PRIVACY POLICY
Thank you for your interest in my Privacy Policy. This Privacy Policy applies to my website www.thelionman.co, which is operated by me, Alexander Gabrysch, Belfast, United Kingdom, as the data controller, and the third parties I use to provide the website ("we", "us", "our").
Background
This Privacy Policy describes our privacy practices in plain language, keeping legal and technical jargon to a minimum to ensure that you understand the information provided. However, to achieve this goal, I would like to explain the following three terms.
What is personal data?
Personal data is any information relating to an identified or identifiable living individual. Various information that, taken together, can lead to the identification of a specific person also constitutes personal data.
What is processing?
"Processing" means and includes virtually any handling of data.
Which law applies?
I am the data controller in accordance with the UK's Data Protection Act (“DPA”) and the EU's General Data Protection Regulation (“GDPR”).
General principles
Purpose and legal basis of processing
In accordance with the DPA and the GDPR, we need both a purpose and a legal basis for processing personal data. The purposes are:
● the provision of the website and its functions and content,
● responding to contact requests and communicating with my followers and website users,
● providing my services and, in particular, affiliate advertising, my blog, reviews and articles ("Services"); and
● Safety measures.
Of course, we can only do so if we have at least one of the following legal bases or, in other words, lawful reasons for doing so. Unless specifically described below, we usually link the above purposes to one of the following:
● Consent,
● to provide my services and fulfil my contractual obligations,
● to fulfil my legal obligations, and
● to protect my and our legitimate interests.
Security
My website uses SSL or TLS encryption to ensure the security of data processing and to protect the transmission of confidential content, login data or contact requests that you send to us. In addition, we have taken numerous security measures ("technical and organisational measures"), such as encryption or "need to know" access, to ensure the most complete protection of personal data processed through my website.
Nevertheless, Internet-based data transmissions can always have security vulnerabilities, so that absolute protection cannot be guaranteed. With this in mind, databases or records containing personal data may be breached inadvertently or through unlawful intrusion. As soon as I become aware of a data breach, I will notify all affected individuals whose personal data may have been compromised as soon as possible after the breach is discovered.
Retention and storage
I will retain your personal information for as long as is necessary in connection with the purposes described in this Privacy Policy.
Minors
I do not solicit personal information from minors and children and do not knowingly collect or disclose such information to third parties.
Automated decision making
Automated decision-making, including profiling, does not take place.
Do Not Sell
I do not sell your personal information.
Data of a special category
I do not process data of a special category unless this is explicitly required for a specific service and consent has been given.
International transmission
In the course of operating my website, we process data. Normally, we do not transfer personal data to countries outside the UK and the EEA. However, when we do, I ensure that the processing of your personal data is governed by processing agreements that include standard contractual clauses for a high level of data protection.
Disclosure and disclosure
We will not disclose or otherwise distribute your personal information to third parties unless a) necessary to provide my services, b) you have consented to the disclosure, c) or if we are required to do so by law, such as a court order, or to assist in a criminal or legal investigation or other legal proceeding, whether domestic or foreign, or to serve our legitimate interests.
Cookies
Why do I have a cookie policy?
The UK's Privacy and Electronic Communications Regulations (“PECR”) and the EU's Privacy and Electronic Communications Directive (“PECD”), require me to ask for your consent when using specific cookies (in particular any cookie that is not strictly necessary for the operation of my website, for example, Functional cookies, Analysis and performance cookies and Advertising cookies or targeting cookies “Optional cookies”).
Further and as the DPA and the GDPR also require a legal basis for the use of Personal Data in relation to cookies, the use of cookies would then be your consent as well as our legitimate interest.
However, as I think it is important that you should have full control over your privacy online, I have refrained from placing optional cookies on my website and as such I`m not required to obtain any consents. Nonetheless, this may change, and I ask you to regularly check this policy for any updates.
