Who we are
Our website address is https://fityourinfo.com.
1. Introduction to GDPR and CPRA Compliance
- Begin by stating your compliance with both the GDPR (applicable to EU/EEA residents) and CPRA (applicable to California residents).
Example:
“We are committed to protecting your privacy and ensuring your data is processed in accordance with the GDPR (General Data Protection Regulation) and CPRA (California Privacy Rights Act).”
2. Personal Data Collection through Google AdSense
- Mention that your website uses Google AdSense and outline the types of personal data it may collect, including cookies, IP addresses, and browsing history.
Example:
“Our website uses Google AdSense to serve ads. Google may collect and process certain data, such as your IP address, browsing history, and other behavioral data through cookies or similar tracking technologies to provide personalized ads.”
3. Google AdSense Cookies and Tracking Technologies
- Explain that Google AdSense uses cookies to show relevant ads and how cookies work in the context of both GDPR and CPRA.
Example:
“Google AdSense may use cookies and other tracking technologies to collect information about your visits to this and other websites in order to provide personalized advertising. You can manage your cookie preferences via our cookie consent banner.”
4. Consent Management
- Detail how users can consent to data collection, including cookies, in accordance with both GDPR and CPRA.
For GDPR:
“For visitors from the European Union, you must opt-in to cookies used for personalized advertising through our cookie consent banner. You can manage or withdraw your consent at any time.”
For CPRA:
“California residents have the right to opt out of the ‘sale’ or ‘sharing’ of personal information for advertising purposes. This can be managed via the Do Not Sell My Personal Information link available on our website.”
5. Data Rights Under GDPR and CPRA
- Outline the different rights users have under GDPR and CPRA:
For GDPR:
- The right to access, correct, or delete personal data.
- The right to restrict processing or object to data processing.
- The right to data portability.
For CPRA:
- The right to know what personal data is being collected.
- The right to request the deletion of personal data.
- The right to opt-out of the sale or sharing of personal data for advertising.
- The right to limit the use of sensitive personal information.
Example:
“You have the right to access, correct, or delete your personal data, whether you are a resident of the EU/EEA or California. If you wish to exercise your rights under GDPR or CPRA, please contact us at [email address].”
6. Google as a Data Controller and Processor
- Clarify Google’s role in collecting and processing personal data through AdSense. Provide a link to Google’s Privacy Policy.
Example:
“Google is responsible for the collection and processing of personal data through its AdSense platform. For more information on how Google handles your data, please refer to Google’s Privacy Policy.”
7. Opt-Out Options
- Provide options for opting out of personalized ads for both GDPR and CPRA requirements.
For GDPR:
“You may withdraw your consent for personalized ads at any time by adjusting your preferences through the cookie consent banner.”
For CPRA:
“California residents can opt out of the ‘sale’ or ‘sharing’ of personal data by clicking the ‘Do Not Sell or Share My Personal Information’ link.”
Also mention other available opt-out mechanisms, like Google’s Ad Settings or the Network Advertising Initiative opt-out page.
8. Data Retention and Security
- Describe how long personal data is retained and the security measures in place to protect it.
Example:
“We retain personal data collected via Google AdSense for as long as necessary to provide personalized ads or as required by law. We also use security measures such as encryption and secure servers to protect your personal data from unauthorized access.”
9. Do Not Track (DNT) Signals
- Explain how your website responds to Do Not Track signals, which are relevant to both GDPR and CPRA compliance.
Example:
“We honor Do Not Track (DNT) signals, meaning we do not collect or track your data if a DNT signal is received from your browser.”
10. Children’s Privacy (for CPRA)
- Address the collection of personal data from children, as CPRA requires stricter regulations when handling data of minors under 16 years old.
Example:
“We do not knowingly collect personal information from children under the age of 16. If you believe we have unintentionally collected such information, please contact us to request deletion.”
11. Updates to Privacy Policy
Inform users that this privacy policy may be updated and encourage them to review it regularly.