Privacy Policy - Grandmedia

We are very pleased about your interest in GrandMedia, our website and online offer. Data protection is of a particularly high priority for the management of GrandMedia.

The use of the Internet pages of GrandMedia is possible without any indication of personal data. However, processing of personal data could become necessary if you want to use our services or when you contact us. If processing of personal data is necessary and if there is no legal basis for such processing, we will generally obtain the consent of the data subject.

Therefore, it goes without saying that we comply with Latvia`s Personal Data Processing Law (PDPL) and the General Data Protection Regulation (GDPR) and treat personal data as strictly confidential.

As the Data Controller, GrandMedia has implemented numerous technical and organisational measures to ensure the most complete protection of personal data processed through this website. Nevertheless, Internet-based data transmissions can always be subject to security vulnerabilities, so that absolute protection cannot be guaranteed. For this reason, every data subject is free to transmit personal data to us by alternative means.

What this privacy policy regulates

This privacy policy governs the handling of personal data. It describes what personal data we collect when you use our website and how we use it. Personal data is individual information about personal or factual circumstances of a specific or identifiable natural person. This includes information such as your name, address, telephone number or date of birth as well as Online Identifiers and IP addresses. Statistical information that cannot be directly or indirectly linked to you – such as the popularity of individual website on our website or the number of users of a site – is not personal data.

Your rights

The data protection laws in your country may give you the following rights:

Right to information: what personal data a company processes and why (this notice).
Right of access: You can request information about data collected.
Right to rectification: If data collected is not correct, you can ask for it to be corrected.
Right to erasure: Under certain circumstances, you can request the erasure of your data.
Right to restriction of processing: In certain circumstances, you can request the further processing of your data, but the data will remain stored.
Right to data portability: You can have the data collected about you transferred to another provider in a machine-readable format.
Right to object: In certain circumstances (including where your data is processed on the basis of legitimate interests or for marketing purposes) you may object to processing.
Rights in relation to automated case-by-case decisions, including profiling: This includes several rights where data is processed solely by automated means, and this has a legal or significant impact on an individual. In these circumstances, you have, among other things, the right to human intervention in the decision-making process.

If you wish to exercise any of the rights listed above, you can contact us. For your protection and the protection of all our users, we may need to request certain information from you to help us confirm your identity before we can respond to the above requests.

If you feel that we have not resolved your concern, you have the right to make a complaint at any time. You can also contact your local data protection supervisory authority.

Based on your consent: Insofar as you have given us consent to process personal data for specific purposes, the lawfulness of this processing is based on your consent. Consent given can be revoked at any time. The revocation of consent does not affect the lawfulness of the data processed until the revocation.

Legal basis for data processing on our website

For the fulfilment of contractual obligations: In some cases, the processing of your data is also carried out for the fulfilment of a contract concluded with you at your request or for the fulfilment of a pre-contractual measure, such as in the context of a service obligation towards you. Further details on the relevant data processing purposes can be found in the relevant contractual documents and conditions of participation.

Within the framework of the balancing of interests: Where necessary, we process your data to protect our legitimate interests or the legitimate interests of third parties. These are, for example:

Use of cookies
Assertion of legal claims and defence in legal disputes
Ensuring stability and security.

Purposes of data processing on our website: Insofar as we process your personal data on our website, this is done for the purposes outlined below:

Technical provision of the website and monitoring its functionality
Statistical analysis of the use of the website
Collection of your device data (through the use of cookies)

How we use information

The main reason we use your information is to provide and improve our services. We also use your information to protect you and to provide you with advertisements that may be of interest to you.

Data processing

We process your personal data on our website in different ways:

Cookies

Cookies are text files which are stored on a computer system via an internet browser. Numerous Internet pages and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a string of characters by which Internet pages and servers can be assigned to the specific Internet browser in which the cookie was stored. This enables the visited Internet pages and servers to distinguish the individual browser of the data subject from other Internet browsers that contain other cookies. A specific internet browser can be recognised and identified via the unique cookie ID. For further details please visit our Cookie Policy.

