In Accordance with The GDPR
- a) Personal data
Personal data means any information relating to an identifiable person, either directly or indirectly. Such information can be a name, email address, an IP address, and location data.
- b) Data subject
Data subject is any identifiable natural person, whose personal data is processed by the controller.
- c) Processing
Processing is an operation which is performed on personal data, such as collecting, recording, organizing, structuring, storing, altering, retrieving, use, restriction, erasure, or destruction.
- d) Controller
Controller is the legal person who determines the purposes and means of the processing of personal data.
- e) Third Party
Third party is a legal person, agency, or body other who, under the direct authority of the controller or processor, are authorized to process personal data.
- f) Consent
Consent of the data subject is any freely given, specific, informed, and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, such as opting-in to a newsletter, signifies agreement to the processing of personal data relating to him or her.
- Name and Contact Details of the Controller
Cookies are used by Internet pages to ‘remember’ you and your preferences to personalize your experience, which can allow the displaying of advertising from third party networks.
- Collection of General Data and Information
Chrys Fey’s websites and blog collect general data and information when a data subject visits these sites, which is then stored in the server’s log files (Blogger and WordPress). The information that may be collected is (1) the browser type, (2) language preference, (3) referring site, (4) the date and time of access to the Internet site, (5) operating system, (6) Internet service provider, (7) other similar data and (8) IP address.
- a) Social Media Plugins
Interaction with external social networks and platforms, such as but not limited to Facebook, Twitter, and Instagram plugins and buttons, and all “share” buttons on Chrys Fey’s websites, blog, and in her newsletter collect usage data.
If the data subject clicks on one of the social media buttons integrated into Chrys Fey’s website, blog, or newsletter, such as the “like” or “share” buttons or plugins, the respective social media site then matches this information with the personal account of the data subject and stores the data.
Chrys Fey does not have control over these social media components, what data they store, how, or where, or what they do with that data.
If a data subject is logged into a social media platform (such as Facebook) at the time of visiting Chrys Fey’s blog or websites, the social media network can collect information from the data subject due to the apps that use their services, such as a “like” button. This information, which includes websites and apps you visit, is collected by the respective social media component, even if you don’t click on these plugins or buttons.
You can prevent transmission of information by social media components by logging off from social media accounts before visiting other websites.
- b) Contact Form
Chrys Fey’s author website contains contact forms created by WordPress. If a data subject sends a message to Chrys Fey using the contact form, their name, email address, and message will be sent to Chrys Fey’s email and stored in her inbox.
- Links to Other Websites
Chrys Fey’s websites, blog, newsletter, and social media platforms may contain links and widgets to other websites of interest. However, once a data subject uses these links or widgets, Chrys Fey does not have any control over that other website, their cookies, or collection and usage of data.
- a) Affiliate Links
Chrys Fey’s author website, blog, newsletter, and social media accounts use affiliate links for Bookshop.org, which is an online bookstore that supports local, independent bookstores. Chrys will earn a commission if you click through and make a purchase.
- Subscription to Newsletter
On the author website and blog of Chrys Fey, users are given the opportunity to subscribe to her author newsletter, which is a MailChimp form located on a page they can navigate to while visiting her website or blog. The entire process is optional.
Chrys Fey informs her subscribers regularly by means of a newsletter about book releases and other author updates. The author newsletter may only be received if the data subject has entered a valid e-mail address and completes the double opt-in confirmation process.
During the registration for the newsletter through a MailChimp opt-in form, the data subject’s IP address, first name (if supplied), and email address are stored, as well as the date and time of the registration. Only the data subject’s email address and first name will be actively used to send out newsletters. All other information is stored by MailChimp as the legal protection of the controller.
The subscription to Chrys Fey’s newsletter may be terminated by the data subject at any given time. For this purpose, an unsubscribe link is found in each newsletter. Once a data subject unsubscribes, their information is archived within MailChimp and they will no longer receive newsletters from Chrys Fey. A link to update the information a data subject supplied at the time of subscription can also be found in each newsletter, too, and used by the data subject.
MailChimp participates in Open Tracking, which tracks the date and time a recipient opens a newsletter. This information is stored on MailChimp.
MailChimp also uses sub-processors to process data on behalf of the controller. MailChimp transfers and processes data anywhere in the world where MailChimp, its Affiliates, or its Sub-Processors maintain data processing operations. MailChimp implements security measures to protect data from security incidents.
- Blog Comments
Chrys Fey’s blog, which is hosted by Blogger, offers users the possibility to leave personal comments. If a data subject leaves a comment on Chrys Fey’s blog, the comment is stored and published, along with the date of the comment and the data subject’s name and avatar (image), which are both previously chosen by the data subject. In addition, the IP address assigned to the data subject is also logged by Blogger/Google for security reasons.
- Rafflecopter Giveaways
Chrys Fey may host Rafflecopter giveaways on her blog or author website. Entering one of these giveaways is completely optional and no purchase is necessary. Each Rafflecopter giveaway has a FREE ENTRY option as well as optional entry options for additional points and chances to win. Terms and Conditions are linked within each option for entrants to click on and read more about the giveaway and terms.
By entering, the entrants consent to their data being used for the purposes of the giveaway. All information will be kept 100% private. The only data that will be used will be the winner’s data for the purposes of notification and shipping the prize(s). The Rafflecopter form will display the winner’s first name and last initial.
Winners will be randomly chosen by Rafflecopter’s generator. Chrys Fey will notify the winner by using the email address provided by the entrant when logging in to enter the giveaway. The prize will be shipped within 24-48 hours after receiving the winner’s mailing address through email contact. Chrys Fey will not be held liable for prizes that are damaged or lost in transit. All prizes are mailed in excellent condition.
- Google Forms
Chrys Fey may host Google Forms on her blog. One such use of a Google Form is for the purposes of getting participants for a book blog tour (a virtual book tour that occurs on blog sites). Filling out such a Google Form is completely optional. The information that may be collected is (1) name, (2) blog URL, (3) email address, and (4) a date for Chrys Fey’s guest post to appear on a data subject’s blog. By filling out this form and submitting it, data subjects consent to email contact for the purposes of scheduling and setting up a guest post on their blog during the time specified. All information entered and stored in the Google Form will be deleted once the blog tour is completed.
Chrys Fey also has a Google Form on her blog, author website, and in her newsletter for her street team. Filling out the form is optional. When a data subject fills out the form, they understand they’ll be contacted as a member of Chrys Fey’s street team at any given time. All information is stored for the purposes of street team contact.
- Editing Clients
When a data subject contacts Chrys Fey for editorial work and agrees to receive editorial work on their manuscript, Chrys Fey will use the data subject’s information to provide an invoice for the service. The data subject’s information, such as but not limited to their email address, will be kept private and only used for the purposes of editor and client contact.
See Chrys Fey’s Terms & Services: https://chrysfey.files.wordpress.com/2021/10/terms-of-service-1.pdf
NO REFUNDS OR REIMBURSEMENTS on completed edits.
- Rights of the Data Subject
- a) Right of Confirmation and Access
Each data subject has the right to obtain from the controller confirmation if personal data concerning him or her is being processed, as well as access what personal data is being stored.
- b) Right to Rectification (Correction)
Each data subject has the right obtain from the controller the rectification (i.e. the correction) of inaccurate personal data concerning him or her, such as completing incomplete personal data when they opted in to a mailing list (e.g. author newsletter or street team) or filled out a Google form for a blog tour.
- c) Right to Erasure (Right to Be Forgotten)
Each data subject has the right to obtain from the controller the erasure of personal data concerning him or her, such as for a mailing list, and the controller has the obligation to erase personal data without undue delay.
- d) Right of Restriction of Processing
Each data subject has the right to request restriction of his or her personal information.
- e) Right to Data Portability
Each data subject has the right to obtain and reuse his or her personal data for his or her own purposes across different services. (Your personal data is yours.)
- f) Right to Object
Each data subject has the right to object to the processing of personal data concerning him or her. Once objected, the controller will no longer process the personal data for direct marketing (e.g. author newsletters), unless the controller can demonstrate compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the data subject, or for the establishment, exercise or defense of legal claims.
- g) Right to Withdraw Data Processing Consent
Each data subject has the right to withdraw his or her consent to the processing of his or her personal data at any time by contacting the controller, such as for mailing lists they had once opted in to receive. For this purpose, an unsubscribe link is found in every newsletter.
- Legal Basis for the Processing
Art. 6(1) lit. a GDPR states processing shall be lawful only if and to the extent that at least one of the following applies: (1) the data subject has given consent to the processing of his or her personal data for one or more specific purposes; (2) processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract; (3) processing is necessary for compliance with a legal obligation to which the controller is subject; (4) processing is necessary in order to protect the vital interests of the data subject or of another natural person; (5) processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller; (6) processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.
- Legitimate Interests of the Controller or Third Party
Processing of personal data is based on Article 6(1) lit. f GDPR and necessary for the purposes of legitimate interests pursued by the controller or a third party, except where such interests are overridden by the interests, rights, or freedoms of the data subject.
- Data Retention Period
Personal data processed for any purpose(s) is stored as long as it is necessary for the purpose the data was collected. When necessary, data will be reviewed, updated, or deleted, depending on whether the data needs to be retained, archived, or is no longer needed.
- Automated Decision-Making
Chrys Fey does not use automatic decision-making or profiling.
- Protection of Children
Chrys Fey does not specifically market to children under the age of 13. She does not knowingly collect or process personal data from children under the age of 13. If she discovers that she has unknowingly collected or processed personal information from a child under the age of 13 through a mailing list (e.g., author newsletter or street team), she will delete such information as soon as possible.