Last Updated: July 17, 2020
The GDPR applies to you if you are located in the European Economic Area (an EEA Individual).
This policy describes the types of information we may collect from you or that you may provide when you access or use the Ashlar Services and our practices for collecting, using, maintaining, protecting and disclosing that information.
This policy applies to information we collect or may collect:
It does not apply to information collected by:
Minors under the Age of 13
None of the Ashlar Services are intended for minors under 13 years of age. No one under age 13 may provide any information on or through the Ashlar Services. We do not knowingly collect personal data from children under 13. If you are under 13, do not use or provide any information through any of the Ashlar Services or any of its features or register or use any of the interactive or public comment features of any of the Ashlar Services or provide any information about yourself to us, including your name, address, telephone number, e-mail address or any screen name or user name you may use. If we learn we have collected or received personal data from a child under 13 without verification of parental consent, we will delete that information. If you believe that we might have any information from or about a child under 13, please contact us at firstname.lastname@example.org.
Information We Collect About You and How We Collect It
We collect or may collect several types of information from and about you and other users of the Ashlar Services, including:
Usage details and information, including how you communicate with other users of the Ashlar Services
Information contained in the comments and postings on or through any of the Ashlar Services
We collect this information:
Certain web transactions may also involve you calling us or our calling you. Please be aware that we may monitor and, in some cases, record such calls for staff training or quality assurance purposes.
You may now or in the future provide post smart contract code, data and other information onto certain blockchain platforms, including Arweave (collectively, User Content). Your User Content may be viewable through ViewBlock by others. We cannot control the actions of other users of ViewBlock, with whom your User Content is viewable. Therefore, we cannot and do not guarantee that your User Content will not be viewed, downloaded or shared by unauthorized persons.
We take every reasonable step to limit the volume of your personal data that we process to what is reasonably necessary.
We do Not Engage in Automated Decision-Making without Human Intervention
We do not use automated decision-making without human intervention, including profiling, in a way that produces legal effects concerning you or otherwise significantly affects you.
Consequences of Not Providing Personal Data
You are not required to provide all personal data identified in this policy to use our Site or to interact with us offline, but certain functionality will not be available if you do not provide personal data. In addition, if you do not provide the personal data, we may not be able to respond to your requests, provide the Ashlar Services, or provide you with marketing that we believe you would find valuable.
The technologies we use or might use for automatic data collection may include:
Your web browser may offer you a "Do Not Track" option, which allows you to signal to operators of websites and web applications and services (including behavioral advertising services) that you do not wish such operators to track certain of your online activities over time and across different websites. We do not honor any web browser "Do Not Track" signals or other mechanisms that provide you with the ability to exercise choice regarding the collection of personally identifiable information about your online activities over time and across third-party websites or online services. At present, no universally accepted standards exist on how companies should respond to do-not-track signals. In the event a final universally accepted standard is established, we will assess and provide an appropriate response to these signals.
Third-party Responsibilities and Services.
We may use or partner with third-parties, agents or contractors for various purposes in connection with our business and operations (collectively, Service Providers), including blockchain projects that support Ashlar and billing, payment services and the performance of services on our behalf, such as gathering and analyzing information and the provision of services to you. bitsear.ch may also link to www.ipfs.io in its search results. In the course of performing these responsibilities and providing such services, these other companies may have access to your personal data. We may also share information, including your personal data, with these Services Providers in order to enable them to perform these responsibilities and to provide these services. Many Services Providers have adopted their own privacy policies, which are not subject to control by Ashlar. You should always review the policies of these Service Providers to make sure that you are comfortable with the ways in which they collect, use, maintain, protect and disclose your information. We do not list our current Service Providers because they change from time to time. If you would like the names of any of Service Providers, please email us.
Service Providers that have access to your personally identifiable information in connection with providing services are required to keep your personal data confidential and are not permitted to use this personal data for any purpose other than to fulfill the services they are performing for Ashlar or the Site.
The Service Providers may also transmit cookies to your computer or device, when you click on ads that appear on or through the Service. Also, if you click on a link to a third-party website, such third party may also transmit cookies to you and we do not have any control over that. Please be aware that cookies placed by third parties may continue to track your activities online even after you are no longer using any our Services, and those third parties may not honor "Do Not Track" requests you have set using your web browser.
Ashlar may receive compensation from these Service Providers and other third parties.
Use of Remarketing with Google Analytics and other Remarking and Analytic Services
We use or may in the future use a variety of remarketing and analytic services including:
You can set preferences for how Google advertises to you using the Google Ad Preferences page, and if you want to you can opt out of interest-based advertising entirely by cookie settings or permanently using a browser plugin.
How We Use Your Information
We will only use information that we collect about you or that you provide to us, including any personal data:
Some of the information that we collect automatically is statistical data and does not include personal data, but we may maintain it or associate it with personal data we collect in other ways or receive from third parties or you provide to us. It helps us to improve the Ashlar Services, and to deliver a better and more personalized service, including enabling us to:
Storage and Transfer of Your Information
We may store any data or other information that we collect (personal or otherwise) ourselves or in databases and servers owned and maintained by us, our affiliates, agents or Service Providers.
If you access or use the Ashlar Services outside of the United States, information that we collect about you may be transferred to servers inside the United States and maintained indefinitely, which may involve the transfer of information out of countries located in the European Economic Area and other parts of the world unless otherwise prohibited by applicable law or agreed by Ashlar and you. By allowing Ashlar to collect information about you, you consent to such transfer and processing of such information without restriction. We may also store some information locally on your computer or other devices. For example, we may store information as local cache so that you can open the Site and view content faster.
Although users from all over the world may access and use the Ashlar Services, keep in mind that no matter where you live or where you happen to use our services, you consent to us processing and transferring information in and to the United States and other countries whose data-protection and privacy laws may offer fewer protections than those in your home country.
