Skip to content

Welcome to this website. The protection of personal data is very important to us. Therefore, we inform you about the processing of personal data and all rights of those affected in connection with the use of this website. If you have any questions about data protection or the processing of personal data, you can find imprint the contact details of the responsible person or body. We have concluded a contract for order processing with the providers named below and fully implement the strict requirements of the German data protection authorities when using the service.

Summary: We take data protection very seriously and follow the principle of data economy at all levels. All internal and external technical processes, server-client communication and backups of this website are encrypted. All additional components and plugins used on this website are selected with great care. Any additional plugins used are regularly subject to strict auditing. For the service providers we commission for external data processing, such as storing backups, creating invoices, etc., we only use well-known providers who are fully GDPR-compliant and have been verifiably regularly tested for security, preferably from the European Economic Area.

data processing

This website can be used without providing any personal data. If personal data (such as names or email addresses) is collected on our website, this is done on a voluntary basis, unless it is absolutely necessary for the provision of a service. In principle, all data collected will not be passed on to third parties without your express consent.

As a responsible company, we have taken numerous technical, conceptual and organizational measures to ensure the most comprehensive protection possible for the data collected and processed via this website. As a responsible company, we consciously refrain from automated decision-making or profiling.

The responsible body within the meaning of the General Data Protection Regulation, the data protection laws of the member states of the European Union and other provisions of a data protection nature is also clearly defined and valid.

scope of application

This privacy policy applies to all personal data processed on this website and connected systems, as well as to all personal data processed by companies commissioned by us (contract processors). In addition, we have concluded a contract processing agreement (AV contract) with all contract processors. We understand personal data to be information within the meaning of Art. 4 No. 1 GDPR, such as names, email addresses, IP addresses and postal addresses of people. The processing of personal data enables us to offer and bill for our services and products, whether online or offline. The scope of this privacy policy extends to the following services. The services actually used may vary over time:

  • Our online presence: websites or online shops
  • customer communication via email or messenger
  • social media presence
  • newsletters or other mailings
  • apps for mobile devices
  • online billing systems
  • Encrypted backups in cloud storage services

Legal basis

We process your data exclusively on the basis of the following legal grounds.

  • Legitimate interests (Article 6 paragraph 1 lit. f GDPR): If legitimate interests require it, the processing of data is possible without active consent, e.g. to deliver the website to your computer.
  • Consent (Article 6 paragraph 1 lit. a GDPR): Your consent enables us to process data for a specific purpose, for example when entering forms.
  • Contract (Article 6 paragraph 1 lit. b GDPR): In order to fulfill a contract or pre-contractual obligations with you, we may also process your data, for example to create invoices.
  • Legal obligation (Article 6 paragraph 1 lit. c GDPR): We also process your data if we have to fulfill a legal requirement, for example the legal obligation to retain invoices.

Rights of those affected in accordance with GDPR

You have the right to information, rectification, erasure, restriction of processing, data portability and objection. Further information on the GDPR: https://eur-lex.europa.eu/legal-content/DE/ALL/?uri=celex%3A32016R0679.

  • Right to information (Article 15 GDPR): You have the right to know whether we are processing your data. If this is the case, you have the right to receive a copy of the data as well as information about the purpose of processing, the categories of data processed, the recipients (including any transfers to third countries), the storage period, your right to rectification, deletion, restriction of processing and Objection, the right to lodge a complaint with a supervisory authority (link to the authority below), the origin of the data (if not collected by you), and the possible implementation of profiling.
  • Right to rectification (Article 16 GDPR): You have the right to have incorrect data corrected.
  • Right to erasure (Article 17 GDPR – “right to be forgotten”): You can request the deletion of your data.
  • Right to restriction of processing (Article 18 GDPR): Under certain circumstances we may only store your data but not process it further.
  • Right to data portability (Article 20 GDPR): Upon request, we will provide you with your data in a common format.
  • Right to object (Article 21 GDPR): You can object to processing based on public interest or legitimate interest. We will check whether we can comply with the objection.
  • Right to object to direct advertising and profiling: You can object to the use of your data for direct advertising or profiling at any time.
  • Automated decisions (Article 22 GDPR): Under certain circumstances, you have the right not to be subject to actions based solely on automated decisions.
  • Right to complain (Article 77 GDPR): You have the right to complain to the data protection authority if you believe that the processing of your data violates the GDPR.

