1. An overview of data protection
Data collection on our website
Who is responsible for the data collection on this website?
The data collected on this website are processed by the website operator. The operator’s contact details can be found in the website’s required legal notice.
How do we collect your data?
Some data are collected when you provide it to us. This could, for example, be data you enter on a contact form.
Other data are collected automatically by our IT systems when you visit the website. These data are primarily technical data such as the browser and operating system you are using or when you accessed the page. These data are collected automatically as soon as you enter our website.
What do we use your data for?
Part of the data is collected to ensure the proper functioning of the website. Other data can be used to analyze how visitors use the site.
What rights do you have regarding your data?
You always have the right to request information about your stored data, its origin, its recipients, and the purpose of its collection at no charge. You also have the right to request that it be corrected, blocked, or deleted. You can contact us at any time using the address given in the legal notice if you have further questions about the issue of privacy and data protection. You may also, of course, file a complaint with the competent regulatory authorities.
Analytics and third-party tools
You can object to this analysis. We will inform you below about how to exercise your options in this regard.
This website is hosted by an external service provider (website host). The personal data collected on this website is stored on the hoster’s servers. This can be IP addresses, contact requests, meta and communication data, contract data, contact details, names, website access and other data that are generated via a website. The host is used for the purpose of fulfilling the contract towards our potential and existing customers (Art. 6 Para. 1 lit. b GDPR) and in the interest of a safe, fast and efficient provision of our online offer by a professional provider (Art. 6 Para 1 lit.f GDPR). Our website host will only process your data to the extent that this is necessary to fulfill its performance obligations and to follow our instructions in relation to this data.
Data processing agreement
In order to guarantee data protection-compliant processing, we have entered into a data processing agreement with our host.
3. General information and mandatory information
Please note that data transmitted via the internet (e.g. via email communication) may be subject to security breaches. Complete protection of your data from third-party access is not possible.
Notice concerning the party responsible for this website
The party responsible for processing data on this website is:
6291 EW Vaals
The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (names, email addresses, etc.).
Revocation of your consent to the processing of your data
Many data processing operations are only possible with your express consent. You may revoke your consent at any time with future effect. An informal email making this request is sufficient. The data processed before we receive your request may still be legally processed.
Right to file complaints with regulatory authorities
If there has been a breach of data protection legislation, the person affected may file a complaint with the competent regulatory authorities. The competent regulatory authority for matters related to data protection legislation is the data protection officer of the state in which our company is headquartered.
Right to data portability
You have the right to have data which we process based on your consent or in fulfillment of a contract automatically delivered to yourself or to a third party in a standard, machine-readable format. If you require the direct transfer of data to another responsible party, this will only be done to the extent technically feasible.
SSL or TLS encryption
This site uses SSL or TLS encryption for security reasons and for the protection of the transmission of confidential content, such as the inquiries you send to us as the site operator. You can recognize an encrypted connection in your browser’s address line when it changes from “http://” to “https://” and the lock icon is displayed in your browser’s address bar.
If SSL or TLS encryption is activated, the data you transfer to us cannot be read by third parties.
Information, blocking, deletion
As permitted by law, you have the right to be provided at any time with information free of charge about any of your personal data that is stored as well as its origin, the recipient and the purpose for which it has been processed. You also have the right to have this data corrected, blocked or deleted. You can contact us at any time using the address given in our legal notice if you have further questions on the topic of personal data.
Opposition to promotional emails
We hereby expressly prohibit the use of contact data published in the context of website legal notice requirements with regard to sending promotional and informational materials not expressly requested. The website operator reserves the right to take specific legal action if unsolicited advertising material, such as email spam, is received.
4. Data collection on our website
Most of the cookies we use are so-called “session cookies.” They are automatically deleted after your visit. Other cookies remain in your device’s memory until you delete them. These cookies make it possible to recognize your browser when you next visit the site.
Server log files
The website provider automatically collects and stores information that your browser automatically transmits to us in “server log files”. These are:
- Browser type and browser version
- Operating system used
- Referrer URL
- Host name of the accessing computer
- Time of the server request
- IP address
These data will not be combined with data from other sources.
The basis for data processing is Art. 6 (1) (f) GDPR, which allows the processing of data to fulfill a contract or for measures preliminary to a contract.
