Revision Date: June,17th 2020
WHAT INFORMATION SOUNDBITE COLLECTS FROM YOU
Soundbite collects only the information required to provide products and services to you. The amount of information provided by you and collected by Soundbite depends on the circumstances. Soundbite may collect two (2) types of information about you: Personal and Non-Personal.
1.“Personal Information.” Personal Information means any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household, or is otherwise defined as personal information under applicable law. Soundbite may collect Personal Information when you use the Soundbite Properties including, without limitation, setting up account information, filling out surveys, corresponding with Soundbite, or otherwise volunteering information about yourself.
2.“Non-Personal Information.” Non-Personal Information refers to information that does not meet the definition of Personal Information above. Soundbite may collect Non-Personal Information through any of the methods discussed above as well as automatically through use of industry standard technologies described further below.
HOW SOUNDBITE COLLECTS YOUR INFORMATION
1. Registration. Prior to using one or more of the Soundbite Properties, Soundbite may require you to provide us with certain Personal Information and Non-Personal Information to create an account (“Account”) or to enable features or functionality of the Soundbite Properties.
2. Users. Soundbite may gather Personal Information about organizational representatives via various methods (phone, email, online forms, in-person meetings) but only if such Personal Information is submitted voluntarily. Soundbite may use such Personal Information for sales, marketing, and support of the Soundbite Properties. This Personal Information is never shared with third parties other than Third Party Service Providers utilized by a User in connection with Soundbite Services.
3. User communications. When you send email or other communications to us, we may retain those communications in order to process your inquiries, respond to your requests and improve the Soundbite Properties.
4. Payment Information. When creating an Account, for certain Soundbite Properties, or when you make online purchases, you may be asked to provide information, which may include your payment instrument number (e.g., credit card), your name and billing address, and the security code associated with your payment instrument (e.g., the CSV) and other financial data (“Payment Information”). We use Payment Information to complete transactions, as well as for the detection and prevention of fraud. When you provide Payment Information while authenticated, we will store that data to help you complete future transactions without your having to provide the information again. We do not, however, retain the security code associated with your payment instrument (e.g., the CSV) in this manner. To remove or modify Payment Information, please contact us. After you close your account or remove Payment Information, however, we may retain your Payment Information for as long as reasonably necessary to complete your existing transaction and for the detection and prevention.
5. Information Collected Through Technology. Soundbite automatically collects and receives certain information from your computer or mobile device, including the activities you perform on the Soundbite Site, the Soundbite Software and the Soundbite Services, the type of hardware and software you are using (for example, your operating system or browser), and information obtained from cookies (see below). If you have an Account, we may link this Non-Personal Information to your Account to better understand your needs and the needs of Users in the aggregate, diagnose problems, analyze trends, provide services, improve the features and usability of the Soundbite Properties, and better understand and market to our customers and Users.
6. We use technology to automatically gather information by the following methods:
– IP Address. You may visit many areas of the Soundbite Site anonymously without the need to become a registered User. Even in such cases, Soundbite may collect IP addresses automatically. An IP address is a number that is automatically assigned to your computer whenever you begin services with an Internet services provider. Each time you access the Soundbite Site and each time you request one of the pages of the Soundbite Site, the server logs your IP address.
– Web Beacons. Web beacons are small pieces of data that are embedded in web pages and emails. Soundbite may use these technical methods in HTML emails that Soundbite sends to Users to determine whether they have opened those emails and/or clicked on links in those emails. The information from use of these technical methods may be collected in a form that is Personal Information.
– Tracking Content Usage. If you use the Soundbite Services and you post audio visual materials including, without limitation, videos, links, logos, artwork, graphics, pictures, advertisements, sound and other related intellectual property contained in such materials (collectively, “Content”) to your website or to a third party website, Soundbite tracks and captures information associated with User accounts and the use of Content by those that access your Content.
