Thank you for using Atmine!
Are you wondering how we handle privacy? We are concerned to ensure that you know how we approach this subject, given that we process your personal data when you use our presentations and services. We particularly do this so that we can fund our services, as well as in order to improve them. However, we do this responsibly, and we comply with the applicable privacy laws at all times, especially with regard to the EU’s General Data Protection Regulation (GDPR).
Using data for advertising purposes enables us to operate services free of charge. We would also like to continually get better, and we want to be able to tailor what we offer to your specific interests. We can only do this if we monitor and evaluate in detail how our services are used.
We do not intend to do this as well as everything else that happens with your data in secret, but only with the necessary level of transparency. We would therefore like to provide you with all the information you need about which of your data we process, and how and why we do so. We have also taken the trouble to put together all the relevant mandatory information that we have to provide under the EU’s General Data Protection Regulation.
The privacy regulations apply to all online presentations and services that are accessible via www.Atmine.com. G+J LIVING Digital GmbH (abbreviated below as: Atmine) is the operator of the Atmine platform, and is responsible for protecting your personal data and for compliance with the EU’s General Data Protection Regulation (GDPR). You can find contact data, contact individuals and mandatory information regarding G+J LIVING Digital GmbH here.
If you would like to ask Atmine any questions about data protection, or if you wish to assert your data protection rights(see at “Your rights as a data subject”), do feel free to contact our data protection officer, whom you can reach by e-mailing to: [email protected]
Key features at a glance
I. What data are collected when you use our services?
a. Direct input of plain data
If you register with us or create an account, or if you use services such as the newsletter, we ask you to input personal data via the various forms. These data are recognisable and can be traced directly to you and your identity (these are known as plain data).
These plain data particularly include your e-mail address, username, your first and last names and your password. You can also opt to provide additional personal information about yourself which is naturally also stored for you, for instance in your user profile. Any contributions such as your blog name, city, blog URL or country that you enter or upload containing personal details about yourself are naturally also stored and published.
We never ask for data that are particularly sensitive in terms of data protection (“special categories of personal data” in accordance with Article 9 GDPR – for instance on your state of health, ethnic origin, religious or philosophical beliefs, genetic data or intimacy).
b. Third-party data provision
We are sometimes also provided with personal data by third parties when individual functions or services are used. This might happen for instance if you use Facebook’s Sign In service to log on to our service.
c. Pseudonym data
We also process data that are not directly traceable to you as an individual (“pseudonymised data”). Pseudonymised means that, whilst it might be possible to recognise you or your computer or browser via an ID (“pseudonym”), it is not possible with customary means to find out exactly who you are or how to get in touch with you. To put it another way: Pseudonyms are not stored together with plain data such as names and e-mail addresses quite simply because we don’t need to know any more than necessary in this case.
This applies for instance if we would like to find out which sites within our service are clicked on particularly frequently, and which have no visitors at all, or if we don’t want to constantly show a user the same things.
Pseudonyms are also used to create use profiles of external suppliers and advertising partners (“third parties”) which are tied to the advertising banners as part of this service. Some of them also function on other apps and websites outside our service.
If you want to know more about particular aspects, we have put together the details for you below.
II. Why are these data processed?
Personal data are primarily processed for the following purposes and on the basis of the following legitimate interests:
- for individualisation: so we don’t continually suggest or show the same articles and banners, as well as so we hopefully only show you ones which really interest you;
- for personalisation: so we can address you by name in the newsletter or on other occasions, or to specifically include topics, content and banners in the services that are tailored to you;
- for funding: so we can place banners for advertising customers as per their wishes and pay our team with the proceeds from advertising, as well as keeping our services free of charge to you;
- for optimisation: so we can find out what our users find particularly interesting in statistical terms, and what doesn’t interest them, and what else we might be able to improve when it comes to using our services;
- to make our operation secure: so we can recognise and defend ourselves against attacks and detect errors in the system, as well as preventing you from receiving e-mails from us that you don’t want;
- to offer things like newsletters and prize competitions or make functions like uploading and commenting on contents user friendly;
- to maintain customer relations and for direct marketing of our own products, as well as for our sponsors, cooperation partners or other third parties, both by ourselves and in some cases by the respective third parties on their own responsibility;
- to comply with legal requirements, in particular retention obligations under commercial and fiscal law, and any obligations to provide information to public authorities and for prosecution, defence or assertion of rights, including the exercise and enforcement of our ‘digital house rules’.
