Privacy Policy
This Privacy Policy explains how and why StoryStream collects and uses information about you, and your legal rights in relation to it. This Privacy Policy covers the use of personal information in connection with our website and all products and services offered by StoryStream.
StoryStream may change this Notice from time to time, due to changes in our business, technology, or the law, or any other reason. Please check this page from time to time to be informed of the latest changes.
Contents
1. Who is StoryStream
2. Categories, sources, purposes of processing, and legal basis for processing of personal data
3. Recipients and transfers of personal data
4. Retention periods
5. Your rights
6. Cookies
1. Who is StoryStream
StoryStream provides a technology platform that helps our customers collect and acquire rights to user-generated content contributed from their own customers or fans, and to interact with those end-users. In doing this StoryStream processes certain personal data on behalf of those customers – e.g. an individual’s social media handle or name and email address depending on the means of communication used by each customer.
In these cases, the “data controller” (the entity that decides on the purposes of the data processing and ways in which it is processed) is our customer, and StoryStream is a “data processor” that processes data on behalf of and on the instructions of that customer. In this Privacy Policy, we set out general information about StoryStream’s data processing, but you should also consult the relevant data controller who uses or has asked for rights to use your content for further details.
For other data processing activities, e.g. relating to data collected from staff working for our customers and suppliers, or visitors to our website, StoryStream is the data controller.
For any question or request relating to personal data processing., StoryStream can be contacted at:
Qubeeo Limited (trading as StoryStream)
38-39 West Street
Brighton BN1 2RE, UK
For staff of customers: customersuccess@storystream.ai
For other individuals: hello@storystream.ai
2. Categories, sources, purposes of processing, and legal basis for processing of personal data
| Data | Categories | Source | Purpose of processing | Legal Basis | Comments |
|---|---|---|---|---|---|
| End-User social media data |
|
Data is obtained from social media networks or from customers | To provide content curation and rights management services to StoryStream customers | StoryStream monitors and selects social media posts as this processing is necessary for our legitimate interests and those of our customers in obtaining and using user-generated content for promotional purposes
The legal basis for any additional use will be decided by each customer – this will often be based on your consent, or that the processing is necessary for the customer’s legitimate interests |
We only process information that users have made public on their social media profiles
Any StoryStream customer who contacts you regarding use of your content can provide additional information |
| End-User chats |
|
Data is obtained directly from end users | To enable participation in live chats or other online events organised by StoryStream customers | StoryStream processes this data as a processor for our customer who is the data controller
The legal basis for this processing will be decided by each customer |
Where we manage an online event for a customer that includes the ability for you to chat with the customer, we will process this data as instructed by that customer
For further information, you should contact the relevant StoryStream customer |
| Platform Management | StoryStream processes data to allow access to and measure usage of our products by customers’ users:
|
|
|
Necessary for our legitimate interests in operating and improving our services | This data relates to customer’s secure access to and usage of our platform and is used for no other purpose |
| Commercial Contacts Data | StoryStream will process data about the staff and representatives of customers or suppliers (or potential customers or suppliers) media or PR contacts and other business contacts, e.g.:
|
This is obtained directly from you or from your employer, or in some cases (such as for business development) from public sources such as trade shows or professional networking |
|
For the performance of our contracts with our customers and suppliers
That it is necessary for our legitimate business interests To comply with StoryStream’s legal obligations |
This information relates to your business life and business data and so has minimal privacy impact |
| Visitors to our website |
|
From visitors’ browsers or devices
From website contact forms or public contact addresses |
|
That it is necessary for our legitimate interests in operating and promoting our business | You do not have to provide any data to browse our website. However, this data processing is typical for almost all websites, does not allow us to identify or contact you (except where you voluntarily provide details, subscribe to a service, or request a contact). You are able to change your cookie consents at any time as set out in our Cookie Policy (although some functionality of the website may then not work fully as intended) |
| Visitors to our StoryBoards hosted on clients’ websites and media properties |
|
From visitors’ browsers or networks |
|
That it is necessary for our legitimate interests and those of our customers in understanding engagement with StoryStream content | Our Measure Endpoint uses this data for measurement purposes only. All data collected is anonymized. This activity uses data from visitors’ ISPs or sent by their browser and no cookies or other tracking technologies are used |
3. Recipients and transfers of personal data
StoryStream is based in the UK and your personal information may be stored and processed by us in the UK or with Amazon Web Services in Ireland.
