|Simple Words Version
Data Controller. All communications regarding the processing of your personal data shall be directed to us on email [email protected].
|The UPF is responsible for the personal data collected on Directory.Audio website.
|We expressly collect the data in the Registration webforms, data related to the sound and date when you download one, data and metadata about the sound when you upload one, your contribution to the community, the amount of your donation and your username, and data related to you navigation on our website.
Prohibited data. In all events, it is forbidden to submit to us or upload to the Services any data that contains sensitive personal data that is relative to identifiable persons such as: your and or third party’s racial origin, membership in a trade union, religion, ideology and sexual life, your and or third party’s health; or your and or third party’s relative to the commission of criminal offences or proceedings and associated penalties or fines.
|You must NOT upload sensitive data.
Data accuracy. It is important that the personal data we hold about you is accurate and current. You are responsible for the accuracy of the information you provide to us and you are expected to update any information you provide us with.
|You must keep the data you provide us updated.
Data use. We use your personal data to:
|We use your data only for the uses mentioned.
Legal basis. The principal legal basis of the processing activities described above are:
|We process your data on the basis of different legal basis depending on the purpose of the data use (performance of a contract, legitimate interest, your consent when its required and the compliance with a legal obligation we are subject to).
We keep your data confidential and shall disclose them only in compliance with a legal obligation or to deliver our Service.
If you log in through a third-party website, you will be revealing your user email address to the developer of that website.
Subcontracting. We may provide access to User Data to a subcontracted processor if we reasonably consider such access and processing necessary to the performance of the Services. In the event of such access and before the access takes place, we shall ensure that an agreement with the third party is in place which is sufficient to require it to process personal data in accordance with the applicable provisions of this Agreement and any applicable law. In particular, you authorise us to subcontract to the third parties mentioned in the following section on international transfers.
We may provide access to your data to third parties in order to deliver our Service.
Those third parties process your data according to law and our Agreement with them.
International transfers. We use third-party technological services for the provision of Services, whose providers may process Account Data and User Data collected in the course of providing us their services indicated below, as sub-processors. These entities may be in jurisdictions that generally don’t provide adequate safeguards in relation to the processing of personal data. However, we have entered into contracts with such entities that do include such safeguards, as required by the applicable data protection laws.
You specifically authorize us to subcontract the following services and the corresponding transfer of User Data to the entities and countries listed below:
These companies are in the USA, territory which does not generally provide adequate safeguards in relation to data processing, but we have entered contracts with us providing the appropriate safeguards according to law, such as the so called “standard contractual clauses” approved by the European Commission.
|We use the mentioned third-party services in order to provide our Service. Such third-party service providers are in the USA but provide appropriate safeguards.
Data retention. We will retain the personal data submitted through registration and collected during the course of the Services for the term of your account with us. If your Account is deactivated either by you or us, all front-end (site) data related to you are anonymized, though we retain a pseudonymous user identifier to maintain database integrity. We thereafter retain personal data for legal or administrative reasons as well, such as defending our responsibility and complying with mandatory legal obligations, subject to applicable law. Your sounds are available on the site (under the corresponding license) until removed.
|We keep your data as long as you have a Directory.Audio account. When your account is deleted, your data is anonymized.
Security measures. We implement security measures and personal data protection schemes as required by law to maintain the confidentiality and integrity of your data and protection against unauthorised access, modification or destruction.
|We apply security measures to keep your data confidential.
Your rights. Under data protection laws, you have the following rights in relation to your personal data: request access to your personal data (commonly known as a "data subject access request"); request correction of the personal data that we hold about you; request erasure of your personal data; object to processing of your personal data where we are relying on a legitimate interest; request the restriction of processing of your personal data; request the transfer of your personal data to you or to a third party (right to data portability); withdraw consent at any time where we are relying on consent to process your personal data.
The aforementioned rights may be effective by contacting us at [email protected]. We may require that you include a digital copy of your identification document such as your ID card or passport.
You may access your data, correct or erase them, object to their processing, request the restriction of processing or the transfer to you or a third party, and withdraw your consent to the processing by contacting us.
You can make a complaint to the Catalan Data Protection Authority as well.