Leaving comments on this website
Due to the high amount of spam comments, we have deactivated the comment function on our website. If you left a comment previously, your comment and your email address, IP address, as well as username was stored unless you posted anonymously.
The comments are stored based on your consent per Art. 6 (1) (a) GDPR. You may revoke your consent at any time with future effect. An informal email making this request is sufficient. The data processed before we receive your request may still be legally processed.
5. Social media
Share content via plugins (Facebook, Pinterest, Twitter, etc.)
The content on our pages can be shared on other social networks like Facebook, Twitter, or Pinterest. This page uses the Grow Social Sharing Tool. This tool establishes direct contact between the networks and users only after users click on one of these buttons.
This tool does not automatically transfer user data to the operators of these platforms. If users are logged into one or more of the social networks, the Share buttons for Facebook, Pinterest, Twitter, etc. will display an information window in which the user can edit the text before it is sent.
Our users can share the content of this page on social networks without their providers creating profiles of users’ surfing behavior.
6. Analytics and advertising
This website uses Google Analytics, a web analytics service. It is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses so-called “cookies”. These are text files that are stored on your computer and that allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.
Google Analytics cookies are stored based on Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in analyzing user behavior to optimize its website.
We have activated the IP anonymization feature on this website. Your IP address will be shortened by Google within the European Union or other parties to the Agreement on the European Economic Area prior to transmission to the United States. Only in exceptional cases is the full IP address sent to a Google server in the US and shortened there. Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity, and to provide other services regarding website activity and Internet usage for the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with any other data held by Google.
You can prevent these cookies from being stored by selecting the appropriate settings in your browser. However, we wish to point out that doing so may mean you will not be able to enjoy the full functionality of this website. You can also prevent the data generated by cookies about your use of the website (incl. your IP address) from being passed to Google, and the processing of these data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
Objecting to the collection of data
You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to this site: Disable Google Analytics.
Outsourced data processing
We have entered into an agreement with Google for the outsourcing of our data processing and implement the requirements of the data protection authorities when using Google Analytics.
Mediavine Programmatic Advertising
The Website uses Mediavine to manage all third-party advertising on the Website. Mediavine serves content and advertisements when you visit the Website, which may use first and third-party cookies. A cookie is a small text file which is sent to your computer or mobile device (referred to in this policy as a “device”) by the web server so that a website can remember some information about your browsing activity on the Website. The cookie may collect information relating to your use of the Website, information about your device such as the device’s IP address and browser type, demographic data and, if you arrived at the Website via a link from a third-party site, the URL of the linking page.
First party cookies are created by the website that you are visiting. A third-party cookie is frequently used in behavioral advertising and analytics and is created by a domain other than the website you are visiting. Third-party cookies, tags, pixels, beacons and other similar technologies (collectively, “Tags”) may be placed on the Website to monitor interaction with advertising content and to target and optimize advertising. Each internet browser has functionality so that you can block both first and third-party cookies and clear your browser’s cache. The “help” feature of the menu bar on most browsers will tell you how to stop accepting new cookies, how to receive notification of new cookies, how to disable existing cookies and how to clear your browser’s cache. For more information about cookies and how to disable them, you can consult the information at www.allaboutcookies.org/manage-cookies/.
Without cookies you may not be able to take full advantage of the Website content and features. Please note that rejecting cookies does not mean that you will no longer see ads when you visit our Site.
The Website may collect IP addresses and location information to serve personalized ads and pass it to Mediavine. If you would like more information about this practice and to know your choices to opt-in or opt-out of this data collection, please visit http://www.networkadvertising.org/managing/opt_out.asp. You may also visit http://optout.aboutads.info/#/ and http://optout.networkadvertising.org/# to learn more information about interest-based advertising. You may download the AppChoices app at http://www.aboutads.info/appchoices to opt out in connection with mobile apps, or use the platform controls on your mobile device to opt out.
Mediavine partners with the following data processors:
7. Plugins, Embeds, and Tools
Our website uses the embed function with privacy-enhanced mode from YouTube, which is operated by Google. The operator of the pages is YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
If you visit one of our pages featuring a YouTube plugin, a connection to the YouTube servers is established. Here the YouTube server is informed about which of our pages you have visited.
If you’re logged in to your YouTube account, YouTube allows you to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account.
