Privacy Policy and Cookie Information

Who I am

I am David Jonathan Millward – a Freelance FOH Live Sound Engineer. This is the Privacy Policy page and Cookie information for my website: https://fohengineer.co.uk.

What personal data we collect and why we collect it

Comments

What is collected?

When visitors leave comments on the site I collect the data shown in the comment form:

  • Name
  • Email address
  • Website (optional)
  • Comment

The visitor’s IP address and browser user agent string are collected to help spam detection.

Third party data sharing of comment data

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. After approval of your comment, your profile picture is visible to the public in the context of your comment.

The Gravatar service privacy policy is available here: https://automattic.com/privacy/.

What is the legal basis for processing this data?

Consent

What is the data retention period?

If you leave a comment, the comment and its metadata are retained indefinitely. This is so I can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue.

Unpublished or spam comments are deleted after 30 days.

User accounts and media

What is collected?

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

For logged in guest contributors, the personal information provided is stored in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username).  As the website administrator, I can also see and edit that information.

Third party data sharing of user account data

This information is not shared with third parties.

What is the legal basis for processing this data?

Consent

What is the data retention period?

The data is retained indefinitely.

Contact forms

What is collected?

If you submit data through my contact form the following is collected:

  • Name
  • Email
  • Website (optional)
  • Message

Form submissions are emailed to me directly and not stored on the website.

Third party data sharing of contact form data

Contact form data is sent by email.

What is the legal basis for processing this data?

Legitimate interest

What is the data retention period?

If we establish a contractual relationship the data is kept for 7 years from the date of our last contact.

If not, your data will be deleted after 1 year.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracing your interaction with the embedded content if you have an account and are logged in to that website.

Analytics

I use three third-party forms of analytics – Jetpack Site Stats, Google Analytics and Microsoft Bing Webmaster Tools.

Jetpack Site Stats: What is collected?

  • IP address
  • com user ID (if logged in)
  • com username (if logged in)
  • user agent
  • visiting URL
  • referring URL
  • timestamp of event
  • browser language
  • country code
  • post and page views
  • video plays (if videos are hosted by WordPress.com)
  • outbound link clicks
  • referring URLs and search engine terms
  • country.

Jetpack also tracks performance on each page load that includes the Javascript file we use for Stats. This is exclusively for aggregate performance tracking across Jetpack sites in order to make sure that the plugin and code is not causing performance issues. This includes the tracking of page load times and resource loading duration (image files, Javascript files, CSS files, etc.).

Jetpack’s privacy statement for Site Stats

Third party data sharing of Jetpack data

The data is shared with Jetpack, which is part of Automattic.

What is the legal basis for processing this data?

Legitimate interest

What is the data retention period?

Any piece of data explicitly identifying a specific user (IP address, WordPress.com ID, WordPress.com username, etc.) is not visible to the site owner when using this feature. For example, a site owner can see that a specific post has 285 views, but he/she cannot see which specific users/accounts viewed that post.

Stats logs — containing visitor IP addresses and WordPress.com usernames (if available) — are retained by Automattic for 28 days and are used only for the purpose of powering this feature.

Google Analytics: What is collected?

Google Analytics collects data on the usage of this website, capturing statistics that are used for understanding the usage of this website so that I can improve it.

As I understand it my configuration aggregates the data so that visitors are not personally identified. I am not using the User-ID feature and the Google Analytics tracking script is set to anonymise IP addresses. I am also not sharing advertising data with Google AdWords or DoubleClick.

You can read more about how Google uses the information it collects here: https://policies.google.com/privacy

As a visitor, you can opt out of Google Analytics data collection by installing the Google Analytics Opt-out Browser Add-on for your browser.

Third party data sharing of Google data

The data is shared with Google.

What is the legal basis for processing this data?

Legitimate interest

What is the data retention period?

26 months.

Microsoft – Bing Webmaster Tools: What is collected?

The Bing Webmaster Tools from Microsoft, store cookies and beacons on your computer. Beacons or pixels are small invisible graphics that can be used to detect if a webpage has been accessed. With this tool, Microsoft can deploy its Bing services and optimize search results.

We use the Bing tracking tools if you have consented to them. We obtain your consent when you visit our website via the cookie banner at the bottom of the web pages.

You can prevent the collection and processing of data by deactivating the setting of cookies. This may limit the functionality of the web pages. You can disable cross-device tracking at the following link http://choice.microsoft.com/en-us/opt-out.

For more information on Bing analytics services and about privacy at Microsoft and Bing, see the Microsoft Privacy Policy.

Third party data sharing of Bing Webmaster Tools data

The data is shared with Microsoft.

What is the legal basis for processing this data?

Legitimate interest

What is the data retention period?

Maximum of 180 days.

Blog and comment subscriptions

Blog and comment subscriptions are provided by Jetpack’s Subscriptions module. Signing up for a subscription means that you will get emails when a new post is published or a new comment is published in a thread you are interested in.

