Privacy Policy

1. Introduction

At TonyPosnanski.com, we value your privacy and are fully committed to protecting the personal data of all our visitors, users, and customers. This Privacy Policy explains how we collect, use, store, share, and safeguard your information in compliance with all applicable data protection laws, including but not limited to the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). We believe in full transparency and a privacy-first approach, ensuring all data processing is conducted lawfully, fairly, and in a manner that respects your individual rights.

2. Scope of Policy and Data Controller Role

This Privacy Policy applies to all personal data processed through your use of the website located at tonyposnanski.com, including all its subdomains and related services. TonyPosnanski.com acts as the “data controller” for the purposes of GDPR and the “business” under the CCPA, which means we determine the purposes and means of processing your personal information.

If you have any questions about how your data is handled, you may contact us at [email protected].

3. Categories of Data Processed

We may collect and process the following categories of personal data:

a) Usage Data
Includes details about your browser type, operating system, IP address, time zone settings, language preferences, page views, site navigation paths, and session durations. This data helps us enhance website functionality and optimize your user experience.

b) Account Data
Includes your name, email address, mailing address, phone number, and related identifiers you provide during registration or account setup.

c) Profile Data
Includes information about your interactions with the website, preferences, purchase history, product reviews, and behavioral data derived from our interactions with you.

d) Communication Data
Includes records of support requests, communications via our contact forms, email correspondence, and social media interactions.

e) Technical Data
Includes device identifiers, operating system information, internet service provider details, browser plug-in types and versions, platform identifiers, screen resolution, and other system settings.

f) Transaction Data
Includes billing addresses, delivery information, payment card information (processed securely via third-party providers), order history, and financial transaction logs.

g) Preference Data
Includes your marketing preferences, communication consents, newsletter sign-ups, content subscriptions, and expressed interests in specific products or services.

4. Legal Bases for Processing

We collect and process your information in accordance with the following lawful bases:

– Consent: When you provide explicit permission (e.g., for email marketing).
– Contractual Necessity: To fulfill a contract we have entered into with you or to take steps at your request before entering into such a contract.
– Legitimate Interests: For operational needs such as website analytics, fraud detection, or service improvements without overriding your fundamental rights and freedoms.
– Legal Obligation: In order to comply with applicable laws and regulations.

5. Your Rights

As a data subject, you have the following rights under the GDPR and CCPA:

– Right of Access: Request a copy of your personal data held by us.
– Right to Rectification: Request correction of inaccurate or incomplete data.
– Right to Erasure: Request deletion of personal data when no longer necessary or where consent is withdrawn.
– Right to Restriction: Request limited processing of your data under certain circumstances.
– Right to Data Portability: Request to receive your data in a structured, machine-readable format and/or transfer to another controller.
– Right to Object: Object to processing based on legitimate interest or direct marketing.
– Right Not to Be Subject to Automated Decision-Making: We do not engage in automated decision-making or profiling without human involvement.

To exercise your rights, contact us at [email protected]. We may require proof of identity for your protection.

6. Security Measures

TonyPosnanski.com employs industry-standard technical and organizational safeguards designed to secure your data against unauthorized access, alteration, disclosure, or destruction. These measures include, but are not limited to:

– SSL encryption for data transmission
– Firewalls and intrusion detection systems
– Strict user access controls and authentication procedures
– Regular software updates and vulnerability testing
– Data backups and secure storage solutions
– Employee training programs on data privacy and security

7. International Transfers

Personal data collected from individuals outside the United States may be transferred to, stored in, and processed in jurisdictions that may not offer the same level of protection as the country in which the data was initially collected. When we transfer personal data internationally, we use appropriate safeguards such as Standard Contractual Clauses approved by the European Commission or rely on other legally recognized transfer mechanisms to ensure lawful processing.

8. Data Retention

We retain personal data only as long as necessary for the purposes outlined in this Privacy Policy and in accordance with applicable laws. Data will be retained according to the following general schedule:

– Usage Data: Up to 24 months to support analytics
– Account Data: As long as the account remains active or until deleted
– Profile Data: Up to 36 months after last interaction
– Communication Data: 18 months after last correspondence
– Transaction Data: Retained for 7 years for financial compliance
– Technical Data: Up to 12 months
– Preference Data: Until consent is withdrawn or updated

9. Cookie Policy

Our website uses cookies to enhance your browsing experience. Cookies are small text files stored on your device that help us understand how you interact with tonyposnanski.com and tailor content accordingly. We use the following types:

– Essential Cookies: Required for key website functions such as login authentication and session management.
– Functional Cookies: Helps remember your site preferences and customizations.
– Analytics Cookies: Collects aggregated data on user behavior to improve site performance.
– Performance Cookies: Measures performance metrics like load times and error rates.

10. Cookie Management and Compliance

You can manage or disable non-essential cookies at any time via the cookie consent banner or settings panel on our website. In compliance with the GDPR and CCPA, you have the right to opt in to or opt out of cookie categories (except essential cookies). Most browsers also allow you to adjust cookie settings manually or block them altogether.

Please note that disabling certain cookies may affect your ability to use parts of the website or degrade your user experience.

11. Children’s Privacy

TonyPosnanski.com does not knowingly collect or process personal data from children under the age of 13. If you believe we have collected data from a child in violation of applicable laws, please contact us immediately at [email protected] so we can take appropriate action to delete such information.

12. Policy Updates & User Notifications

We reserve the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal obligations, or service offerings. Changes will be posted on this page. Where material changes are made that significantly affect your privacy rights, we will provide prominent notice or seek your explicit consent where required by law.

13. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us at:

Email: [email protected]
Website: https://tonyposnanski.com

We take data protection seriously and strive to maintain full compliance with all applicable privacy regulations. Please reach out to us via [email protected] with any privacy-related concerns or inquiries.