Log files

The website of GrandMedia collects a series of general data and information each time a data subject or automated system calls up the website. This general data and information is stored in the log files of the server. The following data may be collected: (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system accesses our website (so-called referrer), (4) the sub-websites which are accessed via an accessing system on our website, (5) the date and time of an access to the website, (6) an Internet protocol address (IP address), (7) the Internet service provider of the accessing system and (8) other similar data and information that serve to avert danger in the event of attacks on our information technology systems.

When using these general data and information, GrandMedia does not draw any conclusions about the data subject. Rather, this information is needed (1) to deliver the contents of our website correctly, (2) to optimise the contents of our website and the advertising for these, (3) to ensure the long-term operability of our information technology systems and the technology of our website, and (4) to provide law enforcement authorities with the information necessary for prosecution in the event of a cyber-attack. Therefore, GrandMedia analyses anonymously collected data and information on one hand, and on the other hand, with the aim of increasing the data protection and data security of our enterprise so that we can ultimately ensure an optimal level of protection for the personal data we process. The anonymous data of the server log files are stored separately from any personal data provided by a data subject.

Comment function on our blog or gallery

For comments in our blog or gallery, we collect in addition to your comment, details of when the comment was created and, if you do not post anonymously, the username you have chosen will be stored. You have choices about the information on your comment. You don’t have to provide additional information on your comment; however, comment information helps you to get more from our Services. It’s your choice whether to include sensitive information in your comment and to make that sensitive information public. Please do not post or add personal data in your comment that you would not want to be available.

The comments and the associated data (e.g., IP address) are stored and remain on our website until the commented content has been completely deleted or the comments have to be deleted for legal reasons (e.g., offensive comments).

The storage of comments is based on your consent. You can revoke your consent at any time. For this purpose, an informal communication by e-mail to us is sufficient. The legality of the data processing operations already carried out remains unaffected by the revocation.

Newsletter

By subscribing to our newsletter, you agree to receive it and to the procedures described. We send e-mails and other (electronic) notifications with promotional information (hereinafter “newsletter”) only with your consent or on the basis of legal permission. If the contents of a newsletter are specifically described in the registration, they are decisive for the consent. In addition, our newsletters contain information about our products, offers, promotions and our company. The newsletter is sent by us or, if applicable, by a shipping service provider commissioned by us.

Registration for our newsletter takes place in a so-called double opt-in process. This means that after registration you will receive an e-mail in which you are asked to confirm your registration. This confirmation is necessary so that no one can register with other people’s e-mail addresses. The registrations for the newsletter are logged in order to be able to prove the registration process in accordance with the legal requirements. This includes the storage of the registration and confirmation time as well as the IP address. Likewise, changes to your (personal) data stored with the dispatch service provider are logged.

To register for the newsletter, it is sufficient to enter your e-mail address. The dispatch of the newsletter and the measurement of its success are based on your consent in accordance with Art.6 Para.1 lit. a Art.7 GDPR. The logging of the registration process is based on our legitimate interests pursuant to Art.6 Para.1 lit. f GDPR and serves as proof of consent to receive the newsletter.

You can revoke your consent to our newsletter at any time. You will find a link to unsubscribe at the end of each newsletter. Your (personal) data will be deleted in the event of a revocation.

Sharing your personal data

In the course of the necessary business processes, we are supported by external service providers in order to fulfil their tasks. To protect the data to be processed, the necessary data protection contracts have been concluded with all service providers. These are, in particular, service providers, as well as financial and consulting companies, which provide support in checking relevant data. In addition, we make use of specialised IT experts from suppliers and partner companies who have the relevant product know-how to support us in individual areas.

Updating your information

If you believe that the information, we hold about you is inaccurate or that we are no longer entitled to use it and want to request its rectification, deletion or object to its processing, please contact us.

For your protection and the protection of all of our users, we may ask you to provide proof of identity before we can answer the above requests.

Keep in mind, we may reject requests for certain reasons, including if the request is unlawful or if it may infringe on trade secrets or intellectual property or the privacy of another user. If you wish to receive information relating to another user, such as a copy of any messages you received from him or her through our service, the other user will have to contact us to provide their written consent before the information is released.

