Privacy Policy

Sec 01 · Controller

Who we are

This is the privacy policy for stormvistawxmodels.com. StormVistaWxModels is owned and operated by Commodity Weather Group, LLC (commoditywx.com).

The protection of your personal data is of particular concern to us. We treat the personal data you provide while using our website and services confidentially, in accordance with applicable data protection laws and this privacy policy. Below, we explain which personal data we collect, the purposes it is used for, with whom we share it, and the privacy rights you may be entitled to.

Sec 02 · Terms

Definitions

Personal data

Any information relating to an identified or identifiable natural person (data subject); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Processing

Any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Controller

The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.

Processor

A natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

Recipient

A natural or legal person, public authority, agency or another body to which the personal data are disclosed, including both processors and controllers.

Legal basis

A lawful ground for data processing under the GDPR.

Sec 03 · Processing activities

What we collect & why

We collect certain personal information to provide specific services and functionalities on our website. The following describes each processing activity: its purpose, the personal data involved, and the legal basis for the processing.

Visiting the website (informational use)

If you visit our website for informational purposes only — surfing without specifically providing personal data — we process the following information, which may include a limited amount of personal data:

• IP address
• Referrer URL
• Browser information
• Device information
• Date & time of request

This information is processed to enable you to use our website — for example, by adapting it to the needs of your device or browser. Without it, we cannot carry out communication over the network or provide the required functionality of our website.

Creating a user account

You have the possibility to register for a user account on our website. During registration we process the following personal data:

• First name
• Last name
• Email address
• Address
• Phone number
• Profession / employer
• City
• Postal code
• Country

Without the data required for registration, it is not possible to create a user account on our website.

Deleting your account. You can delete your account in either of two ways: (i) email your written deletion request to team@commoditywx.com, or (ii) delete your entire account from within your customer account. In either case, the account data will be deleted unless further retention is required or justified under applicable law.

Contacting us

You can contact us using the contact details provided on the website or via the contact form. If you do, we process the content of your inquiry, your name, your email address or telephone number where applicable, our answers, and any information you voluntarily provide in the context of the inquiry, in order to adequately handle your request.

You have a right to object to processing based on our legitimate interests. Following any valid objection, we will no longer process your data unless we have sufficiently compelling and legitimate grounds for the processing.

Sec 04 · Exclusions

What we don't process

• Children's data. We do not knowingly collect or solicit personal data from persons under the age of 13, and the website is not directed at children under 13. If we learn that we have collected personal data of a child under 13 without parental consent, we will delete that information as quickly as possible. If you believe we may hold data from or about a child under 13, please contact us using the details in this policy.
• Sensitive personal data. We do not knowingly collect or process sensitive personal data.
• Criminal convictions and offences. We do not knowingly collect or process personal data relating to criminal convictions and offences.
• Automated decision-making, including profiling. We do not knowingly collect or process personal data for automated individual decision-making, including profiling.

Sec 05 · Web technologies

Cookies

Cookies and similar tracking technologies are placed on your computer or mobile device to collect, store, and use information about you when you visit our website. This website uses cookies or similar technologies ("cookies"). There are different kinds of cookies:

Strictly necessary cookies are cookies that are necessary to provide the services and features available through the website. Without the cookie, the service cannot be provided.

Some cookies are first-party cookies, where we are responsible for placing the cookie and processing the personal data. Other cookies may be provided by third parties (third-party cookies); these third parties place the cookies and process the collected personal data for their own purposes, e.g. to provide you advertisement.

Sec 06 · Recipients

Data sharing & transfers

Service providers

Personal data may be disclosed to service providers who act on our behalf to process personal data for the purposes outlined above, including IT service providers and cloud service providers.

Data access by service providers is governed by Art. 28 GDPR. We have concluded data processing agreements obliging these providers to process your personal data only on our behalf and upon our instruction, and prohibiting them from passing your personal data to other parties without permission unless required by law.