Data collection and processing
Log files
When you call up and use my website, I collect the Personal Data that your browser automatically transmits to my web host`s server. This is technically necessary for the display of my website and to ensure its stability and security. In this sense, we collect the following data: i) IP address of the requesting computer, ii) Date and time of access, iii) name and URL of the file accessed, iv) website from which the access was made (referrer URL), v) browser used and, if applicable, the operating system of your computer as well as the name of your access provider. The legal basis is our legitimate interest.
Hosting
The hosting services used for the purpose of operating my website is Wix.com LTD. In doing so Wix, processes inventory data, contact data, content data, usage data, meta data and communication data of customers, interested parties and visitors of my website, on the basis of my legitimate interests in an efficient and secure provision of my website in conjunction with the provision of contractual services and the conclusion of the contract for my services.
Content Management System
I also use the Content Management System (CMS) of Wix, to publish and maintain the created and edited content and texts on my website. This means that all content and texts submitted to my website is transferred to Wix. The legal basis for this processing is our legitimate interest.
Contact
If you contact me, your transmitted Personal Data (typically your email address, name, the content of your message and IP address) will be automatically stored in order to process the request or to respond to you. The data processing for the purpose of contacting me is based on your voluntarily given consent or the initiation of a contractual service.
Events, Classes And Activities
If you are interested in or want to participate in my events, classes and activities, you are redirected to the Wim Hof Method`s website operated by Innerfire B.V to make a booking. Being redirected requires your i) IP address; and ii) other technical data related to your access to be disclosed and all data collected through your booking is subject to the Wim Hof Method`s Privacy Policy and I have no influence over their privacy practices.
Working with me (Provision of contractual services)
I process inventory data (e.g., names and addresses as well as contact data of users), contract data (e.g., services used, names of contact persons, payment information) for the purpose of fulfilling my contractual obligations and services.
Administration and financial accounting
I process data in the context of administrative tasks as well as the organisation of my business and compliance with legal obligations, such as archiving. In this context, I process the same data that I process in the course of providing my services. The processing bases are my legal obligations and my legitimate interest.
My Mailing list
If you register for my mailing list, I process your email address and name to send you information about my events, classes and activities. You can unsubscribe from our mailing list at any time via the link provided for this purpose in each email I send or by sending me a corresponding message. After unsubscribing, your email address and name will be deleted immediately.
Your rights and privileges
Privacy rights
You may exercise the following rights:
● Right to information
● Right to rectification
● Right to object to processing
● Right to deletion
● Right to data portability
● Right to withdraw consent
● Right to complain to a supervisory authority
● Right not to be subject to a decision based solely on automated processing
If you have any questions, please contact us.
Update your data
If you believe that the information I hold about you is incorrect, or if you wish to correct or delete it, or object to the processing of your data, please contact me.
Withdrawal of your consent
You can revoke granted consents at any time by contacting me.
Access request
If you wish to make a request for access to your data, please contact me. I will respond to requests for access and correction as soon as possible. If I am unable to respond to your request within thirty (30) days, I will let you know why and when I will be able to respond to your request. If I am unable to provide you with personal information or make a correction you have requested, I will tell you why.
Complaint to a supervisory authority
The Information Commissioner's Office (ICO) is the relevant authority in the UK. The ICO is located at Wycliffe House, Water Ln, Wilmslow SK9 5AF, UK (www.ico.org.uk). If you believe that the processing of your Personal Data is not lawful, you can lodge a complaint with a data protection supervisory authority. We would, however, appreciate the chance to deal with your concerns before you approach the ICO or any other supervisory authority.
Changes
I may update this Privacy Policy from time to time. If I make changes or we materially change our use of your personal information, I will revise this Privacy Policy accordingly.
Questions?
If you have any questions about the processing of your personal data, please contact me using alex@thelionman.co or call +4407903572816.
Effective date
This Privacy Policy was last updated on Monday, 4th of March, 2024.