We respect and value the privacy of everyone who visits this website, www.osodevops.io (“Our Site”) and as described in Parts 5 and 6, below, we do not collect personal data about you unless you contact us. Any personal data we do collect will only be used as permitted by law.
Data Protection Framework
The following information explains our information gathering and dissemination practices.
1. Information About Us
Our Site is owned and operated by OSO Devops Limited, a limited company registered in England under company number 10889879. Registered address: 31 Silver Street, Bradford-On-Avon, Wiltshire, BA15 1JX, UK. Email address: email@example.com Telephone number: 02071930472
2. What Does This Policy Cover?
3. What is Personal Data?
Personal data is defined by the General Data Protection Regulation (EU Regulation 2016/679) (the “GDPR”) as ‘any information relating to an identifiable person who can be directly or indirectly identified in particular by reference to an identifier’. Personal data is, in simpler terms, any information about you that enables you to be identified. Personal data covers obvious information such as your name and contact details, but it also covers less obvious information such as identification numbers, electronic location data, and other online identifiers.
4. What Are My Rights?
5. What Personal Data Do You Collect?
If you decide send us an email, we may collect your name, your email address, and any other information which you choose to give us. Your decision to disclose your personal data is entirely voluntary, and by doing so, you are providing us with specific consent to use your personal data only for the purposes for which you have disclosed it to us. You have the right to withdraw your consent to us using your personal data at any time, and to request that we delete it.
5.1 Site visitation tracking
Like most websites, this site uses Google Analytics (“GA”) to track user interaction. We use this data to determine the number of people using our site, to better understand how they find and use our web pages and to see their journey through the website.
Although GA records data such as your geographical location, device, internet browser and operating system, none of this information personally identifies you to us. GA also records your computer’s IP address which could be used to personally identify you but Google do not grant us access to this. We consider Google to be a third party data processor (see section 8 below).
Subject to the following, we do not collect any personal data from you. We do not place cookies on your computer or device, nor do we use any other means of data collection. If you send us an email, we may collect your name, your email address, and any other information which you choose to give us.
HubSpot tracks visitors using browser cookies. Every time a visitor lands on Our Site, HubSpot will check for the presence of an existing tracking cookie. If one does not exist, HubSpot creates a unique cookie for that visitor and will log every page that person visits moving forward.
There are a few things to be aware of in regards to how HubSpot handles tracking cookies: - Visitors will be tracked anonymously even before they become contacts. If and when a visitor fills out a form, HubSpot will associate their previous page views based on the tracking cookie.
If a visitor deletes his or her cookies, he or she will be considered a new visitor and will be assigned a new cookie. However, HubSpot will automatically deduplicate form submissions coming from the same email address, even if different browser cookies were associated with the submissions.
Since cookies are unique to a browser, if two people share a single computer, their submissions will be associated with the same contact record. This duplication by cookie ensures that if a contact submits multiple forms on Our Site using different email addresses, all submissions will be associated with a single record in HubSpot since they are all from the same contact. Keep in mind that if you submit multiple test submissions from one browser with different email addresses, these submissions will overwrite each other on a single contact record in HubSpot due to the common tracking cookie. The best way to test submissions, if you don’t want them to be associated with the same contact, is to test using the private browsing mode of your web browser.
HubSpot will also attribute visits to a contact if the contact clicks a link in a tracked marketing email which directs to a page with the HubSpot tracking code installed. Lastly, the Tracking Code API can also be used to track visitors in HubSpot.
5.2 Contact forms and email links
Should you choose to contact us using the contact form on our Contact Us page, the data that you supply will be forwarded to Hubspot. Hubspot provide us with marketing automation services and CRM services, we consider Hubspot to be a third party data processor (see section 8 below). The contact details you submit will be temporarily stored on Our Site database for 30 days until they have been processed and forwarded to Hubspot. Should you choose to contact us via email, the data you supply will be processed in Google mail and Google Drive.
6. How Do You Use My Personal Data?
We may access and use your Personal Data only for the purposes for which you have submitted it to us, to;
- Make contact with you
- Provide information to you
- Provide services to you
We will not use your personal information for any other purposes, for example the communication of marketing material, unless we have your specific consent to do so.
7. How and Where Do You Store My Data?
Personal data security is essential to us, and to protect personal data, we take the following measures:
- Only storing personal data in password protected or secure locations, that are not available to the public.
- Not emailing sensitive personal data unless it is encrypted using S/MIME end-to-end encryption.
- Using SSL to ensure data passed between our web server and browsers remains secure.
- Keeping all software up to date (including, but not limited to, applications and operating systems).
- Securely deleting and disposing of any personal data no longer needed.
- Having strict, GDPR-compliant policies about Data Protection and Information Security. and ensuring all employees and contractors are appropriately trained in these policies.
7.1 Our Site hosting
Our Site is hosted on Amazon Web Services (AWS) within the EU (Ireland) region, which has physical data centres located in Ireland. We consider AWS to be a third party data processor. All AWS Services are GDPR compliant and ready, see Part 8. All traffic (transferal of files) between this website and your browser is encrypted and delivered over HTTPS.
7.2 Third party data processors
We will only store your personal data within the UK, the European Economic Area (the “EEA”) and the United States of America, which the European Commission has deemed to provide an adequate level of personal data protection. More information is available from the European Commission and EU-US Privacy Shield.
Please contact us using the details below in Part 10 for further information about the particular data protection mechanism used by us when transferring your personal data to a third country.
8. Do You Share My Personal Data?
We use the following third parties for personal data processing and storage purposes:
- Google (for website analytics) - View policy
- Hubspot (for contact management) - View policy
- AWS (for hosting this website) - View policy
- LinkedIn (social media) - View policy
- Twitter (social media) - View policy
- Google Adwords and remarketing (digital advertising) - View policy
If any of your personal data is transferred to a third party, as described above, we will take steps to ensure that your personal data is handled safely, securely, and in accordance with your rights, our obligations, and the third party’s obligations under the law, as described above in Part 7. If any personal data is transferred outside of the EEA, we will take suitable steps in order to ensure that your personal data is treated just as safely and securely as it would be within the UK and under the GDPR, as explained above in Part 7. In some limited circumstances, we may be legally required to share certain personal data, which might include yours, if we are involved in legal proceedings or complying with legal obligations, a court order, or the instructions of a government authority. All third parties listed above are EU-US Privacy Shield (2016) compliant.
9. How Can I Access My Personal Data?
If you want to know what personal data we have about you, you can ask us for details of that personal data and for a copy of it (where any such personal data is held). This is known as a “subject access request”. All subject access requests should be made in writing and sent to the email or postal addresses shown in Part 10. There is not normally any charge for a subject access request. If your request is ‘manifestly unfounded or excessive’ (for example, if you make repetitive requests) a fee may be charged to cover our administrative costs in responding. We will respond to your subject access request within 21 days and, in any case, not more than one month of receiving it. Normally, we aim to provide a complete response, including a copy of your personal data within that time. In some cases, however, particularly if your request is more complex, more time may be required up to a maximum of three months from the date we receive your request. You will be kept fully informed of our progress.
10. How Do I Contact You?
To contact us about anything to do with your personal data and data protection, including to make a subject access request, please use the following details;
- The Data Protection Owner, OSO DevOps
- Email address: firstname.lastname@example.org
- Postal Address: 31 Silver Street, Bradford-On-Avon, Wiltshire, BA15 1JX, UK