Privacy Policy

This Privacy Policy describes how we collect, use, and protect your personal information in compliance with the General Data Protection Regulation (GDPR) when you visit or interact with our website, https://www.onglessanssouci.com.  Your privacy is important to us, and we are committed to being transparent about our data practices.

Who We Are:

Our website address is: https://www.onglessanssouci.com.

What Personal Data We Collect and Why:

• Comments: When you leave comments, we collect the data displayed in the comments form, your IP address, and browser user agent string to help detect spam. An anonymized string created from your email address (a hash) may be provided to the Gravatar service to see if you are using it.  The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After comment approval, your profile picture is publicly visible.

• Media:  If you upload images, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

• Cookies: We use cookies to enhance your browsing experience.  You can control your cookie preferences through your browser settings.

• Essential Cookies: These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms.

• Functionality Cookies: These cookies enable the website to provide enhanced functionality and personalization. They may be set by us or by third-party providers whose services we have added to our pages.  If you do not allow these cookies, then some or all of these services may not function properly.  For example, if you leave a comment, you can opt-in to save your name, email address and website in cookies for convenience. These last for one year.

• Analytics Cookies:  These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site.  All information these cookies collect is aggregated and therefore anonymous.

• Embedded Content: Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website. These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

• Password Reset: If you request a password reset, your IP address will be included in the reset email.

Legal Basis for Processing (GDPR):

Our legal basis for collecting and processing your data is based on your consent (e.g., for cookies), legitimate interests (e.g., spam detection), and contract performance (e.g., for registered users).

Who We Share Your Data With:

We do not sell or share your personal data with third parties for marketing purposes.  We may share data with service providers who assist us with website functionality, such as spam detection services.

How Long We Retain Your Data:

We retain your data only as long as necessary for the purposes outlined in this policy.  Comments and their metadata are retained indefinitely to recognize and approve follow-up comments automatically.  Registered user data is retained as long as the account is active.

Your Data Rights (GDPR):

You have the right to access, rectify, erase, restrict processing, data portability, and object to the processing of your personal data.  If you have an account or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.  To exercise these rights, please contact us.

Data Security:

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, use, or disclosure.

Where Your Data Is Sent:

Your data is processed within the European Economic Area.  If data is transferred outside the EEA, we ensure appropriate safeguards are in place.

Contact Us:

If you have any questions about this Privacy Policy, please contact us through the contact information provided on our website.