Company & Website Information
Introduction
This is the privacy policy for http://www.stormvistawxmodels.com
StormVistaWxModels is owned and operated by Commodity Weather Group, LLC (https://www.commoditywx.com)
The responsible controller for the processing on this site is
Commodity Weather Group, LLC
1380 Monroe Street NW #106, Washington, DC 20010
240-207-2500
Data Protection Officer
You may reach our data protection officer at: team@commoditywx.com
The protection of your personal data is of particular concern to us. We treat the personal data provided by you in the context of the use of our website and services confidentially and in accordance with the applicable data protection laws as well as this privacy policy.
In the following, we would like to inform you in detail about which personal data we collect, for which purposes they are used, with whom we share data and which privacy rights you may be entitled to.
Representative in the European Union
We have appointed a Representative in the European Union for the purposes of ensuring compliance with the GDPR.
The contact details of the Representative are: team@commoditywx.com
Definitions
Personal data means any information relating to an identified or identifiable natural person (data subject); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
Controller means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
Processor means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
Recipient means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, including both processors and controllers.
Legal basis means a lawful ground for data processing under the GDPR.
Data Processing Activities
We collect certain personal information to provide specific services and functionalities on our website.
The following sections describe the different data processing activities we conduct on our website. The information particularly reflects the processing purposes, what personal data we process for this purpose as well as the legal basis for the processing.
Informational use of our website
a) If you visit our website for informational purposes only, i.e. surfing on our website without specifically providing personal data, we will process the following information about you. The information may include a limited amount of personal data:
IP Address
Referrer URL
Browser Information
Device Information
Date and time of the user request
This information is processed to enable you to use our website (e.g. by adapting our website to the needs of your device or browser).
The legal basis for this data processing is performance of contract, Art. 6 para. 1 sentence 1 lit. b GDPR, as we need the information for the effective provision of our website, and for providing you the services of our website at your request. Without the processing of the above-mentioned personal data, we will not be able to carry out the communication over the network and provide you with the required functionalities of our website.
We retain this personal data for As long as necessary for the purpose
Users may create a user account on
a) You have the possibility to register for a user account on our website. During registration we will process the following personal data about you:
First Name
Last Name
Email Address
Address
Phone Number
Profession Employer
City Name
Postal Code
Country
b) The lawfulness of this data processing is "performance of contract" follows from Art. 6 para. 1 sentence 1 lit. b GDPR. The processing is required for the effective provision and the administration of your user account. Without providing the data required for registration, it is not possible to create a user account on our website.
We retain your personal data till you have a user account with us.
c) You can delete your customer account as follows:
i. Please contact us by e-mail at team@commoditywx.com with your written request for deletion. If you decide to delete your customer account, the account data will be deleted, unless further data retention is required or justified under the applicable law.
ii. You can also delete your entire account within your customer account. If you decide to delete data or your customer account, the account data will be deleted, unless further data retention is required or justified under the applicable law.
Users may contact you via the contact form
You have the possibility to contact us using the contact details provided on the website. If you contact us, we will process the content of your inquiry, your name, your e-mail address or telephone number, if applicable, our answers as well as all information that you voluntarily provide us with in the context of the inquiry in order to be able to adequately handle your request.
You further have the possibility to contact us via the contact form on our website. In this case, we collect the following personal data:
We will process this data as well as the content of your inquiry, our answers and all information that you voluntarily provide us with in the context of the inquiry in order to be able to adequately handle your request.
The lawfulness of this data processing is "legitimate interests" (results from Art. 6 para. 1 sentence 1 lit. b, f GDPR), as this data processing is necessary to ensure proper contact and the provision of customer service. This provision of adequate customer service is our legitimate interest that requires us to process your personal data.
We will retain your data as long as necessary to adequately process your request. Afterwards, it will be deleted, unless longer storage is not required or justified by law.
The retention period for the personal data processed to process your request is:
As long as necessary for the purpose
Afterwards, it will be deleted, unless longer storage is not required or justified by law.
You have a right to object to processing based on our legitimate interests. As a consequence of any valid objection, we will no longer process your data unless we have sufficiently compelling and legitimate grounds for the processing.
No processing of personal data of children
We do not knowingly collect or solicit personal data from persons under the age of 13. The website is not directed at children under the age of 13. In the event that we learn that we have collected personal data of a child under the age of 13 without parental consent, we will delete that information as quickly as possible. If you believe that we may have personal data from or about a child under 13, please contact us using the contact details outlined in this policy.
No processing of sensitive personal data
We do not knowingly collect or process sensitive personal data.
No processing of personal data relating to criminal convictions and offences
We do not knowingly collect or process personal data relating to criminal convictions and offences.
No processing for automated individual decision-making including profiling
We do not knowingly collect or process personal data for automated individual decision-making including profiling.
Cookies
Use of Cookies and other Web Technologies
Cookies and similar tracking technologies are placed on your computer or mobile device to collect, store, and use information about you when you visit our website.
This website uses cookies or similar technologies ("cookies"). There are different kinds of cookies:
Strictly necessary cookies are cookies that are necessary to provide the services and features available through the websites, e.g. shopping. Without the cookie the service cannot be provided.
Some of the cookies described above are so-called first party cookies where we are responsible for dropping the cookies and processing the personal data. Other cookies we use may be provided by third party (third party cookies). These third parties drop the cookies and process the collected personal data for their own purposes, e.g. to provide you advertisement.