YouTube is used to help make our website appealing. This constitutes a justified interest pursuant to Art. 6 (1) (f) GDPR.
Further information about handling user data, can be found in the data protection declaration of YouTube under https://www.google.com/policies/privacy. Opt-Out: https://adssettings.google.com/authenticated.
This site uses the Google Maps map service via an API. It is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
To use Google Maps, it is necessary to save your IP address. This information is generally transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer.
The use of Google Maps is in the interest of making our website appealing and to facilitate the location of places specified by us on the website. This constitutes a justified interest pursuant to Art. 6 (1) (f) GDPR.
Further information about handling user data, can be found in the data protection declaration of Google at https://www.google.com/policies/privacy/. Opt-Out: https://adssettings.google.com/authenticated.
If you want to receive the newsletter offered on this website, you need to provide your email address, confirm that it is your email address and consent to receiving our newsletter. We will not share this information with third parties other than our newsletter service provider.
The processing of the data you entered in the newsletter registration form takes place on the basis of your consent (Art. 6 Para. 1 a GDPR).
The registration for our newsletter takes place in a “double opt-in procedure”. This means that after signing up you will receive an email asking you to confirm your registration. This confirmation is necessary so that no one can register with someone else’s email address. To comply with legal requirements in some countries, the confirmation of the “double opt-in” will be stored and includes the time of registration, location and your IP address.
Revoking Your Consent
You can revoke your consent at any time by clicking the “unsubscribe” link at the bottom of a newsletter. After this action, we will not send you any more emails. We might store your data for a period of up to two years to be able to show prove of prior consent. This is done on the basis of legitimate interest (Art. 6 Para. 1 f GDPR). The legality of the data processing operations that have already taken place remains unaffected by the revocation.
Newsletter Service Provider & Measuring Success
For sending our newsletter we use MailChimp, which is offered by Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA. This is done on the basis of legitimate interest (Art. 6 Para. 1 f GDPR). The data related to sending the newsletter will thus be stored on Mailchimp’s servers in the USA. MailChimp is registered under the EU-US privacy shield and adheres to the EU privacy laws.
Our newsletters contain a so-called “web-beacon”, which can track the opening of newsletters as well as potential link clicks. In addition, technical information is recorded (e.g. time of access, IP address, browser type and operating system). We use this information for statistical analysis of newsletter campaigns, which allows us to analyze the success of our newsletter and make it better. If you don’t want this information to be collected, please don’t subscribe to our newsletter or revoke your consent by clicking the unsubscribe link at the bottom of a newsletter.
Newsletter Sign-up Forms
To collect email addresses for our newsletter, we use the Convert Pro plug-in provided by Brainstorm Force. In some cases, cookies which do not store any personal identifying information are set in your browser when a signup form is displayed. This is done to improve user experience and prevent showing the form to the same visitor again within a short time frame.
Legal basis: Legitimate interest (Art. 6 Para. 1 f GDPR)
9. Online marketing and affiliate programs
Amazon affiliate program
The storage of Amazon cookies is based on Art. 6 (f) GDPR. The website operator has a legitimate interest in this service since it only receives credit for referral fees if these cookies are set.
Other affiliate programs
Additionally, we are members of the following affiliate programs and platforms:
The storage of these cookies is based on Art. 6 (f) GDPR. The website operator has a legitimate interest in this service since it only receives credit for referral fees if these cookies are set. To obtain more information about how these companies use your data, see their privacy policies through the links above.
10. California Consumer Privacy Act (CCPA)
California Consumer Privacy Act (hereafter, “CCPA”) is a California privacy law that is effective as of January 1, 2020. This notice applies solely to website users, visitors, and customers (purchasers) who reside in the State of California (hereafter, “consumer”, “consumers”, “you”).
Under CCPA, California consumers have several added rights and privileges that serve to protect their personal information from being used in a way that the consumer does not agree with. This notice is in place to comply with the California Consumer Privacy Act (CCPA) of 2018 that went into effect as of January 1, 2020.
A consumer has the right to request and know what categories of information and what personal information we collect, how we collect it, and for what purpose we collect it.
CONSUMER’S RIGHT TO DEMAND DISCLOSURE
You have the right to demand that we disclose what categories of information we have or are collecting about you and what personal information we have collected or are collecting about you.
