Privacy Policy

This Privacy Policy applies to my website, www.notesheep.com operated by notesheep acting as the data controller, and the third parties I`m using to provide the website (“we”, “us”, “our”, “I”).

Background

This Privacy Policy describes our privacy practices in plain language, keeping legal and technical jargon to a minimum, to make sure you understand the information provided. However, to achieve this objective I would like to explain you the following three concepts.

  1. What is Personal Information?

Personal Information is any information that relates to an identified or identifiable living individual. Different pieces of information, which collected together can lead to the identification of a particular person, also constitute Personal Information.

  • What is Processing?

“Processing” means and covers virtually any handling of data.

  • What law applies?

I process the Personal Information you entrust me with to a high standard, and in particular in accordance with the requirements of the New York Privacy Act (“NYPA”) and the General Data Protection Regulation (“GDPR”).

General Principles

  1. Purpose and legal basis of processing

In accordance with the NYPA and GDPR we need to have both a purpose and a legal basis to process Personal Information. The purposes are:

  • providing the website and its functions and contents,
  • responding to contact requests and communicating with my visitors, clients, and website users,
  • providing my services, including facilitating sales of curriculums, projects, activi ties,
  • security measures.

Of course, we can only do that if we have at least one of the following legal bases or in other words lawful reasons to do so. Unless specifically described below, we typically link the above purposes to one of the following:

  • your consent,
  • to fulfill our services and carry out contractual obligations,
  • to fulfill our legal obligations, and
  • to protect our legitimate interests.
  • Security

We use SSL or TLS encryption to ensure the security of data processing and to protect the transmission of confidential content, login data or contact requests that you send to us. We have also implemented numerous security measures (“technical and organizational measures”) for example encryption or need to know access, to ensure the most complete protection of Personal Information processed through my website.

Nevertheless, internet-based data transmissions can always have security gaps, so absolute protection cannot be guaranteed. In this sense, databases or data sets that include Personal Information may be breached inadvertently or through wrongful intrusion.

Upon becoming aware of a data breach, I will notify all affected individuals whose Personal Information may have been compromised as expeditiously as possible after which the breach was discovered.

  • Retention and Storage

I retain your Personal Information as necessary in connection with the purposes described in this Privacy Policy.

  • Minors

I do not request Personal Information from minors and children and do not knowingly collect such data or pass it on to third parties.

  • Automated decision-making

Automated decision-making including profiling does not take place.

  • Do Not Sell

I do not sell your Personal Information.

  • Special Category Data

Unless specifically required and consent is obtained, for a particular service, I do not process special category data such as credit card data or social security numbers.

  • International Transfer

In the course of my website operation, we process data. We usually do not transfer Personal Information to countries outside the USA. However, if we do, I will make sure that processing of your Personal Information is governed by Processing Agreements that include Standard Contractual Clauses for a high level of data protection.

  1. Sharing and Disclosure

We will not disclose or otherwise distribute your Personal Information to third parties unless this is a) necessary for the performance of my services, b) you have consented to the disclosure (such as to process a payment by a third party payment processor), c) or if we are legally obliged to do so e.g., by court order or if this is necessary to support criminal or legal investigations or other legal investigations or other legal proceedings at home or abroad or to fulfill our legitimate interests.

Data collection and processing

  1. Data that is collected automatically
  2. Logfiles

Each time you visit my website, a number of general data and information is transmitted. This data and information are technically necessary for the display my website to you and that serve the stability, security and danger or threat prevention in the event of attacks on my website, such as:

  • IP address
  • date and time of an access to the website
  • type and version of browser used
  • operating system used and its interface
  • the website from which an accessing system arrives at my website (so-called referrer)
  • sub-websites that are accessed via an accessing system on my website,
  • Internet service provider of the accessing system.

This data is deleted after the storage is no longer necessary for error analysis or danger or threat prevention. The legal basis for this data processing is my legitimate interest. When analyzing these general data and information, I do not draw any conclusions about you as a data subject. Analyzing is based on aggregate data and trends.