Your personal data are processed in compliance with the law and on the basis of the EU’s General Data Protection Regulation, i.e. – depending on the individual case – specifically on the basis of your consent, for the performance of a contract to which you are party or prior to entering into a contract, for compliance with a legal obligation or in the exercise of official authority and/or for the purposes of legitimate interests in an individual case (see GDPR Article 6 §1 (a), (b), (c) and f)).
If we process personal data on the basis of consent or for the purposes of legitimate interests, we only do so as long as you do not object or withdraw your consent. Since we are technically prevented from aligning plain data with pseudonyms, and in any case are prohibited from doing so by law, it is not possible to uniformly object to all processing. We have provided more information on withdrawal of consent and the lodging of objections in the details regarding the various types of processing below.
III. Are data also transferred to third parties, and do they go to other EU countries?
Atmine does not pass your data to third parties for commercial purposes (sale, rental), and it does not trade in addresses.
There are however things that other people know how to do better than we do. This is why we have contracted with several service-providers. Some of these are part of the group of companies to which we also belong, whilst we only have business links with others. Some service-providers will need to access personal data in order to do their jobs, or at least be able to do so. This relates in particular to the computer technology which we use to keep individual functions and services running, as well as to monitor and analyse them.
We deal with all our service-providers strictly in writing in accordance with the stipulations of the EU General Data Protection Regulation, and for instance we also have them explain technical and organisational activities to us which the service-providers use to protect the personal data entrusted to them from misuse.
Some of the IT service-providers under contract to us are headquartered outside the EU or the European Economic Area (EWR), or they store and process personal data there. Unless the European Commission considers that the same level of data protection applies in these areas as in the UK, we always insist on the privacy-related guarantees that are necessary for such transfers abroad. As a rule, this entails concluding a data protection contract as stipulated by the European Commission (“standard EU contract clauses”), and particularly when it comes to transfers to the USA that a service-provider must also subscribe to the “EU-US Privacy Shield”.
We transfer data to third parties which process the data on their own responsibility in some cases. The stipulations of data protection law are complied with in these instances. These include services provided by social media providers such as Facebook, for example when you use the Facebook log in to sign in to our site, or if you share and pass on content that you have seen on our site with providers such as Pinterest.
You will find more information on this in the details further below.
The individual types of data processing in detail
In order to make it easier for you to understand, we have broken down the precise details of data processing below according to whether data use relates to individual functions or services on our site/app which either (IV.) we ourselves or a third party provide or operate, or whether these are analyses and evaluations which (V.) we use for primarily internal purposes on a pseudonymised basis or (VI.) which are included in order to market banners and adverts on our site or for participants of our partners.
IV. Individual areas, services and functionalities on the site
a. Registering and managing your profile
You can create an Atmine profile directly on our platform. When you create your Atmine profile, we collect your e-mail address and your password (access data). When you log in directly via Atmine, we send you a one-off confirmation and verification link to the e-mail address that you have provided (double opt-in). Once you have been verified, you can use the access data to log in to your profile on the login form.
Over and above this, Atmine only collects inventory data which you yourself provide as part of registration or other contacts with Atmine. Atmine only uses these personal data subject to the relevant statutory provisions, in particular in order to provide the services offered at Atmine.com such as the newsletter and the e-mail notifications. You can deactivate all the data that are voluntarily entered in the user profile (e.g. blog name, city, blog URL, country).
You can delete your profile by clicking on the Delete My Profile button under “My Profile”, and this will completely delete your user account and your personal data (e-mail address) from the database. Your profile data can no longer be restored once you have done this.
b. Registration/log in via Facebook
If you register on Atmine – for instance so that you can upload photographs or comment on them – you can also do this via Facebook if you want. If you register with us using your Facebook log in, the following company processes your data: Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, and Atmine. You can find Facebook’s Data Policy here.
Atmine starts by storing the fact that you have registered on Atmine.com via the Facebook log in. We store this information as a key with your Atmine profile until such time as you delete your registration with us. We do not store your Facebook access data. Atmine is not able to post on Facebook or share content in your name.