We may disclose personal information to the following categories of third parties:
-
-
- Our customers as part of our services (e.g. where we curate and select content or conversations, or provide analyses and insights); and
- Other organizations that provide services in support of our services and business such as:
- Providers of IT-related services (e.g. data storage, content delivery, chat enablement and storage, website development, hosting, management, or maintenance);
- Data analytics providers;
- Marketing or administrative services (e.g. sending out newsletters or surveys); or
- Accounting, legal, compliance, insurance or banking service providers.
-
These service providers process personal data on StoryStream’s behalf, but our contracts with them oblige them to meet data protection standards as strict as those that apply to us, and not to use your data for any other purpose.
Where they are not based in the UK, the EU or the European Economic Area, or other countries that are officially regarded as having adequate data protection laws, then this will be done only on the basis of legal safeguards aimed at ensuring that your data is kept just as secure as under GDPR rules. These may include standard contractual clauses for data exports as issued by the UK Information Commissioner or the European Commission. A copy of such safeguards may be available from us if we receive a valid request.
In the event of merger, acquisition, or any form of sale of some or all of our assets, personal information held by us may be transferred to the buyer.
If we receive a request for personal information from a government, regulator, security services or police force, we would normally comply with such request.
As per our Platform Terms and Conditions, the Customer acknowledges that the supply of any social network service or Content via or in connection with the Platform shall also be subject to the terms and conditions of such social network’s applicable service terms in force at the material time, which Customer undertakes to comply with, including (as at the Effective Date) without limitation:
(a) X Terms of Service available at https://twitter.com/tos
(b) Facebook Terms of Service available at https://www.facebook.com/terms
(c) Instagram Terms of Service available at https://help.instagram.com/581066165581870
(d) We use YouTube API Services – YouTube Terms of Service available https://www.youtube.com/t/terms
(e) Google privacy policy available at https://policies.google.com/privacy
(f) Tiktok Terms of Service available at https://www.tiktok.com/legal/terms-ofservice?lang=en
4. Retention periods
We only retain data for as long as necessary for the purpose for which the data was collected.
Personal data processed on behalf of our customers is stored only during the term of our contracts with them and then permanently deleted. Where our customers also store data in their own systems, then they may have different retention periods.
We may retain business contact data for at least the time that you or your organization has an account or agreement with us. If you have subscribed for a newsletter or other information, we will keep your contact details until you unsubscribe.
We keep data relating to customer or supplier contracts for at least the applicable legal limitation period in order to be in a position to resolve any claims. We may also keep data for longer periods where required for accounting, tax or legal reasons (in which case data use will be limited to such purposes).
5. Your rights
Depending on where you are located, then applicable data protection and privacy laws grant you various rights, which may include the following:
– to access your personal data;
– to ask us to rectify mistakes in your personal data;
– to have personal data concerning you deleted (“the right to be forgotten”);
– to take away personal data which you have provided to us (“portability”);
– to object to processing of your personal data for direct marketing or for certain other purposes;
– to restrict our processing of your personal data in certain circumstances;
– to opt out of the sale or sharing of your data (although StoryStream does not “sell” or “share” your personal data as defined under US state privacy laws);
– to limit use of sensitive information to necessary uses; and
– not to be discriminated against based upon your exercise of any of your legal rights relating to your personal data.
If our data processing is based on your consent, then you can always withdraw that consent (but any processing that took place before withdrawal will still be legal).
If we process any of your social media content and you wish to exercise any of your legal rights, please use the contact details in Section 1 above, and provide the following information:
– the social platform the content was published on
– the contributor’s username or handle
– the content format and a brief description
– the date of posting.
In appropriate cases, we may ask for verification of your identity in order to process your request.
For deletion requests, where we process data on our own behalf we aim to process them as soon as possible and normally within 3 working days. Where we hold data as a data processor or service provider on behalf of a customer then we will pass your request on to them for their consideration and action.
If you believe that we have not respected your rights, then you also have a right to make a complaint to the data protection Supervisory Authority in your country.
We do not knowingly collect personal information from children under 13. If you believe that we might have any information from or about a child under 13, please contact us as indicated above.
6. Cookies
Our website may use cookies to recognise returning visitors, and enhance its functionality. For further information, please refer to our Cookies Policy.
Last updated: June 2024