Privacy Policy

1. GENERAL INFORMATION

The FeelTheArt® mobile application is provided by LIVDEO SAS, a company with headquarters in France. Livdeo provides software solutions for cultural institutions and tourism. We provide this privacy policy to inform you of how your data collected on FeelTheArt® is managed.

2. DATA CONTROLLER

The controller under data protection law is: LIVDEO SAS 2 Grande Rue 70190 Bussières – France.

Phone: (+33)9 72 49 05 46.

Commercial register entry number: 80540701200022

Data Protection Officer contact: [email protected].

3. ACCESS LOGS (“SERVER ACCESS LOGS”)

Each access to our App automatically is logged on our servers. This data does not allow for inferences about the identity of an individual.

Without this data, it would, in some cases, be technically impossible to deliver or display the software’s content. Also, processing this data is necessary under security aspects, particularly for access, input, transfer, and storage control. Furthermore, we may use anonymous information for statistical purposes and service optimization. Besides, the log files can be checked and analyzed retrospectively when the software’s unlawful use is suspected. The legal basis for this is Article 6.1.f of the GDPR.

Generally, data such as the operating system, the IP address, and the timestamp of the access to the software are collected. The scope of those logging means does not surpass the standard log scope of any other mobile App.

These logs are collected for a period of up to 30 days. There is no right to object to this.

4. ERROR LOGS (“SERVER ERROR LOGS”)

The error logs are produced to identify and fix bugs. This is necessary to ensure that we can respond as quickly as possible to any problems with displaying and fulfilling content (legitimate interest). As a rule, this data is anonymized and does not allow for deductions about a person’s identity. The legal basis for this is Article 6.1.f of the GDPR.

When an error report occurs, general data such as the operating system, the IP address, and the timestamp upon the existence of the respective error message and/or specification is collected.

The error logs are collected for a period of up to 30 days. There is no right to oppose this.

5. USE OF THIRD-PARTY PROVIDER TOOLS

To provide and improve our services, we are using the following third-party providers’ tools and services, which may also process personal data. The third-party providers have been chosen diligently and in line with the GDPR requirements.

A. GOOGLE

Unless otherwise stated in the data privacy policy, the Google services operator mentioned here is Google Ireland Limited, Google Building Gordon House, 4 Barrow St., Dublin, D04 E5W5, Ireland.

i. YouTube

FeelTheArt® might use the service “YouTube” to insert videos into the page. The software required for this purpose is operated by the company Google Ireland Limited Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

The integration of YouTube content is carried out in “extended privacy mode”. This ensures that YouTube does not initially store cookies on your device. As a result, YouTube no longer holds any information about visitors until you watch the video.

When you click on the video, your IP address is transmitted to YouTube, which tells YouTube that you have watched the video. If you are logged in to YouTube, this information is also associated with your account. This can be prevented by logging out of YouTube before viewing the video.

Accordingly, the following data can be collected and processed:

IP Addresses Referrer URL Device Information Watched videos

The legal basis of the processing is your consent, according to Art. 6.1.a GDPR. If you do not want YouTube to collect and process the data mentioned above, you can deny your consent or revoke it at any time with effect for the future.

The data will be stored for as long as it is necessary for processing purposes. The data will be removed when the processing is no longer required.

As part of the processing, the data may be carried to the following recipients besides Google Ireland Limited:

Google LLC. Alphabet Inc.

Data may be transferred to the USA as part of the processing by YouTube. The security of the transmission is ensured by so-called standard contractual clauses, which guarantee that personal data processing is subject to a security level that corresponds to the GDPR. If the standard contractual clauses are insufficient to ensure an adequate security level, we will obtain your consent following Art. 491a GDPR before the data processing.

ii. Firebase Analytics

Our software uses Firebase Analytics to enhance user experience while they use our mobile application. Please refer to this website to read about their privacy policy and how your data will be securely shared with them : https://firebase.google.com/support/privacy.

B. AMAZON WEB SERVICE

We use Amazon Web Services (AWS) to store our customer data. While using AWS services, we retain the entire ownership of the data we may share with them. This includes :

What we choose to store or process using AWS services

Which AWS services we use with our content

The Region(s) where our content is stored

The type of security of our content : masked, anonymized, encrypted.

Who has access to our content (within our Teams) and how those access rights are granted, managed, revoked.

