Privacy Policy

Privacy Policy

CSA Active collects some personally identifiable information from its users.

Data Controller and Owner

contact@csaactive.com.au is the owner’s email address.

Please contact us here if you have any questions about our data processing practices or if you want your data removed from our website and related services.

 

Data Types Collected

Cookies, Usage Data, and email address are examples of the types of Personal Data collected by CSA Active, either directly or indirectly through third parties.

Complete information on each type of Personal Data collected can be found in the dedicated sections of this privacy statement or in specific explanation texts displayed prior to the Data collection.

Personal Data may be freely provided by the User or collected automatically when using CSA Active in the case of Usage Data.

Unless otherwise stated, all Data requested by CSA Active is required, and failure to provide this Data may prevent CSA Active from providing its services. Users are free not to communicate certain Data if CSA Active expressly states that it is not required. This will have no effect on the Service’s availability or functionality.

 

Users who are unsure about which Personal Data is required are encouraged to contact the Owner for clarification.

Any use of Cookies – or other tracking tools – by CSA Active or the owners of third-party services used by CSA Active is for the purpose of providing the Service requested by the User, as well as any other purposes described in this document and, if available, in the Cookie Policy.

Users are responsible for any third-party Personal Data they obtain, publish, or share through CSA Active, and confirm that they have the consent of the third party to provide the Data to the Owner.

 

Data processing mode and location

Processing techniques

The Owner employs appropriate security measures to protect the Data from unauthorized access, disclosure, modification, or destruction.

The data is processed using computers and/or IT-enabled tools, in accordance with organizational procedures and modes that are strictly related to the stated purposes. In addition to the Owner, certain types of persons in charge, involved with the operation of CSA Active (administration, sales, marketing, legal, system administration) or external parties (such as third-party technical service providers, mail carriers, hosting providers, IT companies, communications agencies) appointed, if necessary, as Data Processors by the Owner, may have access to the Data. The Owner can provide you with an updated list of these parties at any time.

 

Processing is permitted under the law.

If one of the following applies, the Owner may process Personal Data about Users:

  • Users have given their permission to use their information for one or more specific purposes. Note: Under some laws, the Owner may be allowed to process Personal Data until the User objects (“opts-out”), without relying on consent or any of the other legal bases listed below. This does not apply, however, if the processing of Personal Data is governed by European data protection legislation.
  • Data must be provided in order to fulfill the terms of a contract with the User and/or any pre-contractual obligations;
  • processing is required to comply with a legal obligation that the Owner is bound by;
  • processing relates to a task carried out in the public interest or in the exercise of the Owner’s official authority;
  • Processing is required for the purposes of the Owner’s or a third party’s legitimate interests.
  • In any case, the Owner will gladly assist in determining the specific legal basis for the processing, including whether the provision of Personal Data is a statutory or contractual requirement, or a condition of entering into a contract.

 

Place

The Owner’s operating offices and any other locations where the parties involved in the processing are located process the Data.

Data transfers may involve transferring the User’s Data to a country other than their own, depending on the User’s location. Users can check the section containing details about the processing of Personal Data to learn more about the location where such transferred Data is processed.

Users have the right to know the legal basis for Data transfers to countries outside the European Union, as well as to any international organization governed by public international law or established by two or more countries, such as the United Nations, as well as the security measures taken by the Owner to protect their Data.

Users can learn more about such transfers by reading the relevant sections of this document or contacting the Owner using the information provided in the contact section.

Time spent in retention

Personal data will be processed and stored for as long as the purpose for which it was collected requires.

 

Therefore:

Personal Data collected for the purpose of performing a contract between the Owner and the User will be kept until the contract is fully completed.

Personal Data collected for the Owner’s legitimate interests will be kept for as long as necessary to achieve those goals. Users can learn more about the Owner’s legitimate interests by reading the relevant sections of this document or contacting the Owner directly.

When the User has given consent to such processing, the Owner may be allowed to keep Personal Data for a longer period of time as long as that consent is not revoked. Furthermore, the Owner may be required to retain Personal Data for a longer period of time if required to do so by law or by an authority.

Personal Data will be deleted after the retention period has expired. As a result, after the retention period has expired, the right to access, the right to erasure, the right to rectification, and the right to data portability cannot be enforced.

 

The reasons for processing

The User’s data is collected to enable the Owner to provide its Services, as well as for the following purposes: platform services and hosting, analytics, and marketing. Analytics, managing contacts and sending messages, user database management, remarketing and behavioral targeting, managing support and contact requests, tag management, displaying content from external platforms, and SPAM protection are just a few of the features available.

In the relevant sections of this document, users can find more detailed information about such processing purposes and the specific Personal Data used for each purpose.

Information on the processing of personal data in detail

Personal data is collected for the following purposes and services:

 

1. Analytical tools

The services in this section allow the Owner to monitor and analyze web traffic, and they can also be used to track User behavior.

Stats for WordPress (Automattic Inc.)

Automattic Inc.’s WordPress Stats is an analytics service.

Cookies and Usage Data are two types of personal data that are collected.

Processing takes place in the United States – Privacy Policy.

Google Analytics is a tool that allows you to track (Google Inc.)

Google Analytics is a Google Inc. (“Google”) web analytics service. Google uses the information gathered to track and analyze how people use CSA Active, to create reports about its activities, and to share it with other Google services.

Google may use the information gathered to contextualize and personalize its own ad network’s ads.

