Craig's Setup Shop

Privacy declaration

1) Information about collection personal data and information of users

1.1 We are happy to have you our website and we thank you for visiting it. In the following statement, we would like to inform you on the personal data we collect so you can effectively use the site and all of its features. The personal data collected is what makes you identifiable to us and for you to be able to access our site and the content found within.

1.2 The party responsible for all data processing is Craig Williams, e-mail: craigawilliams1989@gmail.com. The person responsible for processing the data is the legal entity that decides the purposes and means of personal data collected and utilized for various means.

1.3 This website uses SSL/TLS encryption to secure your personal data and other important and private data (for example your subscription). You can see that this website uses SSL/TLS by a green lock in the status bar and the "https://" in front of the website URL.

2) Data collection by visiting the website

Data collection is performed via informational usage of the website, which simply means that when you're not signed in to the service, or sending us data in any other form, we only store data that the browser is actively sending to us (for example server log files). We only store this data so we can make the displaying of this website and all the information that it contains possible. Here is the information collected in this manner:

Visited the website
Date and time of the visit
Amount of sent bytes
Source from where youaccessed our site
Browser used (Edge, Chrome, Firefox, Opera, etc.)
Operating System used
IP Adress (anonymized)

3) Cookies

To improve the website, we use cookies on some parts of the website. Cookies are small text files that are stored locally on your PC. Some of those cookies will be deleted after you close your browser (called "sessions"). Some cookies will stay on your computer to guarantee usage by us or third parties (cookies by third parties) to re-identify you after you visit the website again. If cookies were set, they might process specific personal user information like browser or location data or your IP address. Persistent cookies are automatically deleted after a given time, which could differ from cookie to cookie.

Please set up your browser so you are informed of when cookies are being set, so you can decide yourself if you would like to set them or not. Every browser manages these settings differently, and here are some links to different web browsers cookie settings to help you manage your cookies:

Internet Explorer
Mozilla Firefox
Google Chrome
Apple Safari

Please note that the functionality of this website might not be fully given by disabling cookies.

4) Data processing by opening an account

Your data will be saved and processed by your intent to create an account on our platform. The type of data that is saved is visible in the specific form that is submitted or can be read below. We will save your data in order to maintain your subscription on our website. Due to legal reasons, we are required to store this information indefinitely. A deletion of your account is possible at any time.

5) Data processing by ordering

5.1 Usage of Payment providers

- Paypal
By paying with PayPal we are giving your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg ("PayPal"),. We only send them the data required for them to process your payment with our service.

PayPal may check your credit score. The data may be sent to be checked further. PayPal uses this data to decide if the customer is allowed to use the selected payment method in PayPal. The credit score might have score values. If score values take part in their decision, it is based on mathematical statistical processes. For more information please read PayPal’s privacy statement, which may be found here: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You can withdraw your data with a message to PayPal at any point. PayPal might still be entitled to keep processing your data for legal reasons.

6) Usage of social media: YouTube

This website uses the embed function of YouTube to play videos of the provider “YouTube“, owned by Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google“).

We are using the extended privacy mode, which might only store user data by playing the video. If a video is being played, the provider sets cookies to collect data about user behavior. YouTube might use this for video statistics to improve ease or to prevent illegal behavior. If you are signed into Google, then your data is being connected to your Google account if you watch a video. If you do not wish for this to occur, you will need to sign out of Google before watching any of our videos. Google stores your data (even for users that are not signed in) as user profiles and processes them. This process happens based on interest by Google in order to show personalized (targeted) advertisements. You have the right to contradict the creation of user profiles, however you must contact YouTube directly regarding this process.

Independent of the playing of the video, there will be a connection to the Google-network “DoubleClick“, which we have no influence on.

Google LLC which sits in the USA is Privacy Shield certified, which guarantees the following of European privacy laws.

More information about your privacy over “YouTube“ is in the following privacy statement: https://www.google.de/intl/de/policies/privacy

7) User rights

7.1 The current data protection law gives the customer the following rights:

Right of Information: You have the right to always know, what and how we process and store your data. You also always have the right to correct the data, deletion and limitation in processing, contradiction of processing as well as complaint at a supervisory authority.
Right to correct data. You have the right to always correct incorrect or not complete data.
Right to delete data. You have the right to always delete your data, this excludes your payment history because of other legal reasons.
Right to inform: If you used your right to correct, delete or limit the processing of your data, he is forced to correct/delete/limit the data at every third party, except if this is impossible. You have the right to know which third party the service uses.
Right to export your data: You have the right to export all your data on our service in a readable format or to move the data to a third party, if possible.
Right to reject already given permissions: You have the right to reject a permission you have given before. In case of a revocation, your data will be deleted immediately, in case your data is not needed for legal processing.
Right to complain: If you believe this service infringes the GDPR, you have the right to use complain at a supervisory authority.

7.2 RIGHT TO CONTRADICT

IF WE PROCESS YOUR DATA BASED ON OUR INTEREST, YOU WILL ALWAYS HAVE THE RIGHT, BECAUSE OF REASONS THAT EXIST BECAUSE OF A SPECIAL SITUATION, TO CONTRADICT THIS FOR FUTURE PROCESSING.
IF YOU USE YOUR RIGHT, WE WILL IMMEDIATELY STOP PROCESSING THE DATA. FURTHER PROCESSING MIGHT HAPPEN BECAUSE OF ILLEGAL BEHAVIOR.

8) Length of stored data

Your data will be stored indefinitely for a few reasons. First, not storing it would prevent you from using the service to its full extent. Secondly, for legal reasons on our side related to processing subscription payments on the website. You can always delete your data, although your payment history would still exist because due to legal reasons.

What are we storing?

Data	Why?
Your Discord ID	To identify you, we cannot use this info for other reason than to identify you.
Your E-Mail	We need your email for features like team invitations
Your discord name	Easier to find your name
Remember & Refresh Token	Needed to verify you through the Discord API
Downloads	How many files you downloaded in the past 30 days. Gets reset every 1st of the Month.
Is in Discord, is Subscribed, is subscribed over Twitch, is Admin	Boolean values that show us if you are already subscribed over Twitch or have a role that gives you access in Discord.
Account creation Date and last updated date	Simple subscription metrics to track site usage.
Subscription status	In case you subscribed over the website, your subscription length will be stored by us.
Payment History	We are storing your payment history for legal reasons.
Your iRacing name	We need it to identify individuals that share the setups outside of the subscriber base, therefore breaching the rules of this service. Your data will stay safe and anonymized upon request.
Your Twitch username and account ID	If you decide to connect your twitch account to Discord, we will receive your twitch username as well as your unique identification number from Twitch, to associate if you have subscribed over Twitch or not.

What happens if the service encounters a breach of security?

We are doing our very best minimize any chance of our security being breached by implementing the latest security measures available to us. In the unlikely case of a breach occurring, all the hacker will have access to will be your email and your API access key to Discord. In the unlikely event of this occurring, you will need to go to Discord, find the "Craig’s Setup Shop" Discord server and delete it, and then these authentication tokens will be immediately invalidated. We do not store any accessing tokens for Twitch, so you're on the save side there. We will immediately notify you of any breach as soon as we know about it ourselves.

What third parties can receive my data?

We will never sell your data. Unfortunately there are some services that we need in order run successfully operate this website. We are currently utilizing Sentry.io, which logs your user ID in case you receive an error on our website. Sentry.io is unable to do anything else with the user ID information that it logs.