7. Information You Provide About a Third Party. You may have the opportunity to communicate with others from the Soundbite Properties, such as by sending an invitation to a friend. If you choose to take advantage of this functionality, we may ask you to provide us with certain information about the person with whom you wish to communicate (e.g., name, email address, etc.). Soundbite collects such information for the purposes of facilitating the requested communication, which may contain a specific promotional message from you (e.g., an invitation to consume content). Unless we explicitly say otherwise, Soundbite will not use this information for other marketing purposes without first obtaining consent from the person to whom the relevant information pertains. Please be aware that when you use any invitation functionality on the Soundbite Properties, your email address, name or username, and message may be included in the communication sent to your addressee(s).
HOW SOUNDBITE USES YOUR INFORMATION
1. Personal Information. Soundbite identifies the purpose for which your Personal Information is collected and will be used or disclosed. If that purpose is not listed below, we will identify any additional purposes for which we will collect your Personal Information, before or at the time of collection, and we will obtain your consent to collect, use or disclose your Personal Information for such additional purpose(s).
2. By using the Soundbite Properties, you will be deemed to consent to our use of your Personal Information for the purposes of:
– communicating with you generally;
– processing your purchases;
– processing and keeping track of transactions and reporting back to you;
– protecting against fraud or error;
– providing information or services requested by you;
– administering and managing the Soundbite Properties and our business operations;
– personalizing your experience with the Soundbite Site, as well as evaluating statistics on Soundbite Site activity;
– performing statistical analyses of your behavior and characteristics, in order to measure interest in and use of the various sections of the Soundbite Site;
– communicating with you on other websites;
– email gating;
– delivery of content and information to Third Party Services Providers;
– complying with legal and governmental requirements; and/or
– fulfilling any other purpose that would be reasonably apparent to the average person at the time that we collect it.
3. Users utilize Soundbite Properties to manage and deliver Content to consumers. As part of this process, Soundbite may collect Personal Information from you.
4. Otherwise, we will obtain your express consent (by verbal, written or electronic agreement) to collect, use or disclose your Personal Information. You can change your consent preferences at any time by contacting us (see the “How to Access, Change and Erase Your Personal Information” section below).
5. Soundbite extends the rights granted to “data subjects” under the General Data Protection Regulation (Regulation (EU) 2016/679) (the “GDPR”) to all of its Users. Consequently, you have the right to withdraw your consent to our processing of your Personal Information at any time (if our processing is based on consent) and the right to object to our processing of your Personal Information (if processing is based on legitimate interests).
6. Non-Personal Information. Soundbite may use Non-Personal Information for the following purposes:
– System Administration: Soundbite may use Non-Personal Information for the purposes of system administration, assisting in diagnosing problems with Soundbite servers, monitoring Soundbite’s system performance and traffic on the Soundbite Properties and to gather broad demographic information about Soundbite Users.
HOW TO ACCESS, CHANGE AND ERASE YOUR PERSONAL INFORMATION
Upon request, Soundbite will allow Users to update or correct Personal Information previously submitted, but only to the extent such activities will not compromise privacy or security interests. Additionally, upon request, Soundbite will delete Personal Information from the database where such information is stored; however, it may be impossible to entirely delete a User’s entry without some residual information being retained due to the manner in which data backups are maintained. Requests to delete Personal Information may be submitted via our website contact form.
Users also have the right to receive their Personal Information from us in a structured, commonly used and machine-readable format, and the right to transmit their Personal Information to another controller without hindrance from us (data portability).
Soundbite may use your Personal Information to send you emails periodically listing promotions or events relating to the Soundbite Properties. You have the choice to opt-out of receiving such promotional emails by sending an email to firstname.lastname@example.org and/or following the instructions in such correspondence. Once Soundbite has processed your opt-out request, Soundbite will not send you promotional emails unless you opt back in to receiving such communications.