  1. Hosting

To provide our platform, we use the cloud services of Bluehost a service operated by Newfold Digital Inc, who process all data to be processed in connection with the operation of my website on my behalf. The legal basis for the data processing is our legitimate interest in providing our services.

  1. Content Management System

We also use the Content Management System (CMS) of WordPress by Automattic Inc to publish and maintain the created and edited content and texts on our website. This means that all content and texts submitted to us is transferred to WordPress. This represents a legitimate interest.

  1. Cookies

We use cookies on our website to improve your browsing experience and to help us understand how our website is being used. This Cookie Policy explains what cookies are, how we use them, and your options regarding their use.

What are cookies?

Cookies are small text files that are placed on your device when you visit a website. They are widely used to make websites work, or to work more efficiently, as well as to provide information to website owners.

How we use cookies

We use cookies to:

  • remember your preferences and settings,
  • analyze how our website is being used,
  • improve your user experience, and
  • deliver targeted advertising.

The cookies we use fall into the following categories:

  • Strictly necessary cookies: These cookies are essential for the operation of our website and cannot be turned off in our systems.
  • Performance cookies: These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our website.
  • Functionality cookies: These cookies enable us to remember your preferences and settings, such as language or font size, to provide you with a more personalized experience.
  • Targeting cookies: These cookies may be set through our website by our advertising partners to deliver targeted ads based on your browsing habits.

Your options

Most web browsers allow you to control cookies through their settings preferences. However, disabling cookies may affect the functionality of our website.

You may opt-out of third-party cookies by visiting the opt-out pages of the Network Advertising Initiative, the Digital Advertising Alliance, or the European Interactive Digital Advertising Alliance.

Changes to this policy

We may update this Cookie Policy from time to time. The updated policy will be posted on our website, and the date of the most recent revision will be indicated at the top of this page.

Third-party services and content

Third-Party Websites

Our Website may contain links to other websites operated by third parties that are outside our control. We are not responsible for the privacy practices of these third-party websites. We encourage you to review the privacy policies of these websites to understand their data collection and use practices.

We may also use third-party plugins or widgets on our Website to enhance the user experience. These plugins or widgets may collect information about your use of our Website and may automatically transmit this information to the third-party provider. This information may include your IP address, web browser type, operating system, device type, and other usage information.

We do not control the information collection and use practices of these third-party providers and are not responsible for their privacy policies. We encourage you to review the privacy policies of these providers to understand their data collection and use practices.

We use Google Analytics to help us understand how our website is being used and to improve its performance. Google Analytics is a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses cookies to analyze how visitors use our site. The information generated by the cookie about your use of our website (including your IP address) will be transmitted to and stored by Google on servers in the United States.

We use this information to evaluate your use of our website, compile reports on website activity for website operators and provide other services relating to website activity and internet usage. We may also share this information with third parties for marketing or analytics purposes.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however, please note that if you do this you may not be able to use the full functionality of our website. By using our website, you consent to the processing of data about you by Google in the manner and for the purposes set out above.

For more information about Google Analytics, please visit their website at www.google.com/analytics.

The following provides an overview of third-party providers and their content, together with links to their privacy policies, which contain further information on the processing of data and so-called opt-out measures, if any,

If you do not wish to participate in our advertising personalisation or retargeting/tracking you can object to behavioural advertising at the following websites: Your Online ChoicesDigital Advertising Alliance of CanadaNetwork Advertising Initiative or AdChoices.

  • Data that is collected directly
  • General

In general, Personal Information I collect may include

  • your name, email address, address, contact telephone number,
  • demographic data, such as age, gender, your interests, and preferences, and
  • other information that I need to process payment for my services.
  1. Contacting me

If you contact me, your transmitted Personal Information will be automatically stored for the purpose of processing the request or replying to you. Data processing for the purpose of contacting me is carried out on the basis of your voluntarily given consent or the initiation of a contractual service.