International data transfer

To offer and perform our services, we may need to transfer your personal data among several countries. Personal data we collect from you may be transferred to, and stored at, a destination outside the EEA, including the United States of America. Those countries may not have the same data protection laws as the country in which you initially provided the information. We will take all steps reasonably necessary to ensure your personal data is processed and treated securely, in accordance with this privacy policy and applicable data protection law.

Sec 07 · Safeguards

Retention & security

How long we retain your personal information

Unless otherwise stated in this privacy policy, we retain your personal data only as long as necessary for the respective purpose. Subsequently, we delete your data unless we are legally entitled or obliged to further storage. Please refer to What we collect & why for the exact retention period for each category of personal data and processing purpose.

How we protect your personal information

We have implemented appropriate technical and organizational measures to ensure a level of security appropriate to the risk, taking into account the state of the art, the costs of implementation, and the nature, scope, context and purposes of processing, as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons.

Sec 08 · Data subject rights

Your rights

Depending on the circumstances, you may be entitled to exercise some or all of the following rights:

1. Obtain confirmation as to whether or not your personal data is being processed, and access to a copy of your personal data undergoing processing.
2. Require (i) access to and/or duplicates of your personal data retained, (ii) receipt of the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format, and (iii) transmission of that personal data to another controller without hindrance from our side; where technically feasible, you shall have the right to have the personal data transmitted directly from us to another controller.
3. Request rectification, removal or restriction of your personal data.
4. Where the data processing is based on your consent, refuse to provide — and, without impact on data processing activities that took place before such withdrawal, withdraw — your consent to the processing of your personal data at any time.
5. Take legal action in relation to any potential breach of your rights regarding the processing of your personal data, and lodge complaints with the competent data protection regulators.
6. Not be subject to any automated decision-making, including profiling (automatic decisions based on data processing by automatic means for the purpose of assessing several personal aspects) which produces legal effects concerning you or similarly significantly affects you.

Further, you may be entitled to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you — including objecting to direct marketing and automated individual decision-making, including profiling. In this case, please provide us with information about your particular situation. After assessing the facts you present, we will either stop processing your personal data or present you our compelling legitimate grounds for ongoing processing.

You also have a right to lodge a complaint with the supervisory authority. Contact details: team@commoditywx.com.

Sec 09 · California

California Privacy Rights Act (CPRA)

Commodity Weather Group, LLC provides users complete rights over their data in accordance with the California Consumer Privacy Act:

• Request to know the personal information (PI) collected, sold, shared, or disclosed by Commodity Weather Group, LLC in the last 12 months.
• Request deletion of PI collected about you.
• Request correction of PI collected and retained about you.
• Request that your PI not be sold or shared.
• Not be discriminated against for choosing to exercise your data rights.
• Request limits on the use of your Sensitive Personal Information.

For more information on how to exercise your rights, refer to Your rights. If you are an authorized representative exercising a rights request on behalf of a consumer: for all CPRA requests, we will verify your request following company policy.

Sec 10 · Canada

PIPEDA

Commodity Weather Group, LLC complies with all of the principles set out in the National Standard of Canada entitled Model Code for the Protection of Personal Information, as required by the Personal Information Protection and Electronic Documents Act (PIPEDA).

We have appointed a PIPEDA representative to oversee implementation and compliance at our organization: team@commoditywx.com. The representative can be contacted for any question, query or complaint related to PIPEDA implementation or compliance.

Commodity Weather Group, LLC provides complete access rights over personal information in accordance with PIPEDA. For more information on how to exercise your rights, refer to Your rights.

Sec 11 · Revisions

Updates to this notice

We may update this privacy policy from time to time. If we modify it, we will post the revised version here with an updated revision date. You agree to visit this page periodically to be aware of and review any revisions. If we make material changes, we may also notify you by other means before the changes take effect, such as posting a notice on our websites or sending you a notification. By continuing to use our website after revisions are in effect, you accept and agree to the revisions and to abide by them.