Privacy Policy Divi-XYZ.com

Introduction

At Divi XYZ, we are committed to protecting your privacy. This Privacy Policy explains what personal data we collect from you when you use our website (https://divi-xyz.com) and how we use and protect that information. All processing of personal data is done in compliance with the EU General Data Protection Regulation (GDPR) and other applicable data protection laws.

Data Controller and Contact Information

The website divi-xyz.com is operated by Divi XYZ Media GmbH, located at Kurfürstendamm 132A, 10711 Berlin, Germany. Divi XYZ Media GmbH is the “data controller” responsible for deciding how and why your personal data is processed. If you have any questions or requests regarding your personal data, you can contact us by email at privacy@divi-xyz.com or by mail at the address above.

Personal Data We Collect and How We Use It

We collect only the minimum personal information needed to provide our services. Specifically:

  • Newsletter Subscription Data (Name and Email Address): If you sign up for our email newsletter, we collect your name and email address. We use this information only to send you our newsletter and updates you subscribed to. Your name helps us personalize the communications, and your email is used to deliver the newsletter to you. We rely on your consent to collect and use this information – by signing up, you agree to receive our newsletter communications (and you may withdraw your consent at any time).
  • Website Usage Data (Google Analytics): When you browse our site, we use Google Analytics (a web analytics service) to automatically collect certain information about your visit. This data may include your IP address, browser type, device information, and browsing actions (such as pages visited and time spent on the site). We collect this information to understand how visitors use our website, to analyze site performance, and to improve our content and user experience. This usage data is collected via cookies and similar technologies placed on your browser (see Cookies and Google Analytics below for details).

No Other Personal Data: We do not collect any other personal information. We do not offer user accounts or any purchase or payment functionality on our site, so we will never ask you for payment information, home addresses, or any sensitive personal data. We limit our data collection strictly to the purposes described above.

Cookies and Google Analytics

We use Google Analytics to help measure how users interact with our website content. Google Analytics works by placing small text files called cookies in your browser. These cookies collect information such as your IP address (which may be considered personal data under the GDPR) and generate statistics about website traffic simpleanalytics.com. We use these analytics data only to understand aggregate user behavior on our site (for example, which pages are most visited, how users navigate the site) and to improve site performance. This information does not directly identify you personally; Google Analytics provides it to us in an aggregated form.

We have configured Google Analytics to enhance your privacy. For instance, IP anonymization is enabled, meaning Google truncates your IP address before storing it, which helps prevent it from being directly linked to you. We also do not use Google Analytics to track you across different websites, nor do we allow Google to use the analytics data for its own advertising purposes.

Legal Basis: We process analytics data based on your consent. When you first visit our site, you will be prompted (via a cookie banner or similar mechanism) to consent to the use of Google Analytics cookies. If you decline, we will not set analytics cookies or collect analytics data from your visit. Even after consenting, you can opt out at any time (see Your Choices below).

Data Sharing and Transfers (Google Analytics): The analytics information generated by the Google Analytics cookies (including a truncated IP address and usage information) will be transmitted to and stored by Google on servers in the United States or other countries. Google is a third-party service provider acting on our behalf to process this usage data for analytics purposes. We have entered into a Data Processing Agreement with Google to ensure your data is protected. Google LLC is certified under the EU-U.S. Data Privacy Framework, which means it commits to uphold EU data protection standards for data transferred to the US policies.google.com. Additionally, we rely on Standard Contractual Clauses (SCCs) in our agreement with Google as needed to safeguard any transfers of personal data outside the European Economic Area policies.google.com. Importantly, we do not share your personal identifying data (such as your name or email) with Google – Google Analytics only collects the usage statistics as described.

No Selling or Unnecessary Sharing of Data

We do not sell, rent, or trade your personal information to any third parties for marketing or any other purposes. Your name and email address are used solely for sending our own newsletter to you. We do not share your personal data with third-party companies for their independent marketing or advertising.

The only third parties who may process your data are service providers we use for our own purposes:

  • Email Newsletter Service: We may use a secure email service provider to send out our newsletter. If we do, your email address (and name, if provided) would be stored with that provider solely to enable us to deliver the newsletter. Such providers are bound by confidentiality and data protection obligations and cannot use your information for any other purpose.
  • Google Analytics: As described above, Google Analytics will process usage data about your visits on our behalf. Google is not allowed to use this data for any purpose other than providing analytics services to us, and we have disabled any data-sharing settings that would allow Google to use our analytics data for its own purposes.

Aside from the above, we will not disclose your personal data to any other third party unless required by law or with your explicit consent.

Data Retention

We keep your personal data only for as long as necessary to fulfill the purposes described in this policy:

  • Newsletter Data: If you subscribe to our newsletter, we will retain your name and email for as long as you remain subscribed. If you decide to unsubscribe or request deletion of your data, we will promptly remove your information from our mailing list. We may keep a minimal record (such as your email address in a “do not contact” list) if necessary to ensure we honor your opt-out (so that we do not accidentally send you further communications).
  • Analytics Data: Data collected via Google Analytics is retained for a limited period. We have set Google Analytics to retain user-level and event data for 14 months (the default maximum for Google Analytics) usercentrics.com, after which it is automatically deleted from Google’s servers. We only view analytics data in aggregate form, and we do not maintain identifiable personal analytics data ourselves. Aggregate reports (which contain no personal identifiers) may be stored longer for analysis purposes.