Icon links to social networks

We use small icons that refer to our website on third-party platforms. These are hyperlinks in each case, so no data is transferred from you automatically, but only when you click on the icons and a new tab opens in your browser with the third-party website. When you visit one of our pages equipped with a plugin, a connection to the platforms server is established. This tells the platforms server which of our pages you have visited. If you are logged into your account, you enable the platform to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your account.

Social Media

The data you enter on our social media pages, such as comments, videos, pictures, likes, public messages, etc. are published by the social media platform and are not used or processed by us for any other purpose at any time. We only reserve the right to delete content if this should be necessary. Where applicable, we share your content on our site if this is a function of the social media platform and communicate with you via the social media platform. The legal basis is our legitimate interest. The data processing is carried out in the interest of our public relations and communication.

If you wish to object to certain data processing over which we have an influence, please contact us. We will then examine your objection. If you send us a request on the social media platform, we may also refer you to other secure communication channels that guarantee confidentiality, depending on the response required. You always have the option of sending us confidential inquiries to our address stated in the imprint.

As already stated, where the social media platform provider gives us the opportunity, we take care to design our social media pages to be as data protection compliant as possible. With regard to statistics that the provider of the social media platform makes available to us, we can only influence these to a limited extent and cannot switch them off. However, we make sure that no additional optional statistics are made available to us.

Data processing by the operator of the social media platform

The operator of the social media platform uses web tracking methods. The web tracking can also take place regardless of whether you are logged in or registered with the social media platform. As already explained, we can unfortunately hardly influence the web tracking methods of the social media platform. We cannot, for example, switch this off.

Please be aware: It cannot be ruled out that the provider of the social media platform uses your profile and behavioural data, for example to evaluate your habits, personal relationships, preferences, etc. We have no influence on this. In this respect, we have no influence on the processing of your data by the provider of the social media platform.

Third Party Services

a) Google Analytics
If you have given your consent, this website uses Google Analytics, a web analytics service provided by Google LLC. The responsible service provider in the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

Google Analytics uses cookies that enable an analysis of your use of our web sites. The information collected by means of the cookies about your use of this website is generally transferred to a Google server in the USA and stored there.

We use the function ‘anonymizeIP’ (so-called IP masking): Due to the activation of IP anonymisation on this web site, your IP address will be shortened by Google. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

On our behalf, Google will use this information for the purpose of evaluating your (pseudonymous) use of the website and compiling reports on website activity. The reports provided by Google Analytics are used to analyse the performance of our website and the success of our marketing campaigns.

The recipient of the data is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland as a processor. We have concluded an order processing agreement with Google for this purpose. A transfer of data to the USA cannot be ruled out. Google LLC, based in California, USA, and possibly US authorities can access the data stored by Google. The data sent by us and linked to cookies are automatically deleted after 14 months. Data whose retention period has been reached is automatically deleted once a month.

The legal basis for this data processing is your consent, Art.6 Abs.1 S.1 lit.a GDPR. You can revoke your consent at any time with effect for the future by calling up the cookie settings and changing your selection there.

b) Google Tag Manager
We use Google Tag Manager, a web analytics service provided by Google, Inc. (“Google”). This service allows website tags to be managed via an interface. The Google Tag Manager only implements tags. No cookies are set and no personal data is collected. The Google Tag Manager triggers other tags that may collect data. The Google Tag Manager does not access this data.

If a deactivation has been made at domain or cookie level, it remains in place for all tracking tags, insofar as these are implemented with the Google Tag Manager. More information on the Google Tag Manager can be found at the following link: http://www.google.de/tagmanager/use-policy.html.

This service transmits data to the USA. The transmission takes place exclusively on the basis of your consent in accordance with Art. 49 Para. 1 lit. a GDPR. You give your consent by selecting the appropriate option in the consent management tool, which is displayed when you access our site. You can view and adjust your data protection settings here at any time.

c) Google Ad Manager
We use the online marketing tool Google Ad Manager from the operator Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ad Manager uses cookies to serve ads that are relevant to users, to improve campaign performance reports or to prevent a user from seeing the same ads more than once. Google uses a cookie ID to record which ads are shown in which browser and can thus prevent them from being shown more than once.

