Privacy Policy

Hey there! 👋🏿 You're probably here because you care about your data and privacy. I do too! On this page, you'll find the Privacy Policy for this website, https://candide.media, the official website for candide x media (stylized and also known as candide ꘎ media).

By accessing this website you confirm that you have read and understood this privacy policy. This privacy policy provides information on the way that candide ꘎ media collects and processes the data of the website visitors.

If you have any questions or concerns, please get in touch.

Let's dive in!

Table of Contents

 

How is personal data collected?

In most cases, you give them to candide ꘎ media yourself. This happens, for example, when you: 

  • fill out a form
  • subscribe to the newsletter
  • make a comment
  • send a monetary tip
  • download a digital good
  • contact candide ꘎ media

Is your data secure?

candide ꘎ media cares about the security of your personal data. candide ꘎ media has analyzed the risks associated with the various data processing processes and then implemented appropriate security and data protection measures. candide ꘎ media is constantly monitoring the state of the technical infrastructure, observe the procedures applied, and make necessary improvements.

For what purposes is your personal data processed?

There are many reasons for data processing. Here is a list of them, with the appropriate legal grounds for processing to the individual purposes.

  • comment handling—Article 6(1)(a) of the GDPR, 
  • sending the newsletter—Article 6(1)(a) of the GDPR, 
  • registration and maintenance of a user account—Article 6(1)(b) of the GDPR,
  • order processing—Article 6(1)(b) of the GDPR, 
  • fulfillment of tax and accounting obligations—Article 6(1)(c) of the GDPR, 
  • handling correspondence—Article 6(1)(f) of the GDPR, 
  • creating an archive for the purposes of a possible need to defend, establish, or pursue claims, as well as to identify the returning customer—Article 6(1)(f) of the GDPR. 

Newsletter

By subscribing to the newsletter, you provide candide ꘎ media with your email address and, optionally, your name. Providing data is voluntary but necessary to subscribe to the newsletter.

The data provided to candide ꘎ media in connection with subscribing to the newsletter are used to send you the newsletter, and the legal basis for their processing is your consent (Article 6(1)(a) of the GDPR) expressed when subscribing to the newsletter. With regard to the processing of information not originating from you, but collected automatically by the self-hosted mailing system (ie subscriber-level campaign views and clicks), candide ꘎ media relies on the legitimate interest (Article 6(1)(f) of the GDPR) consisting in analyzing the behavior of newsletter subscribers in order to optimize mailing activities.

You can unsubscribe from the newsletter at any time by clicking on the dedicated link at the bottom of each message sent as part of the newsletter. When unsubscribing, you will also have the option of exporting your data (a copy of your data will be emailed to you).

Once you unsubscribe from the newsletter, your data will still be stored in the database in order to identify the returning subscriber and possibly defend claims related to sending you the newsletter, in particular to prove your consent to receiving the newsletter and the moment of its withdrawal, which constitutes legitimate interest as referred to in Article 6(1)(f) of the GDPR. If the period of limitation of civil law claims, criminal record, or penalties under administrative law expires after the termination of the business activity, the data will be deleted after this period.

You can modify your data provided for the purpose of receiving the newsletter at any time by clicking on the appropriate link visible in each message sent as part of the newsletter or by getting in touch.

Forms

When submitting forms, you provide candide ꘎ media with your personal data included in the content of the correspondence, such as your email address, name, and surname. Providing data is voluntary but necessary to establish contact.

Your data is processed in this case for the purpose of contacting you and the basis for processing is Article 6(1)(f) of the GDPR, i.e. legitimate interest. The legal basis for processing after contact has ended is also candide ꘎ media's legitimate purpose to archive the correspondence for the purpose of ensuring that candide ꘎ media can prove certain facts in the future (Article 6(1)(f) of the GDPR). 

Forms on this site are managed via Tally Forms, Youform, Zapier, and Airtable, which forward the message to candide ꘎ media. You can read the Privacy Policies for each service here:

The content of the correspondence may be archived and candide ꘎ media is not able to clearly determine when it will be deleted. You have the right to request the history of any correspondence you have had with candide ꘎ media (if it has been archived) as well as to request its erasure, unless archiving it is justified by candide ꘎ media's overriding interests, such as defending against potential claims. 

Archive

As part of the description of the individual purposes for the processing of personal data above, candide ꘎ media has indicated time limits for the storage of personal data. These time limits are often related to the archiving of certain data for the purpose of ensuring that candide ꘎ media can prove certain facts in the future, reconstruct the course of candide ꘎ media's cooperation with you, the correspondence exchanged, or defend, establish, or assert claims. candide ꘎ media relies in this respect on legitimate interest as referred to in Article 6(1)(f) of the GDPR.