The subscription process requires a double opt-in for confirmation. You will receive an email asking you to confirm your subscription or you can unsubscribe using the link in that email.

What is collected?

Jetpack says:

To set up and process subscriptions, we use the subscriber’s email address, as well as the ID of the post or comment (depending on the specific subscription being processed).

In the event of a new subscription being initiated, we also collect some basic server data, including:

  • all of the subscribing user’s HTTP request headers
  • the IP address from which the subscribing user is viewing the page
  • the URI which was given in order to access the page (REQUEST_URI and DOCUMENT_URI).

Cookies are set (for a duration of 347 days) to remember the user’s blog and post subscription choices.

Jetpack Subscriptions privacy statement

Third party data sharing of Subscription data

The data is shared with Jetpack, which is part of Automattic.

What is the legal basis for processing this data?

Consent

What is the data retention period?

Subscriptions run indefinitely. You can cancel your subscription to my blog or a comment thread at any time by clicking on the Unsubscribe link in the relevant notification emails.

Alternatively, you can unsubscribe or adjust your subscription settings by visiting WordPress.com Subscription Management.

Cookies

Cookies are small text files which are created by websites. They are often used to remember a previous visit you have made to the site. This website sets some cookies, mentioned below.

To control cookie preferences, use your browser settings. You can find out more from the following:

How to Delete Cookies In Every Major Browser

Your Online Choices – to control advertising cookies

For more information about cookies, visit allaboutcookies.org.

Comment Cookies

If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

User account cookies

If you have an account and you log in to this site, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Blog and post subscription cookies

If you subscribe to my blog and have confirmed your subscription, cookies are set by Jetpack. These cookies expire in 347 days.

Analytics cookies

These are the cookies set by Jetpack’s Site Stats,  Google Analytics and Bing Webmaster Tools:

  • Jetpacks Site Stats cookies expire in 2 days. It is an admin area only cookie, which is only set if stats are requested without Javascript.
  • Google Analytics sets three cookies, which expire in 2 years, 24 hours and 1 minute respectively.
  • Bing Webmaster Tools may store cookies and beacons.

Server logs

What is collected?

Your IP address is captured when you visit any page on this site. This is a standard behaviour of web servers. It is necessary to prevent fraud and keep the website secure.

Third party data sharing of Server logs

The data is stored by my host TSOHost, who’s Privacy Policy can be viewed here: https://www.tsohost.com/legal/privacy-policy

What is the legal basis for processing this data?

Legitimate interest

What is the data retention period?

Log data is collected daily and added to a monthly log. After the month is complete the data is deleted and the next month’s log begins.

Who I share your data with

I have mentioned third parties that data is shared with above. Your data will not be shared with any third parties for marketing purposes.

How long we retain your data

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

Other retention periods known are outlined above.

What rights you have over your data

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase or anonymise any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Where is your data sent

Data may be sent outwith the EEA by the following third parties:

  • Automattic (Jetpack)
  • Google (Google Analytics)
  • Microsoft (Bing Webmaster Tools)

These companies are registered with the EU-U.S. and Swiss-U.S. Privacy Shield Frameworks.

My contact information

Contact me on via my contact form or email:privacy@fohengineer.co.uk if you have any questions about this privacy policy or want to make a Subject Access Request.

Additional information

Your personal data rights

Your personal data rights under the GDPR are:

  1. The right to be informed
  2. The right of access
  3. The right to rectification
  4. The right to erasure
  5. The right to restrict processing
  6. The right to data portability
  7. The right to object
  8. Rights in relation to automated decision making and profiling. (I do not do any automated decision making and profiling with your personal data.)

How I protect your data

This website uses SSL. An SSL certificate encrypts the data transferred between your browser and the web server, protecting it in transit.

I continually keep my websites plugins and themes up to date to mitigate security risks. I use security plugins which take various measures to secure my site. I am waiting on their GDPR compliance information and will update this policy accordingly.

What data breach procedures we have in place

In the event of a data breach, I will:

  1. Attempt to identify if any personal data has been affected, and which individuals it belongs to.
  2. Notify anyone affected within 72 hours. The notification will include:
  • a description of how and when the breach occurred
  • what data was involved
  • any actions required on your part (e.g. changing a password)
  • steps I will take to prevent a breach happening in future
  • contact information for any follow-up actions.
  1. Notify the UK’s ICO if the breach is particularly serious or many people are involved.
  2. Keep a record that the breach occurred.

What third parties we receive data from

I do not receive data from third parties.

Children

We do not intend to collect or knowingly collect information from children. We do not target children with our services.

Supervisory Authority

Email: international.team@ico.org.uk
Phone: +44 1625 545 745

Changes to this Privacy Policy

We reserve the right to make change to this Privacy Policy.
Last modification was made July 2, 2018.