In addition, Google Ad Manager can use cookie IDs to record so-called conversions that are related to ad requests. This is the case, for example, when a user sees a Google Ad Manager ad and later calls up the advertiser’s website with the same browser and buys something there. According to Google, Google Ad Manager cookies do not contain any personal information. Due to the marketing tools used, your browser automatically establishes a direct connection with Google’s server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of Google Ad Manager, Google receives the information that you have called up the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider may obtain and store your IP address.

You can object to participation in this tracking procedure by deactivating cookies for conversion tracking. To do this, set your browser to block cookies from the domain www.googleadservices.com, https://www.google.com/settings/ads, whereby this setting will be deleted when you delete your cookies.

Alternatively, you can obtain information about the setting of cookies from the Digital Advertising Alliance at the internet address www.aboutads.info and make settings for this. Finally, you can set your browser in such a way that you are informed about the setting of cookies and decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general. If you do not accept cookies, the functionality of our online offer may be limited.

This service transmits data to the USA. The transmission takes place exclusively on the basis of your consent in accordance with Art. 49 Para. 1 lit. a GDPR. You give your consent by making the appropriate selection in the consent management tool, which is displayed when you call up our site. You can view and adjust your data protection settings here at any time.

d) Google AdSense
We use Google AdSense, a web advertising service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google AdSense uses so-called “DoubleClick DART Cookies” (“Cookies”). In addition, Google AdSense also uses so-called “web beacons” (small invisible graphics) to collect information, through the use of which simple actions such as user traffic on our online offer can be recorded, collected and evaluated. The information generated by the cookie and/or web beacon (including your IP address) about your visit to this website will be transmitted to and stored by Google on servers in the United States.

Google uses the information thus obtained to carry out an evaluation of user behaviour with regard to the AdSense ads. The IP address transmitted by your browser as part of Google AdSense will not be merged with other Google data. The information collected by Google may be transferred to third parties where required to do so by law, and/or where such third parties process the information on Google’s behalf.

This service transmits data to the USA. The transmission takes place exclusively on the basis of your consent pursuant to Art. 49 Para. 1 lit. a GDPR. You give your consent by making the appropriate selection in the consent management tool, which is displayed when you call up our site. You can view and adjust your data protection settings here at any time.

e) Google Ads – conversion tracking
We use the online advertising programme “Google Ads” of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland and conversion tracking within the framework of Google Ads. The conversion tracking cookie is set when you click on an ad placed by Google. These cookies lose their validity after 30 days and are not used for personal identification. If you visit pages of this online offer and the cookie has not yet expired, Google and we can recognise that you have clicked on the ad and have been redirected to this page. Each Google Ads user receives a different cookie. Cookies cannot therefore be tracked across Ads users’ websites.

The information collected using the conversion cookie is used to create conversion statistics for Ads users who have opted in to conversion tracking. We learn the total number of users who clicked on our ad and were redirected to a page tagged with a conversion tracking tag. However, we do not receive any information that identifies you personally. If you do not wish to participate in the tracking, you can object to this use by deactivating the Google conversion tracking cookie via the internet browser under user settings. You will subsequently not be included in the conversion tracking statistics.

f) Google Ads – Remarketing
We use the online advertising programme “Google Ads” of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland and the remarketing service within the framework of Google Ads. This enables us to target you with personalised, interest-related advertising if you have already shown an interest in our offers. The advertising material is displayed on the basis of a cookie-based analysis of previous usage behaviour, but no personal data is stored.

In the cases of retargeting technology, a cookie is stored on your computer or mobile device in order to collect anonymised data about interests and thus to adapt the advertising individually to the stored information. As a result, you will be shown advertising that is most likely to match your product and information interests.

g) Hotjar
We use Hotjar to better understand the usage patterns and needs of our users and to optimise our services and user experience. Hotjar allows us to better understand the user experience on our websites (i.e., how long users spend on which of our websites, which links they click on, what they like and don’t like, etc.) so that we can tailor our offerings based on user feedback.