To exercise these rights, please contact us. If you have a complaint about how we handle your data, we would like to hear from you, but you also have the right to lodge a complaint with the relevant supervisory authority (the Data Protection Authority).

data transfer to the USA

Our website includes tools from companies based in the USA. If these tools are active, your personal data can be passed on to the US servers of the respective companies. We would like to point out that the USA is not a safe third country within the meaning of EU data protection law. US companies are obliged to release personal data to security authorities without you as the data subject being able to take legal action against this. It cannot therefore be ruled out that US authorities (e.g. secret services) will process, evaluate and permanently store your data on US servers for surveillance purposes. We have no influence on these processing activities.

Storage period

The data processed while using our website will be deleted as soon as the purpose for which it was stored no longer exists. This is done on the condition that deletion does not conflict with any legal retention obligations and there is no differing information about specific processing procedures. In some cases, we are legally obliged to store certain data even after the original purpose has ceased, for example due to tax requirements.

Revocation of your consent to data processing

Many data processing operations are only possible with the express consent of the data subjects. You can revoke your consent at any time. The legality of the data processing carried out up to the time of revocation remains unaffected by the revocation.

Cookies

Our website uses cookies. Cookies are small text files that are stored on your computer and that your browser stores. We use cookies to make our website easier to use and to carry out statistical evaluations. You can prevent the storage of cookies by setting your browser software accordingly. Further information about the cookies used, their respective purpose and storage period can be found here Cookie Policy.

Web hosting

To display a website, the visitor's browser must connect to a web server and retrieve the website's code. Operating a web server is a complex and resource-intensive task. Therefore, we rely on professional providers and server systems that are high-performing, redundant, secure, and reliable. Data transmission from the web server to your local network and ultimately to your browser may involve the processing of personal data. Your computer stores the received data, and the web server must also store your data in order to send it to you. Below, we provide information about the type and scope of the data stored and the protective measures we have implemented.

This website is hosted by an external service provider (hoster). The personal data collected on this website is stored on the hoster's servers. This may include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses and other data generated via a website. The hoster is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 Para. 1 lit. b GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 Para. 1 lit. f GDPR). Our hoster will only process your data to the extent necessary to fulfill its service obligations and will follow our instructions with regard to this data.

Server log files

Every time our website is accessed, information is automatically collected by the web hosting provider and stored in so-called server log files. This information includes:

  • IP address
  • Date and time of access
  • Name of the page accessed
  • Referrer URL (the previously visited page)
  • Amount of data transferred
  • Browser type and browser version
  • operating system

The processing of this data is technically necessary so that we can deliver the site to you; it is therefore carried out out of legitimate interest in accordance with Art. 6 Paragraph 1 Letter f of GDPR. The data is used exclusively for statistical evaluations and to improve the website. The IP addresses are stored for 30 days in the so-called log rotation and then deleted.

SSL encryption

We use SSL certificates for secure technical communication between the client and our website. This is particularly important when transmitting confidential data, such as form entries. Therefore, this website uses SSL/TLS encryption. An encrypted connection is easily recognizable by the fact that the browser's address bar displays "https://" and usually also a colored padlock icon. By using SSL/TLS encryption, the data you transmit cannot be intercepted by third parties.

core services

The legal basis for the processing is our legitimate interest in the effective handling of your request pursuant to Art. 6 para. 1 lit. f GDPR.

Content management system (WordPress)

Our website is based on the open-source content management system WordPress. The system is installed locally on our server. No data processing by the WordPress core services takes place outside the secure server environment. If you have a login and log in to the site, WordPress processes personal data such as your email address or name for authentication purposes. WordPress uses cookies to ensure the website's functionality. You can find more information about this in the WordPress privacy policy and in our [Privacy Policy/Data Protection Statement]. Cookie Policy.

comment function (WordPress)

Visitors can comment on posts on this website. When a comment is written, it, along with its metadata, is stored indefinitely. This allows us to facilitate and identify discussions and to automatically moderate comments. For example, a follow-up comment is automatically approved if a previous comment by an author has already been approved. Authors are identified by their email address. The criterion for the duration of storage of other personal data is the respective statutory retention period. After this period expires, the corresponding data is routinely deleted, unless it is still required for contract fulfillment or initiation. Comments posted on our blog can also be subscribed to by third parties. In particular, a commenter can subscribe to subsequent comments on a specific blog post. If a data subject chooses to subscribe to comments, the data controller sends an automatic confirmation email to verify, using a double opt-in procedure, that the owner of the specified email address has indeed opted for this service. The option to subscribe to comments can be cancelled at any time.