Website Analytics

Visits are counted using the open-source and privacy-friendly apps Umami, Counter, and Swetrix.

Swetrix is GDPR-compliant (see their privacy policy here).

Counter does not collect any personal data (see their privacy policy here).

Umami is GDPR-compliant. According to their Frequently Asked Questions (FAQ), Umami "does not collect any personally identifiable information and anonymizes all data collected. Users cannot be identified and are never tracked across websites. (...) Umami does not use any cookies in the tracking code."

You can also view discussion on privacy and GDPR-compliance on Umami's GitHub page:

candide ꘎ media does not (and cannot) combine website analytics data with your personal data which are in candide ꘎ media's databases. This information is anonymous and does not allow candide ꘎ media to identify you. This information is stored on the servers of the suppliers of individual tools and these servers may most often be located around the world.

Other Scripts, Embeds, Add-ons

PeerTube Videos

PeerTube / spectra.video is one of the platforms that candide ꘎ media uses to host and deliver streaming video files. PeerTube is an open-source, privacy-friendly alternative to YouTube. To reduce server load and improve playback quality, PeerTube uses the P2P-media-loader protocols to share bandwidth between users that are watching the same video.

You can find PeerTube's Privacy Guide on their website.

YouTube Videos

YouTube videos embedded on this site use YouTube's privacy-enhanced mode using the “youtube-nocookie.com” host.

According to YouTube:

The privacy-enhanced mode of the YouTube embedded player prevents the use of views of embedded YouTube content from influencing the viewer's browsing experience on YouTube. This means that the view of a video shown in the privacy-enhanced mode of the embedded player will not be used to personalise the YouTube browsing experience, either within your privacy-enhanced mode embedded player or in the viewer's subsequent YouTube viewing experience. 

If ads are served on a video shown in the privacy-enhanced mode of the embedded player, those ads will likewise be non-personalised. In addition, the view of a video shown in the privacy-enhanced mode of the embedded player will not be used to personalise advertising shown to the viewer outside of your site or app.

As a reminder, the YouTube API Terms of Service and YouTube Developer Policies apply to the access and use of the YouTube embedded player.

Read more on this here

Tip Jars (Ko-Fi and Liberapay)

Monetary contributions by way of donations/tips/subscriptions/purchases/virtual "coffees" sent to candide ꘎ media are processed through Ko-Fi and Liberapay, using Paypal or Stripe.

You can read Ko-Fi's Privacy Policy here.

You can read Liberapay's Privacy Policy here.

Payhip

Certain candide ꘎ media courses, workshops, and digital goods are hosted on Payhip. When you register for a course through Payhip, they will collect your information for account setup and handle all transactions. Please consult Payhip's Privacy And Cookies Policy for more information on how they handle your data.

hCaptcha

candide ꘎ media uses the hCaptcha security service (hereinafter "hCaptcha") on the website. This service is provided by Intuition Machines, Inc., a Delaware US Corporation ("IMI"). hCaptcha is used to check whether user actions on candide ꘎ media's online service (such as submitting a login or contact form) meet security requirements. To do this, hCaptcha analyzes the behavior of the website or mobile app visitor based on various characteristics. This analysis starts automatically as soon as the website or mobile app visitor enters a part of the website or app with hCaptcha enabled. For the analysis, hCaptcha evaluates various information (e.g. IP address, how long the visitor has been on the website or app, or mouse movements made by the user). The data collected during the analysis will be forwarded to IMI. hCaptcha analysis in the "invisible mode" may take place completely in the background. Website or app visitors are not advised that such an analysis is taking place if the user is not shown a challenge. Data processing is based on Art. 6(1)(b) of the GDPR: the processing of personal data is necessary for the performance of a contract to which the website visitor is party (for example, the website terms) or in order to take steps at the request of the website visitor prior to entering into a contract. candide ꘎ media's online service (including the website, mobile apps, and any other apps or other forms of access offered by us) needs to ensure that it is interacting with a human, not a bot, and that activities performed by the user are not related to fraud or abuse. In addition, processing may also be based on Art. 6(1)(f) of the GDPR: candide ꘎ media's online service has a legitimate interest in protecting the service from abusive automated crawling, spam, and other forms of abuse that can harm this service or other users of this service. IMI acts as a "data processor" acting on behalf of its customers as defined under the GDPR, and a "service provider" for the purposes of the California Consumer Privacy Act (CCPA). For more information about hCaptcha’s privacy policy and terms of use, please visit the following links: https://www.hcaptcha.com/privacy and https://www.hcaptcha.com/terms

Pretix

Features and content are embedded within the website from pretix, a service provided by rami.io GmbH, Berthold-Mogel-Straße 1, 69126 Heidelberg, Germany. This includes a ticket shop, which is included through a JavaScript widget. If you try to purchase a ticket, pretix will use cookies to make your purchase process possible and to remember which tickets are in your cart. This cookie will only be set once you start interacting with the pretix widget. pretix does not store any IP addresses, browser information or other unnecessary meta data beyond the timeframe of your transaction. You can find out more about privacy at pretix here: https://pretix.eu/about/en/privacy 

What rights do you have with regard to the processing of your personal data?