We can receive and process the following data about you: your e-mail address, your “public information” on Facebook and the information that you make public or approve for the respective application. “Public” means with regard to Facebook that anyone can see these data, including outside Facebook. This includes your name, your profile and title photos, your sex, your networks, your user name (Facebook URL) and your user ID (Facebook ID). You can see what information is public in your profile and what data you have approved for which applications in your Apps and websites in your Facebook profile.
When you register via Facebook log in, Atmine takes a user name from Facebook. You can edit and change it at any time in your profile settings.
If you use Facebook log in (and in some cases even if you don’t, but have a Facebook profile and visit our site), Facebook may process data on your visit and browsing conduct on our site. Facebook’s Data Policy will provide you with more information on the nature, purpose and extent as well as the further processing and use of your data by Facebook.
We process your user name and the data that you make available to Atmine via Facebook in this way after you have consented to this in order to set up your profile on our site so that you can log in automatically, as well as to provide you with services that require registration.
We would like to refer you to Facebook’s Data Policy with regard to where data are stored and who has access to them on Facebook.
Terminating data processing (opt-out) on Facebook:
If you want to prevent Facebook collecting information about you while you’re on our site, you need to disconnect your Atmine profile from Facebook and delete any cookie that Facebook might have placed on your browser (Instructions on how to delete cookies in Microsoft Internet Explorer. Instructions on how to delete cookies in Mozilla Firefox. Instructions on how to remove cookies in Safari. Instructions on how to clear cookies in Google Chrome).
c. Being part of the Atmine community
Registering and being part of the Atmine community means that Atmine collects, processes and uses personal data (login e-mail address) and user data (e.g. user name, comments, data that users send us as part of activities, any photographs that users may upload, profile data that users enter when completing the profile).
We process and use these “inventory data” in order to organise and implement participation in the Atmine community, for instance in order to be able to attribute content to registered users which they have published in the Atmine community (e.g. photos, comments, homestories, etc.).
So that the community can operate comprehensively and smoothly, including maintaining your membership, we may send you ad hoc notifications by e-mail (e.g. notifications relating to comments on your content). The notification function is activated by default, but can be configured at will at any time in your profile at “Notification Settings”. Unlike newsletters, e-mail notifications are informative e-mails pure and simple, and contain no advertising.
Your participation in the community can no longer be traced once you delete your profile on Atmine.com, as described in item A at “Registering your profile and Managing your profile”.
Atmine does not pass your data to third parties for commercial purposes (sale, rental), and it does not trade in addresses (see Part III. of our Privacy Rules on this).
d. E-mail newsletter and e-mail notifications
Atmine uses the MailChimp and Mandrill e-mail services provided by the US company Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA, to send our newsletters and e-mail notifications.
The e-mail addresses of our registered users, as well as their further data described in this information, are stored on the servers of MailChimp in the USA, whom we have commissioned as data processor within the meaning of Art. 28 EU-GDPR. As evidence of your consent, MailChimp stores your e-mail address, the wording of the consent, the confirmation e-mail, any location data as well as the respective IP addresses and the time and date of the registration and confirmation.
How to object to the storage of the data/unsubscribing from the newsletter:
You can unsubscribe from the newsletter at any time by following a link in the newsletter, or via the “Notification Settings” in your profile. You can only withdraw your consent to your data being stored by deleting your profile on Atmine.
It is only possible to comment on photos or articles on Atmine.com if you have registered and created a profile and are registered in the community. This requires asking for and storing personal data (e-mail address and your password). You can delete your comments if you need to by clicking on “Remove”.
f. More cookie-based functions
Atmine also creates cookies which are retained after your current visit to Atmine (known as a session).
Lodging objections: If you do not want cookies to be used, or if you want to delete existing cookies, you can deactivate and remove them using your browser.
You can find more information on deleting or deactivating cookies in the help texts on your browser or on the Internet, for instance by searching for “Deactivate cookies” or “Delete cookies” (This will lead to instructions on how to delete cookies on Microsoft Internet Explorer, in Mozilla Firefox, in Safari and in Chrome).
B. Embedded plug-ins/third-party widgets (social media)
Our digital services have “social plug-in” functionality for a more attractive user experience in the Facebook, Twitter and Pinterest networks.