DISCLOSURE OF INFORMATION TO THIRD PARTIES
Except as described below, we do not sell, transfer or otherwise disclose, sell, trade, or otherwise transfer your Personal Information to outside parties. This statement does not include trusted third party service providers who assist us in administering and providing the Soundbite Properties or provide services to us. Examples include storing and managed Content, analyzing data, providing marketing assistance, integrations of Third Party Services such as CRM and MAP services, processing credit card payments, and providing customer service. These third party service providers will have access to Personal Information needed to perform their functions, but may not use it for other purposes, and they are subject to appropriate agreements with Soundbite and/or its Users to secure and protect the confidentiality of your Personal Information.
We may use service providers located outside of the United States, and, if applicable, your Personal Information may be processed and stored in other countries and therefore may be subject to disclosure under the laws of those countries. You explicitly consent and agree to such transfer, storing and/or processing of your Personal Information outside of the United States or other country in which you are located.
We may share Payment Information with third parties for purposes of fraud prevention or to process payment transactions.
We may also release your information when we believe release is appropriate to comply with the law, enforce our policies, or protect our or others’ rights, property or for safety. We may also provide non-Personal Information to other parties for marketing, advertising or other uses.
Information, including Personal Information, which we collect from Users and consumers, is considered to be a business asset. As a result, in the unlikely event that we go out of business, enter bankruptcy or if we are acquired as a result of a transaction such as a merger, acquisition or asset sale, your Personal Information may be disclosed or transferred to the third-party acquirer in connection with the transaction.
Lastly, we may provide Users with certain usage information directly related to Content that they make available through the Soundbite Properties. Such information may include who consumed a particular Content (if the consumer is logged into Soundbite), which Content of a particular User was consumed, and how many times a particular Content was consumed.
Under certain exceptional circumstances, Soundbite may have a legal duty or right to collect, use or disclose your Personal Information without your knowledge or consent. In accordance with applicable laws, We will not disclose any consumer information (which may include Personal Information) without your written consent, except where consumer information is required to be disclosed: (i) for billing or market operation purposes; (ii) for law enforcement purposes; or (iii) for the purpose of complying with a legal requirement.
When you participate in a Soundbite Project or Soundbite Enterprise account (as described in Soundbite’s Terms of Service), the organization administering such account may be able to (1) access information in and about the account, including your Personal Information; (2) disclose, restrict or access Content posted in connection with the account; and (3) control how the account is accessed or deleted. Such accounts and their use are also subject to the Soundbite Terms of Service accepted by the organization that established the Soundbite Project or Soundbite Enterprise account.
You consent to disclosure of your information for the above purposes.
SAFEGUARDING YOUR PERSONAL INFORMATION
Soundbite takes appropriate security measures to protect against unauthorized access, alteration, disclosure or destruction of Personal Information. These include, but are not limited to, internal reviews of: (a) Soundbite’s data collection; (b) storage and processing practices; (c) electronic security measures; and (d) physical security measures to guard against unauthorized access to systems where Soundbite stores Personal Information.
Unfortunately, no data transmission over the internet can be guaranteed to be 100% secure. As a result, while we are committed to protecting your Personal Information, we cannot ensure or warrant the security of any information you provide to us.
All Soundbite employees, contractors and agents who access Personal Information are bound by confidentiality obligations and may be subject to discipline, including termination and criminal prosecution or unauthorized use or disclosure of Personal Information.
Some or all of the Personal Information we collect may be stored or processed on servers located outside your jurisdiction of residence, whose data protection laws may differ from the jurisdiction in which you live. As a result, this information may be subject to access requests from governments, courts, or law enforcement in those jurisdictions according to laws in those jurisdictions.
RETENTION OF INFORMATION
CHILDREN AND STUDENTS
Soundbite takes the privacy of children and students extremely seriously. Personal information we collect through the Soundbite Services may be subject to the Children’s Online Privacy Protection Act (“COPPA”) and/or the Family Educational Rights and Privacy Act (“FERPA”).