The GDPR grants you the following potential rights related to the processing of your personal data:

  • the right to access your data and obtain a copy thereof, 
  • the right to demand the rectification of the data, 
  • the right to erase the data (if in your opinion there are no grounds for candide ꘎ media to process your data, you can request that for your data to be erased), 
  • the right to restriction of data processing (you can request that candide ꘎ media restrict the processing of data only to the storage or performance of activities agreed with you if in your opinion candide ꘎ media has incorrect data or has processed them unjustifiably),
  • the right to object to the processing of data (you have the right to object to the processing of data on the basis of a legitimate interest; you should indicate a specific situation that, in your opinion, justifies the termination of the processing covered by the objection; candide ꘎ media will stop processing your data for these purposes unless candide ꘎ media proves that the grounds for data processing override your rights or that your data are necessary for candide ꘎ media to establish, assert, or defend claims), 
  • the right to transfer data (you have the right to receive from candide ꘎ media, in a structured, commonly used, machine-readable format, personal data that you provided to candide ꘎ media on the basis of a contract or your consent; you can commission candide ꘎ media to send these data directly to another entity), 
  • the right to withdraw consent to the processing of personal data if you previously gave such consent, 
  • the right to lodge a complaint with the supervisory body (if you find that candide ꘎ media is processing data unlawfully, you can submit a complaint to the President of the Personal Data Protection Office or another competent supervisory authority). 

The rules related to the implementation of the above-mentioned rights are described in detail in Articles 16–21 of the GDPR. candide ꘎ media encourages you to familiarize yourself with these provisions. On candide ꘎ media's part, it's necessary to explain to you that the above-mentioned rights are not absolute and you will not be entitled to them in relation to all activities involving the processing of your personal data.

candide ꘎ media emphasizes that you always have one of the rights indicated above—if you believe that candide ꘎ media has breached the provisions on the protection of personal data while processing your personal data, you have the option to lodge a complaint. 

You can also always ask candide ꘎ media to provide you with information about what data candide ꘎ media holds on you and for what purposes it is processed. All you need to do is get in touch.

Nonetheless, candide ꘎ media has made every effort to ensure that the information you are interested in is comprehensively presented in this Privacy Policy. You can also use the contact form provided above if you have any questions related to the processing of your personal data.

How can you manage your privacy?

Here's a list of options for managing your privacy:

  • cookie settings in the web browser,
  • browser plug-ins supporting cookie management, e.g. Ghostery,
  • additional cookie management software,
  • incognito mode in a web browser,
  • behavioral advertising settings, e.g. youronlinechoices.com

Who are the recipients of your personal data?

The following processors are involved in the processing of personal data:

  • hosting provider that stores data on the server,
  • provider of the mailing system in which your data are stored, if you are a newsletter subscriber,
  • an entity providing maintenance services that gains access to the data, if the technical works carried out relate to areas where personal data are located,
  • other subcontractors who gain access to the data, if the scope of their activities requires such access.

Personal data may be transferred to law offices if there is a need to use legal assistance that requires access to personal data.

Your personal data may also be transferred to tax offices to the extent necessary to fulfill tax, settlement, and accounting obligations. This applies in particular to all declarations, reports, statements, and other accounting documents which contain your personal data.

Children's Information

Another part of candide ꘎ media's priority is adding protection for children while using the internet. candide ꘎ media encourages parents and guardians to observe, participate in, and/or monitor and guide their online activity.

candide ꘎ media does not knowingly collect any Personal Identifiable Information from children under the age of 13. If you think that your child provided this kind of information to this website, you're strongly encouraged to get in touch immediately and the best efforts will be done to promptly remove such information.

Is your data transferred to third countries or international organizations?

Yes, part of the processing of your personal data may involve their transfer to third countries.

Your personal data is transferred to third countries in connection with the use of tools that store personal data on servers located in third countries, in particular in the USA. The providers of these tools guarantee an adequate level of protection of personal data through appropriate compliance mechanisms provided for by the GDPR, in particular through the use of standard contractual clauses.

Server

This website is housed on Netlify. You can read their Privacy Policy here.

Links to Other Websites

Please note that this Privacy policy will not apply to other websites that you may get to via a link from this website.

Can this privacy policy be changed?

Yes, this privacy policy can be modified, in particular due to technological changes and changes in the law.

Sources

This Privacy Policy was adapted from and inspired by the following Privacy Policies: