Some personal data information is essential to Corona Canvas functioning and our supplying a service to you. If you do not wish to allow us to process your data then you will not be able to use our services.
Useful contact details and a summary of the control you have over your personal data can be found at the end of this policy.
In processing personal data, we will comply with relevant legislation in force from time to time in England. We may change this policy from time to time by updating this policy as we improve our service to you and as relevant Data Protection legislation comes into force including the General Data Protection Regulation (EU) 2016/679. Your personal information will continue to be held in accordance with our policy as it develops. We will not reduce your rights under this policy without your explicit consent.
Data Controller and Processor
Connecting Canvases Ltd makes the decisions concerning how personal data through Corona Canvas is processed. Accordingly we are the Data Controller for your personal information. Therefore Connecting Canvases Ltd should be your first point of contact.
Legal Basis for Processing
We gather data on three groups,
I. the non-registered viewer of our website in which our services are described ("Viewer"),
II. our Contributors registering to make a contribution to the Canvas ("Contributors")
III. individuals registering to use other services such as posting comments on our Website ("Registrants").
· Where you are merely a Viewer we will normally only gather data indirectly and anonymously but might also do so directly if you i) request further information from use ii) engage with us on social media as examples.
· Where you are our Contributors or other Registrants we will gather personalised data indirectly and directly.
We are required to process your personal data in a lawful, fair and transparent manner.
Contract - where you are inquiring about or are making a Contribution, or during the process of registering with us, we process data necessary to answer your enquiry and process your account in order to provide you with our services as set out in the Canvas Terms and Conditions. Our service may include being in contact with you as follow up even after your initial Contribution has been made, as this is part of the contract with you, such as purchases of the Canvas, information on use of the Canvas as well as to maintain your registration with us.
Legitimate Activities - where we are required to store information for legal purposes, for example where you have been a Contributor or Registrant for contractual purposes as above, we do so as part of our legitimate activities as a lawful business. Further we may be required to hold onto your basic details as part of our monitoring our ownership of intellectual property rights.
Anonymous Website Tracking
Some personal data may be processed by us when you are merely browsing Connecting Canvas.
A cookie is a small file which is placed on your device when you visit a website. The file is added and the cookie helps analyse web traffic or lets you know when you visit a particular site. Cookies help us provide you with a better website by tailoring the website operations to your needs and to respond to you as an individual user such as identifying which pages you find useful and which you do not.
Such a cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us.
We use traffic log cookies to identify which pages are being used. This helps us analyse data about web page traffic and improve our website in order to tailor it to customer needs. We only use this information for statistical analysis purposes and does not identify you individually.
Merely by browsing our website, Corona Canvas tracks your use so that we can offer you a better user experience relating to your navigation habits. This helps us analyse data about social media traffic and improve Corona Canvas in order to tailor it to the needs of our customers.
Our website uses tracking technology to help us to analyse user behaviour.
Google Analytics is an example of this technology. It is an analysis service by Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Google Analytics allows us to analyse the use of our website application usage.
The information about your visit collected by Google Analytics is usually transferred to a Google server in the USA and saved there. Google will use the information collected on behalf of the application operator to evaluate the users' use of the application, to compile reports about the users' activities within this application, and to provide further services for the application operator related to the use of the application.
We will not gather any personally identifiable information about you through Google Analytics. You can find more information about what data can be collected via Google Mobile App Analytics at http://support.google.com/analytics/bin/answer.py?hl=en&answer=2568871 .
By using the Website, the user explicitly consents that his or her information is collected via Google Analytics.
What we might collect
Corona Canvas collects the following types of information.
- identification of your past and current use of Corona Canvas
· technical information from your device to enable it to interact with our system
· information about your visits including page response time, pages visited, methods of browsing and similar
Direct Information Gathering
Some personal data will be processed by us when you have made a Contribution to or merely request further contact from Corona Canvas.
Such personal information is used to enter into contracts with you and it will be processed accordingly for that purpose. Please note that as part of our service is the potential for you to purchase images of the Canvas with your Contribution centred, and in order to record details of ownership of copyright, it will be held for a prolonged period. Further, personal details only may be held as part of our accounting records held by us for compliance purposes. Only data sufficient for these purposes will be held and this data will be held securely and is kept separately and only for the purposes of tax compliance.
Risk and Personal Data
Please note that sending information over the internet is not completely secure and we cannot guarantee the security of your data while it is in transit. Any data you send is at your own risk. Please do not include sensitive personal data sent over the internet.
What we might collect
· name and contact information including email address limited and specific for the purposes of those with adjoining spaces on the Canvas communicating with you, and you with them
· name and contact information including email address and telephone contact details strictly for our own purposes to contact you
· name and contact information including email address based on your interest in matters related to the Corona Canvas project such as art so that we might contact you about this in the future
What we do with Personal Data we gather
We take different types of information from you depending on whether this is anonymous or for personalised purposes.
- Processing of anonymous data is either stored on your device and not accessed by us (eg cookies) or informs our statistical analysis on website and page use (eg traffic cookies, Google Analytics).
· Processing of your personalised information involves a number of different actions depending on why you have supplied us with information:
1 Anonymous Data
· to customise Corona Canvas according to your preferences and tastes
· to improve how we display information on our products and services on our website for your benefit and in keeping with your device
- to administer our site and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
- to allow you to participate in interactive features of our service, when you choose to do so;
- as part of our efforts to keep our site safe and secure;
- to measure or understand the effectiveness of advertising we serve to you and others, and to deliver relevant advertising to you;
- to make suggestions and recommendations to you and other users of our site about goods or services that may interest you or them.
2 Personalised Data
Canvas Location Data
The contact data we have for you may link your identity with the location of a specific space or piece of artwork on the Canvas. This will enable us to arrange for views of the Canvas centred on your artwork should you wish to make such a purchase.
News about the Canvas
We will hold your personal contact information in order to update you with news of the Canvas such as where it might be exhibited, awards or other newsworthy issues, including related news in the artworld.
News about future Canvas projects
We will hold your personal contact information in order to update you with news of future Canvas community art projects being launched.
We would be delighted if you would provide us with testimonials of your great experiences with us. We will review these before placing them on our marketing literature including our website and will only use your first name or an assumed name if you so wish. Should you wish for your testimonial to be removed please let us know using the contact details provided below.
We may also keep data to record the appreciation shown by our customers and their experiences. This is for internal purposes to enable us to check that we continue to provide an excellent service. If the record is initiated by us then we will anonymise it, using only first names.
Should the record be initiated as a result of a request or complaint by you then only essential information relating to the issue will be kept and in that event for no longer than 3 months unless you request otherwise. After 3 months we may retain information showing the fact of the request or complaint for training purposes but the information will be anonymised.
We require your personal information to make our initial response to a question or query you have requested.
Storage & Processing
The information we hold about you may be stored outside the European Economic Area in order to process your data. Initially your personal information is held securely by us. In normal circumstances your information not directly connected with the Canvas is held for a maximum of 12 months in the absence of further explicit consent from you.
Once information is received by us it is stored centrally. The personal information enables us:
· to operate the Corona Canvas customer service and respond to your enquiry;
· for internal record keeping, to follow up your enquiry at times convenient to you.
Future Marketing & Relevant Interest
· depending on your consent we may periodically use your contact details to send you promotional emails or texts about new products, special offers or other information connected with your interest in the Corona Canvas project.
· depending on your consent to contact you, using your contact details, for market research purposes
· depending on your consent, supply of your contact details to third parties for use with related marketing messages
Business Purchase or Sale
Please note that if the business were to be sold or transferred or we were to purchase another business, your data will be transferred with it but only as part of the business as sold or transferred. Your personal information may be disclosed to a prospective buyer or seller of such business.
Supplying your data to third parties
Subject to your consent we will add your contact details to a mailing list which we might supply to carefully selected partners who would like to let you know about products and services connected with producing and showing art, including exhibitions, art supplies and similar. From time to time, we may provide your email address to third parties who we consider could offer you a product or service that is congruent with your act of contributing to the Corona Canvas project.
External Sites and Social Media
When you connect to or from Corona Canvas using external websites or for example posting comments on this website or via our social media accounts, please be careful to check whether the external site is one controlled by us (usually our social media spaces on platforms such as Facebook, Instagram, Twitter or LinkedIn) or those used by third parties. We cannot control the information practises of other companies and organisations that might advertise, display, link to, or offer to obtain our goods or services for you. We cannot take responsibility for, cannot control and this policy does not cover spaces on the internet not controlled by us.
Similarly our website may contain links to enable you to visit other websites of interest easily. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.
Note also that third party cookies might be downloaded onto your device as a result of your use of this website, for example if you were to send information to or from this website to your social media account your account may require the use of such cookies to enable this transfer to take place. These cookies are not under our control and we disclaim any responsibility for the acts of third party cookies.
Social Media Data Gathering
We employ technology to help us identify when you might have encountered us through social media or to send you targeted marketing messages relating to products we have to offer during your social media experience. The use of this technology does result in our holding your personal contact details and likes and dislikes. We do not categorise this information based on what the law describes as "sensitive personal data".
The social network Facebook is headquartered at 1601 South California Avenue, Palo Alto, CA 94304, USA. Facebook is used and to get Facebook information about Corona Canvas Contributors. An overview of Facebook integrations and social plugins can be found here: http://developers.facebook.com/docs/plugins/ .
Users have to actively enable the Facebook connection in their Settings in order to be able to share information on Facebook and invite friends via Facebook. If users do not want Facebook to gain information on their Corona Canvas usage or if they don't want Corona Canvas to gain information about them via Facebook, they should leave the Facebook integration disabled as it is in the default settings. Once enabled, users can disable the Facebook connection again in their Settings at any time.
By activating the Facebook connection in his or her settings, the user explicitly consents to the information exchange described in this section. Any data arising from the use of Facebook will be located outside the EEA and subject to transmissions between the EEA and elsewhere.
Controlling your personal information
You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can modify your browser setting to decline cookies if you prefer.
You have control over the information you supply to us whether by:
i) consent gained from your continuing to browse our site, or
ii) your explicit consent by completing a contact form whether for requesting, or
iii) your explicit consent to further processing to send you ongoing marketing material concerning your interest in interests related to the Canvas, or
iv) by your contacting us about your personal information as described below.
Consent for the direct purpose for which you supply your data will be inferred from the situation in which you give this information. If you choose to withdraw your consent to the processing of your personal information at any time then you should inform us in writing using our contact details below.
You may request details of personal information which we hold about you under the relevant Data Protection legislation in force at the time (a "Data Subject Access Request"). If you would like a copy of the information held about you, please email us at email@example.com .
Data Correction, Complaints & Deletions
If you believe that any information we are processing on you
· is incorrect or incomplete, (perhaps for example because you have seen your name spelt incorrectly or someone else has received a communication meant for you) or
· is being mis-used (perhaps for example a company you don't know has contacted you using information you supplied to us and you didn't agree to this), or
· should no longer be processed by us (perhaps for example because you no longer wish to be contacted)
then please email us as soon as possible. We will promptly correct or delete any information found to be incorrect or no longer necessary and deal with your complaint. These rights to object are subject to our right to consider whether we are permitted or required to continue the processing in which event we will inform of our reasons.
We ask that if you have any concern you first approach us via our contact email address below.
Should you wish to take the matter further we ask that you contact us in writing setting out you concerns in detail to enable us to provide you with an effective response.
Request for Deletion of information
If you have provided your consent to receive future marketing messages then we will hold this information for more than 3 months until you indicate that you no longer wish to receive messages from us.
If you contact us to indicate that you no longer wish to receive messages from us we may store that indication centrally.
Lawful Disclosure by Us
Please note that you hereby provide your consent and in any case we may be required to disclose your data to lawful authorities for the prevention of crime or regulatory purposes or a court as such court requires. In some circumstances we may not be permitted to inform you that we have made such a disclosure.
Corona Canvas is a product of Connecting Canvas Limited whose trading address and contact for written correspondence is at The Old Dairy, Greenhall Farm, Bramfield, Hertfordshire, SG14 2QT, UK. Any Data Subject Access Request or other contact should be made to our contact email address at firstname.lastname@example.org.