Dorothea Sing Zhang
About
Privacy Policy
1. An Overview of Data Protection
General Information
The following information provides an easy-to-navigate overview of what happens to your personal data when you visit this website. The term “personal data” comprises all data that can be used to personally identify you. For detailed information about the subject of data protection, please consult the full Privacy Policy outlined below.
Data Recording on This Website
Who is responsible for the data collection on this website (the “controller”)?
The data on this website is processed by the website operator. The operator’s contact details can be found in the section “Information Required by Law” on this website.
How do we collect your data?
Your data is collected in part when you provide it to us. This may be, for example, data you enter into a contact form.
Other data is collected automatically by our IT systems when you visit the website. This data primarily includes technical information (e.g. browser, operating system, or time of access). This information is collected automatically as soon as you enter the site.
What do we use your data for?
Some of the data is collected to ensure the proper functioning of the website. Other data may be used to analyse how visitors use the site.
What rights do you have regarding your data?
You have the right to request information about the source, recipients, and purpose of your stored personal data at any time, free of charge. You also have the right to request that your data be corrected or deleted. If you have questions about your rights or any aspect of data protection, please contact us using the details provided under “Information Required by Law.”
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).
Additionally, you have the right to request that the processing of your personal data be restricted under certain circumstances. For more details, see the section “Right to Restriction of Data Processing.”
2. Hosting and Content Delivery Networks (CDN)
External Hosting
This website is hosted by an external service provider (host). Personal data collected on this website is stored on the servers of the host. This may include, but is not limited to, IP addresses, contact requests, metadata and communications, contractual data, contact details, names, website access logs, and other data generated through the website.
The host is used to fulfil contracts with current and prospective customers (UK GDPR Article 6(1)(b)) and to ensure secure, fast, and efficient provision of our online services (UK GDPR Article 6(1)(f)).
Our host will process your data only as necessary and in accordance with our instructions.
3. General Information and Mandatory Information
Data Protection
The operators of this website take the protection of your personal data seriously. We treat your personal data confidentially and in accordance with data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
When you use this website, various personal data is collected. This Privacy Policy explains what data we collect, how we collect it, and what we use it for.
Please note that data transmission via the internet (e.g. communication by e-mail) may be subject to security vulnerabilities. Complete protection of your data from access by third parties is not possible.
Information About the Responsible Party (the "Controller")
The data controller for this website is:
Dorothy Sing Zhang
19 Sun Street
London EC2A 2FJ
E-mail: dorothysingzhang@gmail.com
The controller is the individual who decides how and why personal data is processed.
Revocation of Your Consent to Data Processing
Some data processing operations are only possible with your express consent. You may withdraw your consent at any time. An informal e-mail to us is sufficient. The withdrawal of consent does not affect the lawfulness of any data processing carried out before the withdrawal.
Right to Object to Processing (Article 21 UK GDPR)
If your data is processed on the basis of legitimate interests (Article 6(1)(f) UK GDPR), you have the right to object to this processing at any time for reasons relating to your particular situation. This also applies to profiling based on those provisions. If you object, we will no longer process your data unless we can demonstrate compelling legitimate grounds which override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defence of legal claims.
If your data is being used for direct marketing purposes, you can object at any time, and your data will no longer be used for these purposes.
Right to Lodge a Complaint with the Supervisory Authority
If you believe there has been a breach of data protection law, you have the right to lodge a complaint with the relevant supervisory authority. In the UK, this is the Information Commissioner’s Office (ICO):
https://ico.org.uk
Right to Data Portability
You have the right to receive data that we process based on your consent or in fulfilment of a contract in a commonly used, machine-readable format. If you request the direct transfer of data to another controller, this will only be done if it is technically feasible.
SSL or TLS Encryption
This site uses SSL or TLS encryption for security and to protect the transmission of confidential content, such as enquiries you send to us. You can recognise an encrypted connection in your browser’s address bar when it changes from "http://" to "https://" and a padlock icon is visible.
When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
Information, Correction, and Deletion
You have the right under applicable laws to obtain information at any time about your stored personal data, its origin, recipients, and the purpose of its processing. You may also have the right to request correction or deletion of this data. If you have any questions about personal data, you can contact us at any time using the address provided under “Information Required by Law.”
Right to Restrict Processing
You have the right to request the restriction of the processing of your personal data under the following circumstances:
If processing is restricted, such data may only be processed with your consent, or for the exercise or defence of legal claims, or for the protection of the rights of another person or for reasons of important public interest.
4. Data Collection on This Website
Contact via E-mail or Phone
If you contact us via e-mail or telephone, your enquiry, including any personal data provided (e.g. name, contact information), will be stored and processed for the purpose of handling your request. This data is not shared without your consent.
This processing is carried out under UK GDPR Article 6(1)(b) where your request relates to pre-contractual or contractual obligations, or under Article 6(1)(a) and/or (f), depending on the nature of your enquiry.
Your data will be retained only as long as needed to fulfil the purpose of your request, unless legal obligations require longer retention.
5. Plug-ins and Tools
Vimeo
This website uses plug-ins from the Vimeo video platform. The provider is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.
When you visit a page containing a Vimeo plug-in, a connection is made to Vimeo’s servers. This tells Vimeo which pages you have visited and collects your IP address, even if you are not logged into Vimeo or do not have a Vimeo account. This data may be transmitted to servers in the United States.
If you are logged into your Vimeo account, Vimeo may associate your browsing activity with your personal profile. You can prevent this by logging out of your Vimeo account.
The use of Vimeo is in the interest of presenting our video content in an engaging way. This constitutes a legitimate interest under Article 6(1)(f) UK GDPR. If consent is required (e.g. for cookies), processing is based on Article 6(1)(a) and can be withdrawn at any time.
For more information on how Vimeo handles user data, see Vimeo’s privacy policy:
https://vimeo.com/privacy