Disclosure of Your Information
We may disclose aggregated information about our users, and information that does not include any personal data, without restriction.
We may also disclose your personal data:
Choices About How We Use and Disclose Your Personal Data
We strive to provide you with choices regarding the personal data you provide to us. We have created mechanisms to provide you with the following control over your personal data:
We do not control third parties' collection or use of your information to serve interest-based advertising. You may be able to opt out of receiving personalized advertisements from companies who are members of the Network Advertising Initiative or who subscribe to the Digital Advertising Alliance's Self-Regulatory Principles for Online Behavioral Advertising. For more information about this practice and to understand your options, please visit: AboutAds and this link. You may also use TRUSTe's Preference Manager here.
Our Legal Bases for Handling Your Personal Data
GDPR and the laws in some other jurisdictions require companies to tell you about the legal bases that they rely on to use or disclose your personal data. To the extent that those laws apply, we rely on the following legal grounds to process your personal data:
Legitimate interests: We may use your personal data information for our legitimate interests on the grounds that it furthers our legitimate interests in commercial activities (but only to the extent that such interests are overridden by the interests or fundamental rights and freedoms of the affected individuals) including:
Analyzing and improving the Ashlar Services and our business
Accessing and Correcting Your Personal Data
You may change, correct or delete any personal data that you have provided to us through the Site. We may not accommodate a request to change personal data or other information if we believe the change would violate any law or legal requirement or cause the information to be incorrect.
If you delete your User Content from any of the Ashlar Services (including any User Content stored in the cloud), copies of your User Content may remain viewable in cached and archived pages, or might have been copied or stored by other users of the Servers or the Site. Proper access and use of information provided on or through any of the Ashlar Services, including User Content, are governed by the Terms.
Ashlar is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission.
In compliance with the Privacy Shield Principles, Ashlar commits to resolve complaints about your privacy and our collection or use of your personal information transferred to the United States pursuant to Privacy Shield. European Union, UK, and Swiss individuals with Privacy Shield inquiries or complaints should first contact Ashlar by email.
Ashlar has further committed to refer unresolved privacy complaints under the Privacy Shield Principles to an independent dispute resolution mechanism, the BBB EU PRIVACY SHIELD. If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed, please visit this linkfor more information and to file a complaint. This service is provided free of charge to you.
If your Privacy Shield complaint cannot be resolved through the above channels, under certain conditions, you may invoke binding arbitration for some residual claims not resolved by other redress mechanisms. See Privacy Shield Annex 1.
Consistent with the Privacy Shield Principles, Ashlar may transfer personal data to third parties, including transfers from one country to another. We will only disclose an individual's non-public personal data to third parties under one or more of the following conditions:
To the extent provided by the Privacy Shield Principles, Ashlar remains responsible and liable under the Privacy Shield Principles if a third-party that it engages to process personal data on its behalf does so in a manner inconsistent with the Privacy Shield Principles, unless Ashlar proves that it is not responsible for the matter giving rise to the damage.
Your California Privacy Rights
California Civil Code Section §1798.83 permits users of the Site that are California residents to request certain information regarding our disclosure of personal data to third parties for their direct marketing purposes. To make such a request, please send an e-mail to email@example.com or write us at 182 Howard Street, #717, San Francisco, CA 94105.
European Privacy Rights for EEA Residents.
You have the right to ask us not to process your personal data for marketing purposes. We will usually inform you (before collecting your personal data) if we intend to use your personal data for such purposes or if we intend to disclose your personal data to any third party for such purposes. You can exercise your right to prevent such processing by checking certain boxes on the forms we use to collect your personal data. You can also exercise the right by contacting us directly.
If you are an EEA Individual and GDPR applies, and we hold your personal data in our capacity as data controller, you may request that we:
We will consider all requests and provide our response within the time period required by applicable law. Please note, however, that certain information may be exempt from such requests in some circumstances, which may include if we need to keep processing your information for our legitimate interests or to comply with a legal obligation. We may request you provide us with additional information to confirm your identity before responding to your request. You have the right to lodge a complaint with the authorities applicable to your situation, though we invite you to contact us with any concern, as we would be happy to try to resolve it directly. You may also have the right to make a GDPR complaint to the relevant Supervisory Authority. A list of Supervisory Authorities is available here.
If you are an EEA Individual in France, you also have the right to set guidelines for the retention and communication of your personal data after your death.
If you reside in a jurisdiction other than the European Economic Area, you may also have similar rights to the above. Please contact us at firstname.lastname@example.org if you would like to exercise one of these rights, and we will comply with any request to the extent required under applicable law.
You can exercise any of these rights by contacting us at email@example.com or write us at 182 Howard Street, #717, San Francisco, CA 94105.
How Long We Store Your Personal Data
We will only retain your personal data, in a form which permits us to identify you, for as long as necessary to fulfil the purposes we collected it for. We will retain and use your personal data as necessary to satisfy any legal, accounting or reporting requirements, to resolve disputes or to enforce our agreements and rights. To dispose of personal data, we may anonymize it, delete it or take other appropriate steps. Data may persist in copies made for backup and business continuity purposes for additional time.
We understand that the security of your personal data is important. We provide reasonable administrative, technical, and physical security controls to protect your personal data. However, despite our efforts, no security controls are 100% effective and Ashlar cannot ensure or warrant the security of your personal data. Any transmission of personal data is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Site.
The safety and security of your data also depends on you. Where we have given you (or where you have chosen) a password for access to and use of certain parts of the Site and/or the other Ashlar Services, you are responsible for keeping this password confidential. We ask you not to share your password with anyone. We urge you to be careful about giving out information in public areas of any of the Ashlar Services. The information you share in public areas may be viewed by any user of the Site.