Website Policy

Regarding collection of emails

If you subscribe to my mailing list, I may send you news emails about future works and events, which you can unsubscribe from by submitting a request directly to INESCAMARAEMAIL. I do not share your contact information with any third parties or email marketing provider. You are considered to have consented to the collection of your email address by actively submitting it.

Collection of email data is not done for the provision of any services or goods by the artist. All data is securely stored in a password protected file until a request is made for it to be deleted.

Data Controller

This site’s email Data Controller is Inés Cámara Leret as artist and sole owner, if you have any questions or concerns regarding the use of your data please do not hesitate to get in touch at EMAILINESCAMARA.

Visitor Data and Analytics

If and only if you have accessed this website via newreal.cc analytics and performance cookies may be active.

This website uses cookies and similar technologies, which are small files or pieces of text that download to a device when a visitor accesses a website or app. For information about viewing the cookies dropped on your device and how your data is used, visit https://www.google.com/policies/privacy/partners/ .

Cookies will collect personal data when you have consented to them before arriving to this site by selecting the following URL: https://newreal.cc/art/#do . We use this consent as the legal basis for collection of data.

If you have used this URL by mistake or do not want your session to continue being tracked please access this URL instead, cookies will no longer be active https://newreal.cc/art/#dont.

All Visitor Data is collected using Google Analytics 4 which collects personal data when you visit this website, including:

• Information about your browser network and device
• Your IP address, which is not logged or stored. IP address is used to derive measurement data then immediately erased. More details here https://support.google.com/analytics/answer/12017362?hl=en 

This information may also include details about your use of this website, including:

• Clicks
• Internal links
• Pages visited
• Scrolling
• Searches
• Timestamps

The data is then anonymized and aggregated by google analytics in EU located servers. Only then is it used by The University of Edinburgh, located in The United Kingdom, to learn about site traffic and activity in order to compose aggregated customer journeys. The data are analysed in an aggregated and de-personalized form, without access to any identifiable or individual data.

Access to any Google Analytics Data is restricted to members of The New Real Research Programme. All data sharing settings with any other Google services are restricted, including anonymized data. All user level or event data is erased from Google Analytics Servers after a period of 2 months since a user last interacted with this site Data retention - Analytics Help .  

Visitor data and Analytics are collected at the request of The University of Edinburgh, based in The United Kingdom, and under its responsibility. The purpose is that of conducting research. You may find all information relative to this purpose and how The University of Edinburgh uses your data here: https://newreal.cc/tnro_audienceparticipation

Email addresses provided within this website are not shared with the University of Edinburgh under any circumstances.

Privacy and Data Protection

All aggregated visitor data and analytics is collected at the discretion of The University of Edinburgh which operates within the University of Edinburgh privacy framework.

The University of Edinburgh is sole responsible of the collection and handling of any Visitor Data and Analytics, with the exception of emails addresses.

Data Controller for Visitor Data and Analytics

The Data Controller for any Data collected via Google Analytics is the University of Edinburgh, registered with the Information Commissioner’s Office, Registration Number Z6426984.  If you have any questions or concerns regarding this Privacy and Data Policy or this website, please, do not hesitate to get in touch with our Research Lead, Dr Matjaz Vidmar, at matjaz.vidmar[at]ed.ac.uk. If you would like to escalate the issue, you can contact the University’s Data Protection Officer at dpo[at]ed.ac.uk. If you are unhappy with the way we have processed your personal data you have the right to complain to the Information Commissioner’s Office (ICO), but we ask that you please raise the issue with Heard of Research and the University’s Data Protection Officer first.

Important doubts & references to consult and clarify before going live

• Checklist of items that the web policy needs to cover

• Legal basis for data collection and use: in our case, consent
• Consent must be explicit by an active action of the user: mails require them to write and click submit, analytics require having clicked on a specific link and can retract (navigating after being told there are metrics is considered an affirmative action, even if not clicking accept)
• Clear, concise language without too many technical terms. links to further details
• Purpose of the data collection and use
• International data transfer (this explicitly refers to personal data, and we are transferring aggregated data but still good to show clearly)
• Contact details of the person in charge of data and for exercising data rights (modification, consultation, deletion)
• Duration

• Content that the web policy must cover

• UK - https://www.legislation.gov.uk/eur/2016/679/chapter/III/section/2 

• An exception is when the user has already been informed and we can prove it, as they come from our website only after been given the informaiton we can rpove that. https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/the-right-to-be-informed/are-there-any-exceptions/         

• Is it possible to check the source of a visit as coming from newreal.cc and only tracking those who does (+have consented). this is to prevent tracking to users that have accidentally used the tracking link (if gets shared outside its intended use)

• COLLECTION OF EMAILS ALREADY REQUIRES A DATA POLICY, Spanish agency responded in that manner to my consultation.

• Ines’ need for a double confirmation procedure (email with a link to confirm) – I think most of this only applies to companies and Inés is an individual
• https://gdprinfo.eu/es/es-article-2 

• Legal possibility of 2 data handlers

• One not being the owner

• Data transfer between the EU and the UK

• @Ines where do you have your site hosted?

• Possibility of not showing cookie disclaimer to visitors accessing via URL different than the tracking one
• Is it data analytics
• We are only processing aggregated data and we need to mention that explicitly, in addition that only the aggregated is being shared

• Specify that we would not have any possible mean to denaonymize
• EU-focused data and privacy,When collecting data, Google Analytics 4 does not log or store IP addresses.        Analytics drops any IP addresses that it collects from EU users before logging that data via EU domains and servers. https://support.google.com/analytics/answer/12017362?hl=en