data, and meta- and communication data of customers, interested parties, and visitors of this online offer on the basis of our legitimate interests in an efficient and secure provision of this online offer according to Art. 6 Para. 1 lit. f GDPR in conjunction with. Art. 28 GDPR (conclusion of order processing contract).
We use a Content Delivery Network (CDN), offered by Cloudflare, Inc. 101 Townsend St, San Francisco, CA 94107, USA. Cloudflare is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with European data protection law. (https://www.privacyshield.gov/participant?id=a2zt0000000GnZKAA0&status=Active).
Google Tag Manager is a solution with which we can manage so-called website tags via an interface (and thus integrate Google Analytics and other Google marketing services into our online offering, for example). The Tag Manager itself (which implements the tags) does not process any personal data of the users. With regard to the processing of users’ personal data, reference is made to the following information on the Google services. Usage guidelines: https://www.google.com/analytics/tag-manager/use-policy/.
Further information on data use by Google, setting and objection options, can be found in Google’s data protection declaration. (https://policies.google.com/technologies/ads) as well as in the settings for the display of advertisements by Google (https://adssettings.google.com/authenticated).
Users’ personal data will be deleted or anonymized after 14 months.
We use Google Analytics in the design as „Universal-Analytics“. „Universal Analytics“ refers to a process by Google Analytics in which the user analysis is based on a pseudonymous user ID and thus a pseudonymous profile of the user is created with information from the use of various devices (so called „Cross-Device-Tracking“).
On the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. GDPR) we make use of the AdSense services of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, (“Google”).
Further information on data use by Google, setting and objection options, can be found in Google’s data protection declaration (https://policies.google.com/technologies/ads) as well as in the settings for the display of advertisements by Google (https://adssettings.google.com/authenticated).
On the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. GDPR) we make use of the AdWords services of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, (“Google”).
On the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. GDPR) Social Plugins (“Plugins”) of the social network facebook.com, which is operated by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”).
Mr. Jinx recognizes the privacy interests of children and we encourage parents and guardians to take an active role in their children’s online activities and interests. The Site and the Services are not directed to children under the age of 13. Mr. Jinx does not target this Site or Services to children under 13. Mr. Jinx does not knowingly collect personally identifiable information from children under the age of 13. If you are under the age of 13, please do not participate in any study and do not provide us with any personally identifiable information.
By using our services, you represent that you are at least 18 years of age.
If you are a Participant in an online study, we will not provide your personally identifiable information to the Customer.
We will not sell your personally identifiable information to any company or organization, but we may transfer your personally identifiable information to a successor entity upon a merger, consolidation or other corporate reorganization in which Mr. Jinx participates or to a purchaser or acquirer of all or a portion of Mr. Jinx’s assets to which this Site and our Services relates.

References: Art. 28
 Art. 20
 Art. 77
 Art. 7
 Art. 6
 Art. 6
 Art. 6
 Art. 28
 Art. 6
 Art. 6
 Art. 6
 Art. 9
 Art. 9
 Art. 9
 Art. 9
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 art. 6
 Art. 6
 Art. 7
 Art. 6
 Art. 6
 Art. 28
 Art. 6
 Art. 28
 Art. 6
 Art. 6
 Art. 6