In an effort to maintain full compliance, we are disclosing the categories of information that we generally collect from and/or about consumers.
As a consumer, you are free to request disclosure of your information at no extra charge to you if you make such requests no more than twice (2) during a 12-month period.
General Information We Collect
We generally collect personal information, as listed under CCPA, in the form of your email address, the IP address of your device, advertising identifier on your mobile device, as well as cookies stored on your browser.
We collect the consumer information stated above through Opt-in forms by offering free resources and asking people to join our email list, Google Analytics as well as cookies and web beacons as part of Mediavine Programmatic Advertising.
You have the right to request disclosure of the personal information we collected about you by contacting us at hello @ ontarioaway.com.
CONSUMER’S RIGHT TO REQUEST DELETION OF PERSONAL INFORMATION
Under CCPA, a consumer has the right to contact the business that collected personal information about the consumer and request deletion of that information.
There are certain limited circumstances under which the business does not have to comply and delete the information, as follows:
- To provide and complete the transaction for which the information was collected in the first place (for example, selling and delivering goods and services);
- To be in compliance with a legal obligation;
- To carry out and be compliant with another legal requirement; and
- To keep the information for internal use that is reasonable to the consumer.
CONSUMER’S RIGHT TO DEMAND DISCLOSURE IN CASE OF SALE
As a consumer, you have the right to request full disclosure if a business sells or transfers your personal information for a business purpose. You have the right to know what specific information has been sold or transferred, to whom, and for what business purpose.
We sell personal information we collect from consumers for programmatic advertising purposes. We, and our partners, use this information to tailor and deliver ads to you on our site, or to help tailor ads to you when you visit others’ sites. To tailor ads that may be more relevant to you, we and/or our partners may share the information we collect with third parties.
The consumer has the right to request that we disclose what category of information we sold, the specific pieces of information we sold, to whom we sold it, and for what business purpose we sold it. Consumers can make this request by contacting us at hello @ ontarioaway.com.
CONSUMER’S RIGHT TO REQUEST THAT A BUSINESS DOES NOT SELL THEIR INFORMATION
Under CCPA, a consumer has the right to request that a business that collected personal information about the consumer does not sell that information to anyone.
In our efforts to comply with the CCPA, you can find a “Do Not Sell My Personal Information” link in the footer of our website. If there is a field asking for your email address, please be sure to include the same email you opted in with.
If and when you select “Do Not Sell My Personal Information,” you will be marked as an opt out. Therefore, you can be sure that your personal information and other general data collected about you will never be sold.
OUR BUSINESS WILL NOT DISCRIMINATE AGAINST ANY CONSUMER
If you choose to exercise your right and request that we never sell your information, in accordance with CCPA, we will not and cannot discriminate against you for choosing to exercise your right.
You will have access to the same services at the same prices as everyone else. The quality and conditions of products and services you receive will be the same as everyone else, regardless of your choice to exercise your CCPA right to forbid the selling of your information.
SECURING YOUR PERSONAL INFORMATION
Under CCPA, a business that collects or receives personal information about a consumer must implement and maintain reasonable security procedures and practices.
If a business experiences a data breach, then it will be held liable if it did not implement and maintain reasonable security procedures and practices.
We do our due diligence and maintain reasonable security procedures and practices to make sure that the consumer data and private information we collect is safe and secure.
Here are the security practices we have in place to protect consumer data:
- All the systems containing consumer information (such as our email service provider) are password protected.
- The passwords are considered strong and are not easy to figure out.
- Only 2 people know the password.
- To make our Email Service Provider database even more secure, we change the password every 3 months.
- Our computers are protected from third-party access by having an additional password layer before a user can start working on the computer.
- In addition to the statements above, we take reasonable precautions on a daily basis to protect consumer information from unauthorized use, modification, destruction, and disclosure.
If you wish to exercise your rights under CCPA and make requests for disclosure or deletion of your personal information or disclosure about sale of information, you can contact us directly and make such requests. You can also contact us at any time if you are not happy about the way we are handling your data.
We will respond as quickly as reasonably possible. Please keep in mind that we do not have to comply with requests if you make them more than twice during a 12-month period.
Make your requests by contacting us at hello @ ontarioaway.com
Last updated June 30, 2020.