  1. Working with me and my services

When requesting my services, it is necessary, among other things, to provide your name, e-mail address and postal address and, if applicable, your payment data, and other details. I process and store the Personal Information provided when you request my services solely for the purpose of providing you with the ordered service. Accordingly, the data is processed on the basis of our contractual relationship as well as to fulfil my legal obligations. I do not store credit card data as that is transmitted directly to the third party payment processor.

  1. Administration and contact management

I process data within the scope of administrative tasks as well as organization of my business, financial accountingand compliance with legal obligations, such as archivingIn doing so, I process the same data that I process in the context of providing our contractual services. The purpose and my interest in the processing thus lies in the administration, financial accounting, archiving of data, i.e., tasks that serve the maintenance of our business activities, performance of our tasks and provision of our services. In this context, I disclose or transmit data to the tax authorities, consultants such as tax advisors or auditors as well as other fee offices and payment service providers.

Cooperation with processors

We use content or service offers of third-party providers on the basis of my legitimate interests in order to integrate their content and services on my website. This usually requires that the third-party provider becomes aware of your IP address so that the content and services can be displayed on your device.

Marketing

Insofar as you have also given me your consent to process your Personal Information for marketing and advertising purposes, I`m entitled to contact you for these purposes via the communication channels you have given your consent to.

Your Rights and Privileges

  1. Privacy Rights

Under the NYPA, you can exercise the following rights:

  • Right to Notice
  • Right to Opt-In Consent
  • Right to Access, Correct Data
  • Right to Delete

Under the GDPR, you can exercise the following rights:

  • Right to information
  • Right to rectification
  • Right to object to processing
  • Right to deletion
  • Right to data portability
  • Right of objection
  • Right to withdraw consent
  • Right to complain to a supervisory authority
  • Right not to be subject to a decision based solely on automated processing.

If you have any questions or if you want to exercise your rights, please contact me.

  • Updating your information

If you believe that the information, I hold about you is inaccurate or request its rectification, deletion, or object to its processing, please do so by contacting me.

  • Withdrawing your consent

You can withdraw consents you have given at any time by contacting me.

  • Access Request

In the event you want to make a Data Subject Access Request, please contact us. I will respond to requests regarding access and correction as soon as reasonably possible. Should I`m not be able to respond to your request within thirty (30) days, I will tell you why and when I will be able to respond to your request. If I`m unable to provide you with any Personal Information or to make a correction requested by you, I will tell you why.

  • COPPA (Children Online Privacy Protection Act)

When it comes to the collection of Personal Information from children under the age of 13 years old, the Children’s Online Privacy Protection Act (COPPA) puts parents in control. The Federal Trade Commission, United States’ consumer protection agency, enforces the COPPA Rule, which spells out what operators of websites and online services must do to protect children’s privacy and safety online. I do not specifically market to children under the age of 13 years old. I do not allow users under the age of 13 to use my services and I do not knowingly collect any data from users under the age of 13, unless verifiable parental or legal guardian consent is obtained through direct offline contact.

  • CAN SPAM Act

The CAN-SPAM Act is a law that sets the rules for commercial email, establishes requirements for commercial messages, gives recipients the right to have emails stopped from being sent to them, and spells out tough penalties for violations. To be in accordance with CANSPAM, I agree to the following: If at any time you would like to unsubscribe from receiving future emails, you can email me at hello@notesheep.com, and I will promptly remove you from ALL correspondence.

  • Controls For Do-Not-Track Features

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track (‘DNT’) feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, my website does not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, I will inform you about that practice in a revised version of this policy.

Changes

I may update this Privacy Policy from time to time. If I make changes to this Privacy Policy or we materially change our use of your Personal Information, I will revise the Privacy Policy accordingly.

Questions?

If you have any questions about the processing of your Personal Information, please contact me at hello@notesheep.com.

Effective Date

This Privacy Policy was last updated on June 20, 2023.

Scroll to Top