Data Collection and Privacy Policy of the Silver Linings Arts Website
Your privacy is important to Silver Linings Arts (“Silver Linings Arts”). This privacy policy explains what information we collect and how we use, disclose, transfer, and store your information.
Contact
If you have any questions regarding this privacy policy, you may contact us using the form on our contact page.
What Information Do We Collect?
You may visit our website anonymously.
If you choose to register on our website, the following categories of data will be processed:
“Account Data”
When you create an account on our website, place an order, or respond to a survey, basic contact information is collected, such as your email address, postal address, phone number, and other identifiable information.
“Medical History and Relevant Data”
As part of the onboarding process and to support any service provided to you, we may ask you to submit confidential information about your medical history so that we can advise you properly and recommend or exclude certain treatments in the future.
Why Do We Use Your Information?
All information we collect from you may be used for one or more of the following purposes:
- To personalize your experience (the information helps Silver Linings Arts better respond to your individual needs);
- To improve our website (Silver Linings Arts continuously strives to improve its website offerings based on the information and feedback received from customers);
- To identify you as a contracting party;
- To enable a secure login to our website;
- To establish a primary communication channel with you; and
- To send periodic emails (the email address you provide for order processing may be used to send you information and updates related to your engagement with Silver Linings Arts).
Legal Basis
EU General Data Protection Regulation (GDPR)
The processing of your data is based either on your consent or where processing is necessary for the performance of a contract to which you are a party or in order to take steps at your request prior to entering into a contract, pursuant to GDPR Art. 6(1)(a)–(b).
If the processing is based on your consent, you may withdraw your consent at any time by contacting us using the contact details provided above.
In order to enter into a contract for the purchase of Silver Linings Arts services, you must provide the required personal data. If you do not provide all required information, the Service cannot be delivered.
How Do We Protect Your Information?
Silver Linings Arts implements technical, physical, and organizational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized use, modification, disclosure, access, and any other form of unlawful processing.
1. Availability
Our website uses the advanced features of cloud infrastructure to ensure high availability with a traffic manager for automatic geographical failover in the event of a data center disaster.
No personal data is permanently stored outside of Silver Linings Arts’ cloud platforms. Physical security is therefore maintained by Silver Linings Arts’ subcontractors.
2. Integrity
All data transmissions are encrypted in accordance with best practices for protecting data confidentiality and integrity. For example, all credit card information is transmitted via Secure Socket Layer (SSL) technology and then encrypted within the payment gateway provider’s database, accessible only to authorized personnel who are required to keep the information confidential.
3. Confidentiality
All staff members are subject to full confidentiality, and all subcontractors are required to sign a confidentiality agreement unless full confidentiality is already part of the main agreement between the parties.
Whenever personal data is accessed by authorized personnel, access is only possible through an encrypted connection. When accessing database data, the IP address of the person accessing the data must also be pre-authorized.
4. Transparency
Silver Linings Arts will keep you informed at all times of any changes to privacy protection and data security processes, including practices and policies. You may request information at any time regarding where and how your data is stored, secured, and used. Silver Linings Arts will also provide summaries of all independent audits of the Service.
5. Isolation
All access to personal data is denied by default using a zero-privilege policy. Access to personal data is restricted to individually authorized personnel.
Overall responsibility for data security lies with the Silver Linings Arts Data Protection Officer, who educates and updates all staff on the data security measures outlined in the Silver Linings Arts security manual and in this privacy policy.
6. Monitoring
Silver Linings Arts uses security reporting to monitor access patterns and proactively identify and mitigate potential threats. Administrative operations, including system access, are logged to provide an audit trail in case unauthorized or accidental changes occur.
7. Personal Data Breach Notification
In the event that your data is compromised, Silver Linings Arts will notify you and the competent supervisory authority within 72 hours by email, providing information on the scope of the breach, the data affected, and the action plan to secure the data and limit any potential adverse effects on affected individuals.
A “personal data breach” means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to personal data transmitted, stored, or otherwise processed as part of your registration on this website.
8. Do We Disclose Information to Third Parties?
Silver Linings Arts does not sell, trade, or transfer personally identifiable information to third parties, except to licensed healthcare professionals involved in the services provided to you. These trusted parties may access personally identifiable information on a need-to-know basis and are contractually bound to keep your information confidential.
We may also disclose your information when we believe disclosure is appropriate to comply with the law, enforce our site policies, or protect our or others’ rights, property, or safety.
9. Legally Required Disclosure
Silver Linings Arts will not disclose customer data to law enforcement except upon your instruction or where required by law. When governments lawfully request customer data, Silver Linings Arts strives to limit disclosure and will only release the specific data mandated by the relevant legal request.
If required to disclose your data, Silver Linings Arts will promptly notify you and provide a copy of the request unless legally prohibited from doing so.
10. Requests for Rectification, Restriction, or Erasure of Personal Data
Rectification
You may obtain the rectification of inaccurate personal data concerning you without undue delay.
Restriction of Processing
You may request that Silver Linings Arts restrict the processing of your personal data where one of the following applies:
a. You contest the accuracy of the personal data, for a period enabling Silver Linings Arts to verify the accuracy of the data;
b. The processing is unlawful and you oppose erasure and request restriction of use instead;
c. Silver Linings Arts no longer needs the personal data for processing purposes, but you require it for the establishment, exercise, or defense of legal claims.
Erasure
You may request the erasure of your personal data without undue delay, and Silver Linings Arts will delete such data where:
a. The data is no longer necessary for the purposes for which it was collected or processed;
b. You withdraw your consent and there is no other legal ground for processing;
c. You object to processing for direct marketing purposes;
d. The personal data has been unlawfully processed; or
e. The data must be erased to comply with a legal obligation under European or national law.
11. Data Retention
Data Retention Policy
Your data will be retained for up to five full fiscal years following the completion of the Services provided to you.
Legal Retention Requirements
You may not request changes to Silver Linings Arts’ default retention periods.
12. Cooperation
Silver Linings Arts will cooperate with you to ensure compliance with applicable data protection regulations, including enabling the effective exercise of your data subject rights (access, rectification, erasure, blocking, objection), and the management of incidents including forensic analysis in the event of a security breach.
13. Your Consent
By using our website, you consent to this privacy policy.
14. Changes to Our Privacy Policy
If we decide to change our privacy policy, we will post those changes on this page and/or update the privacy policy modification date below.
This privacy policy was last modified on November 29, 2022.