Hotjar uses cookies and other technologies to collect information about users’ behaviour and devices (in particular, a device’s IP address (which is collected and stored in anonymised form), screen size, device type (unique device identifiers), browser information, geographical information (on a country-by-country basis only), preferred language for viewing our website). Hotjar stores this data in a pseudonymised user profile. Neither Hotjar nor we use this data to identify individual users, nor is the data merged with other data about individual users. You can object to the creation of user profiles, the storage of data about your use of our website by Hotjar and the use of tracking cookies by Hotjar on other websites at any time by following this link https://www.hotjar.com/opt-out.

h) Facebook Remarketing
Within our website, so-called “Facebook pixels” of the social network Facebook, which is operated by Meta Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are a resident of the EU, Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”), are used. With the help of the Facebook pixel, it is possible for Facebook to determine the visitors to our offer as a target group for the display of advertisements, so-called “Facebook ads”. Accordingly, we use the Facebook pixel to display the Facebook ads placed by us only to those Facebook users who have also shown an interest in our website. This means that with the help of the Facebook pixel we want to ensure that our Facebook ads correspond to the potential interest of the users and do not have a harassing effect. With the help of the Facebook pixel, we can also track the effectiveness of the Facebook ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook ad.

The Facebook pixel is directly integrated by Facebook when our web sites are accessed and can save a so-called cookie, i.e., a small file, on your device. If you subsequently log in to Facebook or visit Facebook while logged in, your visit to our website will be noted in your profile. The data collected about you is anonymous for us, so it does not allow us to draw any conclusions about the identity of the user. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible. The processing of the data by Facebook takes place within the framework of Facebook’s data usage policy. Accordingly, you can find more information on how the remarketing pixel works and generally on the display of Facebook ads, in Facebook’s data usage policy: https://www.facebook.com/policy.php

You can object to the collection by the Facebook pixel and use of your data for the display of Facebook ads. To do so, you can visit the page set up by Facebook and follow the instructions there on the settings for usage-based advertising: https://www.facebook.com/settings?tab=ads or declare the objection via the US page http://www.aboutads.info/choices/ or the EU page http://www.youronlinechoices.com/. The settings are platform-independent. The settings are platform-independent, i.e., they are applied to all devices, such as desktop computers or mobile devices.

i) Google Maps
We use the Google Maps service on our website. This allows us to show you interactive maps directly on the website and enables you to use the map function conveniently. The legal basis for the use of Google Maps is Art. 6 para. 1 lit. f) GDPR.

By visiting the website, Google receives the information that you have called up the corresponding sub-page of our website. This takes place regardless of whether Google provides a user account via which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want your data to be associated with your Google profile, you must log out before. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or designing its website in line with requirements. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must contact Google to exercise this right.

Exercising your rights

If you would like to exercise any of our rights as set out above in the “Your rights” section above or have a complaint, please contact us. Any such request will be responded to within one month and we might require proof of identity to verify and process your request. For more information about these rights, please contact us.

Security

For security reasons, this site uses TLS/SSL encryption. You can recognise this encrypted connection by the fact that the address line of the browser changes from “http://” to “https://”, as well as by the lock symbol in your browser line. If encryption is activated, data that you transmit to us cannot be read by third parties.

Data of Children

Persons under the age of 18 are not permitted to transmit personal data to us or to submit a declaration of consent without the consent of their legal guardians. We encourage parents and guardians to actively participate in the online activities and interests of their children. If you become aware that your Child has provided us with Personal Data, without parental consent, please contact us and we take the necessary steps to remove that information from our server.

How often do we update this privacy policy?

This privacy policy may be amended from time to time, for example to bring it into line with new data protection legislation. We will post any changes to the privacy policy on this page. We will keep older versions of this privacy policy in an archive for your reference.

Sign Up For Newsletter!