Data Sharing
Sharing your personal information with service providers
Personal data may be disclosed to service providers who act on our behalf in order to process the personal data in accordance with the purposes outlined above. This includes the following categories of service providers:
IT Service Providers
Cloud Service providers
Data access by service providers is privileged in accordance with Art. 28 GDPR. We have concluded corresponding data processing agreements with the respective service providers. The agreement obliges the service providers to process your personal data only on our behalf and upon our instruction. They are prohibited to pass on your personal data to other parties without permission, unless this is required by law.
Data Recipients: Usersnap, CleanTalk, Amazon Web Services, DigitalOcean
Categories of Personal Data: IP and Name
Third party recipients of your personal information
There are no data recipients located in a country outside the European Union, and they do not have access to personal data from a country outside the European Union.
International Data Transfer
To offer and perform our Services, we may need to transfer your personal data among several countries. The personal data that we collect from you may be transferred to, and stored at, a destination outside the EEA, including the United States of America. Those countries may not have the same data protection laws as the country in which you initially provided the information. We will take all steps reasonably necessary to ensure that your personal data is processed and treated securely and in accordance with this Privacy Policy and with the Applicable Data Protection Law.
Some of the data recipients listed above are located in a country outside of the Federated Republic of Brazil and/or access your personal data from a country outside the Federated Republic of Brazil. We implemented adequate safeguards to secure the cross-border transfer of your personal data. Where the country of the recipient is not subject to an adequacy decision by the ANPD we concluded Standard Contractual Clauses. Other than that, we will only transfer your data to a recipient in a third country if you provided prior consent. For more information about safeguards, you can always contact us using the contact details above.
Data Retention
How long we retain your personal information
Unless otherwise stated in this privacy policy, we retain your personal data only as long as necessary for the respective purpose. Subsequently, we will delete your data, unless we are legally entitled or obliged to further storage.
Please refer to the section on Data Processing Activities to find out the exact retention period for different categories of your personal data and/or different processing purposes.
Data Security
How we protect your personal information
We implemented appropriate technical and organizational measures to ensure a level of security appropriate to the risk, taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons.
Your Rights
Depending on the circumstances, you may be entitled to exercise some or all of the following rights:
1. Obtain confirmation as to whether or not your personal data is being processed and access to copy of your personal data undergoing processing.
1. require (i) access to and/or duplicates of your personal data retained, (ii) receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and (iii) to transmit those personal data to another controller without hindrance from our side; where technically feasible you shall have the right to have the personal data transmitted directly from us to another controller;
2. request rectification, removal or restriction of your personal data;
3. Where the data processing is based on your consent, refuse to provide and – without impact to data processing activities that have taken place before such withdrawal – withdraw your consent to processing of your personal data at any time;
4. take legal actions in relation to any potential breach of your rights regarding the processing of your personal data, as well as to lodge complaints before the competent data protection regulators;
5. not to be subject to any automated decision making, including profiling (automatic decisions based on data processing by automatic means, for the purpose of assessing several personal aspects) which produce legal effects on you or affects you with similar significance.
Further, you may be entitled to object, out of grounds relating to your particular situation, at any time to processing of personal data concerning you, including object to direct marketing and automated individual decision-making including profiling. In this case, please provide us with information about your particular situation. After the assessment of the facts presented by you we will either stop processing your personal data or present you our compelling legitimate grounds for an ongoing processing.
You also have a right to lodge a complaint with the supervisory authority. The contact details of your supervisory authority are:
team@commoditywx.com
California Privacy Rights Act (CPRA) Rights
Description of Rights
Commodity Weather Group, LLC provides users complete rights over their data in accordance with the California Consumer Privacy Act:
- Users can request to know PI collected/sold/shared/disclosed by Commodity Weather Group, LLC in the last 12 months.
- Users can request Commodity Weather Group, LLC to delete PI collected about them.
- Users can request Commodity Weather Group, LLC to correct PI collected and retained about them.
- Users can request Commodity Weather Group, LLC not to sell or share PI collected about them.
- Users can not be discriminated against by Commodity Weather Group, LLC if they choose to exercise their data rights.
- Users can request Commodity Weather Group, LLC to limit the Use of their Sensitive Personal Information.
For more information on how to exercise your rights refer to Your Rights Section
If you are an authorized representative exercising a rights request on behalf on a consumer, the procedure to do so is:
For all CPRA requests, we will be verifying your requests following company policy. Refer to Your Rights section to learn more on how to exercise your rights.
Personal Information Protection and Electronic Documents Act (PIPEDA) Rights
PIPEDA Specific Notice
Commodity Weather Group, LLC complies with all of the Principles Set Out in the National Standard of Canada Entitled Model Code for the Protection of Personal Information as required by Personal Information Protection and Electronic Documents Act (PIPEDA).
PIPEDA Representative
Commodity Weather Group, LLC has appointed a PIPEDA representative to oversee the implementation of compliance of PIPEDA at our organization:
The appointed representative can be contacted for any question, query or complaint related to PIPEDA implementation or compliance by our organization.
PIPEDA Access Rights
Commodity Weather Group, LLC provides complete access rights over their personal information in accordance with PIPEDA. For more information on how to exercise your rights refer to Your Rights
Updates to this notice
We may update this Privacy Policy from time to time. If we modify our Privacy Policy, we will post the revised version here, with an updated revision date. You agree to visit these pages periodically to be aware of and review any such revisions. If we make material changes to our Privacy Policy, we may also notify you by other means prior to the changes taking effect, such as by posting a notice on our websites or sending you a notification. By continuing to use our website after such revisions are in effect, you accept and agree to the revisions and to abide by them.
This privacy policy was last updated on Mar 20, 2023