Cookies and Usage Data are two types of personal data that are collected.

United States – Privacy Policy – Opt Out is the location of processing. Participant in the Privacy Shield.

Conversion tracking in Google AdWords (Google Inc.)

Google AdWords conversion tracking is a Google Inc. analytics service that connects data from the Google AdWords advertising network with CSA Active actions.

Cookies and Usage Data are two types of personal data that are collected.

Processing takes place in the United States – Privacy Policy. Participant in the Privacy Shield.

Personal Data collected: a variety of data types as specified in the service’s privacy policy.

Processed in the United States – Privacy Policy

2. Contact management and message delivery

This type of service allows you to manage a database of email contacts, phone contacts, or any other contact information that you might need to communicate with the User.

These services may also collect information about the date and time the User viewed the message, as well as when the User interacted with it, such as by clicking on links in the message.

Mailjet is an email service.

Mailjet is a service that allows you to manage your email addresses and send messages.

Cookies, email address, and usage data were collected as personal data.

Processing location: France – Privacy Policy.

3. Platform and hosting services

These services are responsible for hosting and running key components of CSA Active, allowing CSA Active to be provided from a single platform. Such platforms offer the Owner a variety of tools, including analytics, user registration, commenting, database management, e-commerce, and payment processing, all of which require the collection and handling of Personal Data. Some of these services use geographically distributed servers, making it difficult to pinpoint the precise location of the Personal Data.

WordPress.com is a website where you can write your own (Automattic Inc.)
WordPress.com is an Automattic Inc. platform that allows the Owner to create, run, and host CSA Active.

Personal Data collected: a variety of data types as specified in the service’s privacy policy.

Processing takes place in the United States – Privacy Policy.

4. SPAM filtering

This type of service examines CSA Active traffic, which may contain Users’ Personal Data, with the goal of filtering out parts of the traffic, messages, and content that are considered SPAM.

reCAPTCHA is a service provided by Google (Google Inc.)
Google reCAPTCHA is a spam-filtering service offered by Google Inc.

The use of reCAPTCHA is governed by Google’s privacy and terms of service.

Cookies and Usage Data are two types of personal data that are collected.

Processing takes place in the United States – Privacy Policy. Participant in the Privacy Shield.

5. User database administration

This type of service enables the Owner to create user profiles based on an email address, a personal name, or other information provided by the User to CSA Active, as well as track User activities using analytics. This Personal Data may also be combined with publicly available information about the User (such as profiles on social media sites) to create private profiles that the Owner can display and use to improve CSA Active.

Some of these services may also allow the User to receive timed messages, such as emails, in response to specific actions taken on CSA Active.

Marketing Automation with Mailjet
Mailjet is a service that allows users to manage their user databases.

Cookies, email address, first name, last name, and usage data are among the personal data collected.

Processing location: France – Privacy Policy.

6. Using external platforms to display content

This type of service enables you to interact with and view content hosted on external platforms directly from the pages of CSA Active.

Even if Users do not use this type of service, it may still collect web traffic data for the pages where it is installed.

Google Fonts is a collection of fonts created by Google (Google Inc.)
Google Fonts is a typeface visualization service provided by Google Inc. that CSA Active can use to include this type of content on its pages.

Personal Data collected: Usage Data and other types of data as described in the service’s privacy policy.

Processing takes place in the United States – Privacy Policy. Participant in the Privacy Shield.

7. Taking care of customer service and contact requests

This service enables CSA Active to manage support and contact requests received via email or other channels, such as the contact form.

The Personal Data that is processed is determined by the information provided by the User in the messages as well as the communication method used (e.g. email address).

Sumo Group Inc. offers a set of marketing tools for online websites called Sumo Sumo.

Personal Data collected: a variety of data types as specified in the service’s privacy policy.

Processed in the United States – Privacy Policy

8. Behavioral targeting and remarketing

Based on the User’s previous use of CSA Active, this type of service allows CSA Active and its partners to inform, optimize, and serve advertising.

This activity is carried out by tracking Usage Data and using Cookies, which provides information to the partners in charge of remarketing and behavioral targeting.

In addition to any opt-out options provided by any of the services listed below, the User can opt out of the use of cookies by third-party services by visiting the Network Advertising Initiative opt-out page.

Custom Audiences on Facebook (Facebook, Inc.)
Facebook Custom Audience is a remarketing and behavioral targeting service offered by Facebook, Inc. that links CSA Active’s activity to the Facebook advertising network.

Cookies and email address are two types of personal data that are collected.

United States – Privacy Policy – Opt Out is the location of processing. Participant in the Privacy Shield.

Display Advertising Remarketing with Google Analytics (Google Inc.)
Google Analytics for Display Advertising is a remarketing and behavioral targeting service provided by Google Inc. that links Google Analytics’ tracking activity and Cookies to the Adwords advertising network and the Doubleclick Cookie.

Cookies and Usage Data are two types of personal data that are collected.

United States – Privacy Policy – Opt Out is the location of processing. Participant in the Privacy Shield.

9. Tag Administration

This type of service enables the Owner to centrally manage the tags or scripts required by CSA Active.

As a result, the Users’ data flows through these services, with the possibility of it being retained.

Google Tag Manager is a tool that allows you to manage your (Google LLC)
Google Tag Manager is a Google LLC-provided tag management service.

Cookies and Usage Data are two types of personal data that are collected.

Processing takes place in the United States – Privacy Policy. Participant in the Privacy Shield.