To protect your privacy, we offer these social plug-ins so you can click on a button to follow an HTML link. What this means for you is that your data cannot be transferred until you actively click on the plug-in button (recommend, share, pin, tweet, etc.) if you are registered with a social network and have previously visited it. No data are transferred before this takes place.
Facebook, Twitter and Pinterest may be able to trace your visit to relevant Atmine.com pages and attribute them to your user account if you are registered with the social network in question or have recently visited a site of the social network or other sites which have incorporated a sharing plug-in.
a. The Facebook Share button
Atmine.com uses Facebook “social plug-ins” such as the “Like” button. These plug-ins are offered and operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”), and are clearly marked with the Facebook logo.
Atmine does not process any of your data when you use the Facebook sharing button. Facebook may be able to trace your visit to relevant Atmine.com pages and attribute them to a Facebook account if you are registered with Facebook, or recently visited a Facebook page or one with Facebook content. If you make active use of plug-ins (for instance by clicking on the Like button), this also sends relevant information from your browser directly to Facebook, and Atmine.com has no control over this.
Please consult Facebook’s Data Policy for more information on the nature, purpose and extent as well as the further processing and use of your data by Facebook. It also contains more information about your rights in this regard, as well as how you can alter the settings to protect your privacy.
Termination of data processing (opt-out):
You can prevent Facebook collecting information about you when you visit Atmine.com by logging out of Facebook before you visit Atmine.com and deleting any Facebook cookies that might be on your browser (Instructions
on how to delete cookies in Microsoft Internet Explorer. Instructions
on how to delete cookies in Mozilla Firefox. Instructions
on how to remove cookies in Safari. Instructions
on how to clear cookies in Google Chrome).
b. The Twitter Share button
Atmine.com uses the Twitter button enabling you to share content on Twitter. This is offered and operated by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA (“Twitter”).
Atmine.com itself does not process your data if you hit a Twitter button. If you use the Twitter button on Atmine.com and if you have a profile on Twitter, Twitter processes the following of your data referred to as follows by Twitter: account data (e.g. your user name), contact data (e.g. your e-mail address), tweets, Following, Listen, Profile and other public data (e.g. the post that you share on Twitter when using the Twitter button on Atmine.com), location information (e.g. where you are while using the service), log data (e.g. your IP address or device ID), Internet data (e.g. your content preferences on websites that you use), and others.
When you use the button, you permit Twitter to transfer all your personal data to the United States, Ireland and any other countries where Twitter has a commercial operation and to store and use them there. Some countries may have very different privacy legislation and regulations with regard to when public authorities are entitled to gain access to your personal data than those in the country where you live. You can find more information here on Twitter’s global business activities and on the data transfer.
Terminating data processing (opt-out):
If you want to delete or edit parts of your personal data on Twitter, you can do this in your Twitter account settings
. If you want to completely delete your Twitter account, you will find here a description
of how to do this.
d. The Pinterest Share button
Atmine.com uses Pinterest sharing, enabling you to share and pin content on Pinterest. Pinterest is part of Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland.
Atmine.com does not process any of your data when you use a Pinterest button. When you click on the Share button on Atmine.com and if you have a profile on Pinterest, Pinterest processes the following data of yours, amongst others, referred to as follows by Pinterest: personal information that you yourself entered when registering with Pinterest (e.g. your name or your profile photo), protocol data (e.g. your IP address or websites that you have visited), cookie data (e.g. the language setting on your computer), device data (e.g. the unambiguous device identifier).
Pinterest transfers and stores your information for the purposes described in its guidelines to territories outside your home country, including the United States. The privacy regulations applicable in these countries, and the powers held by public authorities there to gain access to your personal information, may differ from those in your home country.
Terminating data processing (opt-out):
V. Individual analyses and evaluations
a. Server logfiles
When you visit an Atmine.com page, Atmine automatically stores the information which the browser sends when this page is visited. The information includes the request, IP address, browser type and language, as well as the date and time of the request. The data are stored on the servers of the service-provider Heroku Inc. (Salesforce.com, inc. The Landmark at One Market, Suite 300, San Francisco, CA 94105, United States).