You can read more about AWS Privacy Policy by clicking here : https://aws.amazon.com/compliance/data-privacy-faq/?nc1=h_ls

C. POSTHOG

We use PostHog to improve the user experience when using our mobile application. PostHog is a new kind of open-source analytics solution, fully GDPR compliant, and puts privacy first. Please read their privacy policy by clicking here : https://posthog.com/privacy.

D. COUNT.LY

Count.ly is used to understand and improve our user journey, when it comes to transactions within the App. Please read their privacy policy here : https://count.ly/legal/privacy-policy

6. FORMS AND CHAT SERVICES

Note: If you contact us using the contact forms, personal data may be transferred to service providers in third countries. These third countries do not have an adequate level of data protection. If data is transferred to the United States, there is a risk that the US authorities will process your data for monitoring and surveillance purposes without any legal remedies being available to you. So-called standard contractual clauses regularly ensure the transfer security. Suppose the standard contractual clauses and binding corporate rules are insufficient to establish an adequate level of protection. In that case, your approval of this privacy policy will be considered to be consent within the meaning of Art. 49.1.a GDPR, which justifies data transfer to unsafe third countries.

NEWSLETTERS

If you subscribe to our newsletters, then we store your email address and use it to send you newsletters. Your email address is not made public or disclosed to third parties.

Collected data: Email address, first name, last name, title, job title Purpose of use: Sending of the newsletter requested Storage period: For the newsletter, the data are stored as long as it is expected that a newsletter will be sent and as long as you have not opposed to the use of your data. Legal basis: Art. 6.1.a GDPR – consent Revocation: You can unsubscribe from our newsletter at any time using a link included in each issue. We will then delete your email address, first name, last name, title, job title, company name from our distribution list. As an alternative, you can also unsubscribe from our newsletter at any time by sending an email to [email protected].

7. RIGHTS OF DATA SUBJECTS

If the company LIVDEO SAS processes personal data as data controller, then you, as the data subject, have certain rights derived from Chapter III GDPR, which depend on the legal basis and purpose of the processing. These rights include, when relevant, especially the right to information (Art. 15 GDPR), the right to rectification (Art. 16 GDPR), the right to cancellation (Art. 17 GDPR), the right to restriction of processing (Art. 18 GDPR), the right to data portability (Art. 20 GDPR), and the right to objection (Art. 21 GDPR). If the personal data processing is based on your consent, you have the right, according to Art. 7 III GDPR, to revoke this consent granted under data protection law.

Please contact the Data Protection Officer of LIVDEO SAS (see Section 2) to assert your rights as a data subject regarding the data processed for the operation of FeelTheArt®. Please be aware that you must contact the data controller directly to assert your rights as a data subject derived from the processing by us as data processors of our customers. We reserve the right not to respond to corresponding queries or to redirect them to the related companies.

If LIVDEO SAS as the controller processes personal data, you as the data subject have certain rights under Chapter III of the EU General Data Protection Regulation (GDPR), depending on the legal basis and the purpose of the processing, in particular, the right of access (Article 15 of the GDPR) and the rights to rectification Article 16 of the GDPR), erasure (Article 17 of the GDPR), restriction of processing (Article 18 of the GDPR), and data portability (article 20 of the GDPR), as well as the right to object (article 21 of the GDPR). If the personal data is processed with your consent, you are entitled to withdraw this consent under article 7 III of the GDPR.

Please contact the data protection officer of LIVDEO SAS to assert your rights regarding the data processed for the operation of this software (see section 2). Please note that you must address yourself exclusively to the controller to assert your rights as a data subject from the processing of personal data by LIVDEO SAS as a sub-processor on behalf of our customers. We reserve the right not to answer such questions or pass them on to this data processing controller.

8. RIGHT TO LODGE A COMPLAINT

We would like to inform you that according to article 77 GDPR, you are entitled to complain to the supervisory authority if you believe that your data have been processed illegitimately by us.

9. RIGHT TO OBJECT

You can object to using your data by using the appropriate opt-out or contacting LIVDEO SAS by email at [email protected].

10. FINAL CLAUSES

LIVDEO SAS reserves the right to adjust this data privacy policy at any point to ensure that it is in line with the current legal requirements or accommodate changes in the services offered. For example, when new services are introduced, modifications are made to FeelTheArt®. In this case, the latest data privacy statement applies to any later visit to our software.

 

FeelTheArt is a product by Livdeo