registration function (WordPress)

We offer you the option to register on our website. The data you enter during this registration process, which is visible in the registration form, is collected and stored solely for the purpose of using our services. When you register on our site, we also store your IP address and the date and time of your registration. This serves as a safeguard for us in the event that a third party misuses your data and registers on our site without your knowledge. This data will not be shared with third parties. Furthermore, the data collected in this way will not be compared with data that may be collected by other components of our website.

For users who register on our website, we also store the personal information they provide in their user profiles. All users can view, change or delete their personal information at any time (the user name cannot be changed). Website administrators can also view and change this information.

The data controller will provide any data subject, upon request, with information about what personal data concerning them is stored. Furthermore, the data controller will rectify or erase personal data at the request or instruction of the data subject, provided that no statutory retention obligations prevent this. Export of the technically stored data is possible at any time and can be requested by email. The data subject's email address serves as the identifier. For the purposes of legitimation, this email address must also match the sender's email address.

server management Plesk

We use the web server management software Plesk to administer the server services. This is a server administration system. The EU Commission has determined through an adequacy decision pursuant to Art. 45 GDPR that Switzerland, as a third country, has an adequate level of protection compared to the usual scope of the GDPR. You can find the corresponding decision here

tracking

We use web analytics software on our website that anonymously logs and evaluates actions such as clicks or entries made by visitors to our website. We use these services to improve the performance of our offering. The respective system collects and processes anonymized data and provides us with analyses of user behavior. The tools also offer testing options, such as A/B tests, in which two versions of content are tested to see which version leads to more acquisition. In such tests or other analyses, anonymous user profiles can also be created and data stored in cookies.

Matomo

We use Matomo for anonymous visitor tracking. The use of web analytics requires your consent, which we have obtained through our cookie compliance system. According to Article 6(1)(a) of the GDPR, this consent constitutes the legal basis for the processing of personal data, such as that which may occur when collected by web analytics tools.

With the help of web analytics systems, we identify which content is accessed how frequently, how long visitors stay on the site, which device they use to access the website, and their geographical origin. These statistics help us improve the efficiency of our services. The legal basis for this is Article 6(1)(f) GDPR (Legitimate Interests). We make every technical effort to avoid using cookies for this purpose. For further information, please see our [Privacy Policy/Data Protection Statement]. Cookie Policy.

  • Data processing: Local
  • Provider: InnoCraft Ltd, 7 Waterloo Quay PO625, 6140 Wellington, New Zealand
  • Matomo Privacy Policy
  • Cookies: See Cookie Policy
  • Legal basis: Legitimate interest in the technical validation of the website and communication with our customers (Art. 6 para. 1 lit. f GDPR).

plugins

Backup (WPVivid)

We use the WPVivid plugin to secure this website. The backups are stored encrypted.

  • Data processing: Local
  • Provider: WPVivid Team
  • WPVivid Privacy Policy
  • Cookies: No cookies are set.
  • Legal basis: Legitimate interest in the security of the website (Art. 6 para. 1 lit. f GDPR).

contact form (Forminator)

We use Forminator, a form system for securely collecting user inquiries, on our website. When you send us data via a contact form, your information from the inquiry form, including the contact details you provide, is stored for processing the inquiry and in case of follow-up questions. We will not share this data without your consent. The data is processed exclusively locally and automatically deleted after 30 days. If you use the "Continue later" function in one of our forms, your previous form entries will be stored locally in a cookie.

Spam protection (hCaptcha)

We use hCaptcha on our website to protect ourselves from spam submissions. The provider is the American company Intuition Machines, Inc. hCaptcha processes your data, including in the USA.

  • Data processing: External
  • Provider: Intuition Machines, Inc., 350 Alabama St, San Francisco, CA 94110, USA
  • Privacy policy hCaptcha
  • Cookies: See Cookie Policy
  • Legal basis: Legitimate interest in the security of our website (Art. 6 para. 1 lit. f GDPR).
This record was last checked on: December 18, 2024

IRISH FARM OF HOPE - County Galway Western Ireland
Support or donate
Take on sponsorship
Adoption
Animals for
Contact
Back To Top