You will find more information on the nature, purpose and extent, as well as the further processing of your data by Heroku in Heroku’s Privacy Statements, where you will also learn more about your rights in this regard, how you can alter the settings to protect your privacy.
b. Google Analytics
Atmine uses a web analytics service from Google Inc. (Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, “Google”) known as Google Analytics in order to analyse the way you use the website. This involves creating a cookie. The information generated by this cookie on how you use this website (including your IP address) is transferred to a Google server in the USA, where it is stored.
Atmine only uses Google Analytics with the IP anonymisation extension, so that IP addresses are only processed in truncated form in order to prevent them being directly traced to individuals. IP anonymisation on this website means that Google truncates your IP address within Member States of the EU or in other Contracting States of the Treaty on the European Economic Area. The full IP address is only transferred to a Google server in the United States of America and truncated there in exceptional cases.
Expansion of IP anonymisation: Google will use this information to evaluate how you use the website, to compile reports of the website activities for Atmine.com, and to provide other services related to use of the website and of the Internet. Under no circumstances will Google align your IP address with other Google data. By using this website, you consent to Google processing the data that have been collected on you in the manner described above and for the above purpose. Google may pass this information to third parties if this is required by law or if third parties process these data on behalf of Google.
You can learn more about Google Analytics’ Security and Privacy Policies here.
The opportunity to lodge objections:
You can prevent Google Analytics collecting and storing data at any time with effect for the future. There is a Google browser plug-in that you can install for this. This is available for a variety of browser versions, and can be downloaded at https://tools.google.com/dlpage/gaoptout?hl=en-GB.
We use a service provided by Mixpanel, Inc., 405 Howard St., 2nd Floor, San Francisco, CA 94105 to generate retention reports such as Engagement, Customer Loyalty, etc. Mixpanel is a web analysis tool which evaluates the use of our website using e-mail address, first name, surname, city, country and browser. You can find more information on the data collected by Mixpanel here.
Terminating data processing (opt-out):
The safest way to prevent Mixpanel processing your data is to delete your Atmine profile.
We use a service provided by SendGrid, 1801 California Street, Suite 500 Denver, CO 80202 to send our e-mail notifications, weekly pics.
The e-mail addresses of our registered users, as well as their further data described in this information, are stored on the servers of Sendgrid in the USA, whom we have commissioned as data processor within the meaning of Art. 28 EU-GDPR. As evidence of your consent, Sendgrid stores your e-mail address, the wording of the consent, the confirmation e-mail, any location data as well as the respective IP addresses and the time and date of the registration and confirmation.
How to object to the storage of the data:
You can unsubscribe from the newsletter at any time by following a link in the newsletter, or via the “Notification Settings” in your profile.
Terminating data processing (opt-out):
The safest way to prevent Sendgrid processing your data is to delete your Atmine profile.
e. One More Cloud
We use a service called bonsai provided by One More Cloud, Inc, 600 Congress Ave., Fl 14, Austin, TX 78701 as a search engine that provides users search functionality. One More Cloud is a search engine that stores the following user attributes provided by users display name (by default full name), username, location, biography, blog name. You can find more information on the data collected by One More Cloud here.
We use a service provided by Segment, 100 California Street, Suite 700, San Francisco to send data to Google Analytics and Mixpanel. User Data may include, without limitation, information about the identity of Client users (such as name, postal address, e-mail address, IP address and phone number), as well as information about the pages that users visit and the features that they use, and the actions that they take while using the Segment. You can find more information on the data collected by Segment.io here.
Your rights as a data subject
In accordance with the EU’s General Data Protection Regulation, you have a right of access to your personal data (see Article 15), as well as a right to rectification (see Article 16), erasure (see Article 17), or at least to demand restriction of processing (see Article 18) of your personal data.
You also have a right to data portability (see Article 20). Additionally, you naturally also have a right to withdraw consent to processing of personal data at any time (Article 7) as well as to object to processing which is based on a weighing up of legitimate grounds (see Article 21 §4 GDPR). You also have a right to lodge a complaint with the competent data protection supervisory authority.
If you would like to ask us any questions about this, or on any other aspects of data protection, or if you wish to assert your data protection rights, do feel free to contact our
data protection officer
, whom you can reach by e-mailing to: [email protected]
Version: May 2018