Once personal data is no longer needed for the purposes for which it was collected, we will delete or anonymize it in compliance with applicable laws.

Data Security

We take the security of your personal data seriously. Appropriate technical and organizational measures are in place to protect your information against unauthorized access, loss, alteration, or disclosure. These measures include encryption where applicable, secure storage of subscriber information, and limiting access to personal data only to personnel or service providers who need it for the purposes described. While no website can guarantee absolute security, we strive to use industry best practices and commercially acceptable means to protect your information.

Your Rights Under GDPR

As an individual in the European Union (or in other jurisdictions with similar laws), you have certain rights regarding your personal data. We respect and uphold these rights, which include:

  • Right of Access: You have the right to request a copy of the personal data we hold about you and to obtain information about how we process it.
  • Right to Rectification: If any personal data we have about you is incorrect or incomplete, you have the right to have it corrected or updated.
  • Right to Erasure: You can request that we delete your personal data if it’s no longer necessary for us to retain it, or if you have withdrawn your consent (among other reasons). This is also known as the “right to be forgotten.”
  • Right to Restrict Processing: You have the right to ask us to limit or suspend the processing of your personal data in certain circumstances – for example, if you contest the accuracy of the data or object to our processing.
  • Right to Data Portability: You can request to receive the personal data you provided to us in a structured, commonly used, machine-readable format, and you have the right to transmit that data to another controller.
  • Right to Object: You have the right to object to the processing of your personal data in some cases. In particular, you can object at any time to the processing of your email and name for our direct marketing purposes (our newsletter). If you object, we will stop processing your data for that purpose.
  • Right not to be subject to Automated Decision-Making: You have the right not to be subjected to a decision based solely on automated processing (including profiling) that significantly affects you. Note that we do not use your data for any such automated decision-making or profiling edps.europa.eu.
  • Right to Withdraw Consent: Where we rely on your consent to process data (for example, for sending newsletters or for analytics cookies), you have the right to withdraw that consent at any time. Withdrawing consent will not affect the lawfulness of any processing we carried out before your withdrawal. (For example, you can unsubscribe from the newsletter at any time to withdraw your consent to receive it.)
  • Right to Lodge a Complaint: If you believe your data protection rights have been violated, you have the right to file a complaint with a supervisory authority, especially in the EU country where you live or work, or where the alleged infringement occurred. In Germany, for example, you can contact the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz)gdpr.eu.

Your Choices and Opt-Out Options

We strive to give you control over your personal data. Here are the ways you can manage or opt out of our data collection:

  • Unsubscribing from Newsletter: Every email newsletter we send includes an “Unsubscribe” link at the bottom. You can click that link at any time to stop receiving future newsletters. Once you unsubscribe, we will remove you from our mailing list. You can also request to unsubscribe or have your data deleted by contacting us directly at info (..) divi-xyz.com. We will promptly honor such requests.
  • Opting Out of Analytics Tracking: If you have consented to Google Analytics cookies but later change your mind, you can disable or delete cookies in your web browser to prevent further tracking. You can also install the Google Analytics Opt-out Browser Add-on, which is a tool provided by Google that prevents your browser from sharing information with Google Analytics termly.io. Additionally, if our site uses a cookie consent banner, you can adjust your preferences there at any time to revoke consent for analytics tracking.
  • Accessing, Updating, or Deleting Your Data: You may contact us at any time to exercise your rights of access, rectification, or erasure (as described above). For example, if you want to know what information we have about you, or if you want us to correct or delete it, just send us an email at privacy@divi-xyz.com. We will respond to your request as soon as possible, and in any case within the timeframe required by law (generally within one month).
  • Other Requests: If you wish to restrict our processing of your data or object to a particular use, please let us know. We will review and accommodate such requests in line with legal requirements. We will not penalize you or deny you any service for exercising your rights or choices.

Children’s Privacy

Our website and services are not directed to children under the age of 16. We do not knowingly collect personal data from anyone under 16 years old. If you are a parent or guardian and believe that a child under 16 has provided us with personal information, please contact us. We will promptly delete such information from our records.

Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. When we update the policy, we will revise the “Last Updated” date at the bottom of this document. If we make significant changes, we may also notify you by email (if you are a subscriber) or by a notice on our website. We encourage you to review this page periodically to stay informed about how we are protecting your information.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please do not hesitate to contact us:

  • Email: info (..) divi-xyz.com
  • Postal Address: Divi XYZ Media GmbH, Kurfürstendamm 132A, 10711 Berlin, Germany

We are here to help and will respond to any privacy-related inquiries or requests as quickly as possible.