Privacy Policy

Introduction

The purpose of this privacy policy is to ensure that all subscribers and users of services at VIDISPINE org. No. 556784-3916 (hereafter “VIDISPINE”) is aware of how personal data is being processed by VIDISPINE as a personal data controller.

VIDISPINE certifies that all personal data processing is accurate, legal, transparent and in accordance with applicable data protection legislation, specifically regarding the EU General Data Protection Regulation (GDPR). VIDISPINE is continuously working to protect and safeguard their subscribers’ integrity through adequate security measures.

Which categories of personal data are being processed?

  • First name and surname.
  • E-mail.

Why are personal data being processed?

Purpose of the processing

Personal data are processed through VIDISPINE’s newsletter where we update our existing and potential subscribers about our clients including news and product information.

VIDISPINE may also use information such as clicked links, email interactions and web interactions to personalize future email distributions.

The lawfulness of the processing is based on 1) the existing subscriber’s or potential subscriber’s given consent to the specific purpose of receiving newsletters regarding the above-mentioned content or 2) the processing is necessary for VIDISPINE for the legitimate interest of marketing their clients (the so-called direct marketing purposes as expressed in Recital 47 GDPR) or 3) the processing is required due to contractual necessity so that VIDISPINE can fulfill its obligations with regards to error and maintenance management and other product support functions.

How long is the personal data stored?

Personal data is stored and processed on a regular basis during the period in which the subscriber has given his/her consent to receive newsletters from VIDISPINE. VIDISPINE ensures that a new consent is obtained from the existing or potential subscribers. For processing of personal data based on the necessity and legitimate interest of VIDISPINE, a new assessment will be taken once (1) third year to determine if it continuously constitutes a necessity and legitimate interest for VIDISPINE.

The personal data will be deleted if the consent from the subscriber is withdrawn or, in applicable cases, the processing of personal data undertaken by VIDISPINE is not considered necessary nor does it constitute a legitimate interest, or the subscriber object to further processing of his/her personal data.

Note that even if a consent is withdrawn or the processing of personal data for VIDISPINE does not constitute a legitimate interest, VIDISPINE may continue to process the personal data if doing so is required under applicable legislation.

Who has access to my personal information?

In addition to VIDISPINE, we utilize the services of a mail marketing platform by the name of MailChimp, whom are working on behalf of VIDISPINE. MailChimp may access the personal data that are being processed by VIDISPINE. VIDISPINE concludes a data processing agreement with MailChimp in order to ensure that MailChimp treat your personal data with confidentiality, integrity and privacy and that the personal data will be deleted after the assignment is completed.

The VIDISPINE website includes 3rd party services that optimize user-friendliness and measure the reach of the website. Your access data is recorded and the usage behaviour is evaluated with the aid of analysis cookies.

Which rights do I have?

A request to use the following rights (a – e) shall be mailed to gdpr@vidispine.com. VIDISPINE will respond to the request as soon as possible, but no later than one (1) month after the request has been received.

a) Access

The subscriber is entitled to request access to the personal data processed by VIDISPINE. The information should be provided in writing, in an easily accessible form, using clear and plain language, and delivered free of charge. The exception to the first sentence is whether the request for personal data is unfounded or excessive.

b) Rectification

If personal data about the subscriber is incomplete or otherwise incorrect, VIDISPINE shall, upon request from the subscriber, rectify this personal data without unnecessary delay.

c) Erasure

If a consent is withdrawn or the subscriber object to further processing of the personal data, VIDISPINE shall without delay remove the personal data. The same applies if the personal data have been processed illegally or must be deleted to comply with legal obligations under Union law or under Swedish law.

d) Restriction
If VIDISPINE’s personal data is incorrect or illegal, the subscriber has the right to require VIDISPINE to limit the processing of the personal data. The same applies if VIDISPINE no longer needs the personal data, but the subscriber needs the personal data to determine, enforce or defend legal claims.

e) Data portability
The subscriber has a right to receive personal data concerning him/her in a structured, commonly used and machine-readable format based on the personal data submitted to VIDISPINE. VIDISPINE may not prevent a subscriber from transferring these personal data to another data controller than VIDISPINE.

Who do I contact if I have any questions about the data processing that is being undertaken by VIDISPINE?

If you have any questions about VIDISPINE’s processing of personal data, please contact VIDISPINE at gdpr@vidispine.com.

If you think that VIDISPINE is processing personal data in violation of GDPR or other laws relating to your personal data, you can always file a complaint to the supervisory authority within your country.

 

May 2018