Purpose of the privacy policy
This privacy statement is for bigboxcollection.com, a site run by me, Benjamin Wimmer, and according to General Data Protection Regulation (GDPR), I have a duty to protect your personal data. In this statement, I outline which data is reached during the use of bigboxcollection.com, how it is collected, and also what I use this data for.
Data capture
Your data are collected by the following data processing operations.
Log data
Each time you access the website, the visit is recorded in a log file (server logs) for a period of 190 days with the following log data:
- IP address of the enquirer
- call method (GET, HEAD, PUT)
- target address without HOST
- minutes with version (e.g. HTTP/1.1)
- name of the file retrieved and amount of data transferred
- date and time of the retrieval
- notification indicating whether the retrieval was successful
- processing time of the request in microseconds
- user agent used
- SSL version used
- referrer
This data is used for system security verification, error analysis and for statistical purposess.
Statistics
bigboxcollection.com counts how often a 3D box is viewed, from where the 3D box was accessed from and also tries to map those views to sessions. For this, the following data is processed:
- 3D box accessed
- IP address of the enquirer
- user agent used
- referrer
For mapping views to sessions, an anonymizised fingerprint is generated using a combination of the IP address and the user agent data. The fingerprint is generated using a one-way hash function with the given user data and other, internal data as input values. The provided input will always result in the same fixed length set of characters but it is impossible to determine what the original input was because the encryption algorithm only goes one way.
Adding other, internal data that's only known to bigboxcollection.com to the set of input data is done for forcing the result set's uniqueness, increasing its complexity and thus hightening the level of anonymization.
The fingerprint is used to clear the "Games, that have just been looked up"-panel on the starting page from the boxes that have been looked up during your current session and thus only show boxes from other sessions. Further, it is used to help spam detection.
The 3D box viewed, the provided referrer and the generated fingerprint are stored and used for internal statistics as well as for generating content for bigboxcollection.com, e.g. how often a box has been viewed so far and for generating the "Games, that have just been looked up"-panel.
Cookies
bigboxcollection.com does not use any cookies.
Data storage
To ensure the availability and reliability of bigboxcollection.com, I utilize the services of an external web hosting provider. This hosting provider securely stores and processes data associated with your interactions on the site. While I maintain responsibility for the data collected, certain technical aspects of data storage and server management are outsourced to the hosting provider. I have chosen a reputable hosting service committed to data security and privacy, and contractual agreements are in place to ensure compliance with relevant data protection laws.
Other than that, there is no transfer of your data to any other third parties.
SSL encryption
To ensure the secure transmission of data between your device and bigboxcollection.com, I utilize SSL technology. SSL is a cryptographic protocol that provides a secure connection by encrypting the data exchanged between your web browser and bigboxcollection.com. This encryption safeguards your personal information, such as IP addresses and user agents, during the transmission process, enhancing the overall security of your interactions with our website.
By using SSL, I aim to protect your data from unauthorized access and ensure that your online experience on bigboxcollection.com is conducted in a secure environment.
Data subject rights
You have the right to information about data concerning yourself, as well as the right to have data rectified or deleted. You have a right to restrict or to object to data processing, as well as the right to transfer data.
If you consider that your rights are not being complied with or are not being ad-equately complied with, you have the possibility to lodge a complaint with the Data Protection Authority.
Contact details
Benjamin Wimmer, Vienna, Austra
benjamin@bigboxcollection.com