COPPA Compliance. COPPA requires that operators of websites and online services that collect the personal information of children under 13 years of age (i) inform parents and legal guardians about their practices for collecting, using and disclosing such personal information and (ii) obtain verifiable consent from parents and legal guardians for doing so. We only collect personal information through the Soundbite Services from a child under 13 if that student’s school, school district or teacher has agreed to obtain parental consent for that child to use the Soundbite Services and disclose personal information to us for purposes of providing the Soundbite Services, or we have directly obtained such parental consent.
FERPA Compliance. FERPA protects personally identifiable information contained in students’ education records from unauthorized disclosure. Consistent with FERPA, we will only use education records, as defined under FERPA, for the purpose of providing agreed services to a school, school district or teacher. We will never share or sell FERPA-protected information, or use it for any other purposes, except as otherwise directed or permitted by the school, school district or teacher. If a parent or eligible student requests access to education records that are hosted on our servers, we will help facilitate such access.
EU AND SWISS PRIVACY SHIELD FRAMEWORKS
With respect to Personal Information received or transferred pursuant to the Privacy Shield Frameworks, Soundbite is subject to the regulatory and enforcement powers of the U.S. Federal Trade Commission.
Purposes of EU and Swiss Personal Data Collection and Use. We will only process EU and Swiss Personal Data in ways that are compatible with the purpose for which we collected the EU and Swiss Personal Data, or for purposes that the individual or entity providing the EU and Swiss Personal Data later authorizes.
Pursuant to the Privacy Shield Frameworks, EU and Swiss individuals have the right to obtain our confirmation of whether we maintain Personal Information relating to you in the United States. Upon request, we will provide you with access to the Personal Information that we hold about you. You may also may correct, amend, or delete the Personal Information we hold about you. An individual who seeks access, or who seeks to correct, amend, or delete inaccurate data transferred to the United States under Privacy Shield, should direct their query via the website contact form. If requested to remove data, we will respond within a reasonable timeframe.
We will provide an individual opt-out choice, or opt-in for sensitive data, before we share your data with third parties other than our agents, or before we use it for a purpose other than which it was originally collected or subsequently authorized. To request to limit the use and disclosure of your Personal Information, please submit a written request via our website.
In certain situations, we may be required to disclose Personal Information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
Soundbite’s accountability for Personal Information that it receives in the United States under the Privacy Shield and subsequently transfers to a third party is described in the Privacy Shield Principles. In particular, Soundbite remains responsible and liable under the Privacy Shield Principles if third-party agents that it engages to process the Personal Information on its behalf do so in a manner inconsistent with the Principles, unless Soundbite proves that it is not responsible for the event giving rise to the damage.
In compliance with the Privacy Shield Principles, Soundbite commits to resolve complaints about your privacy and our collection or use of your Personal Information transferred to the United States pursuant to Privacy Shield. European Union and Swiss individuals with Privacy Shield inquiries or complaints should first contact Soundbite by our website.
Soundbite has further committed to refer unresolved privacy complaints under the Privacy Shield Principles to an independent dispute resolution mechanism, the BBB EU PRIVACY SHIELD, operated by the Council of Better Business Bureaus. If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed, please visit www.bbb.org/EU-privacy-shield/for-eu-consumers for more information and to file a complaint. This service is provided free of charge to you.
Soundbite commits to cooperate with the EU data protection authorities (DPAs) and the Swiss Federal Data Protection and Information Commissioner (FDPIC) and comply with the advice given by such authorities with regard to human resources data transferred from the EU and/or Switzerland, as applicable, in the context of the employment relationship with Soundbite.
If your Privacy Shield complaint cannot be resolved through the above channels, under certain conditions, you may invoke binding arbitration for some residual claims not resolved by other redress mechanisms. See Privacy Shield Annex 1 at https://www.privacyshield.gov/article?id=ANNEX-I-introduction.
California law grants additional privacy rights to California residents. In particular, the California Consumer Privacy Act (CCPA) requires businesses to disclose, for the past 12 months, (i) the categories of personal information collected, (ii) the sources of the collected personal information, (iii) the purposes for which the collected personal information is used, (iv) the categories of personal information disclosed for a business purpose, and (v) the categories of any personal information sold. Soundbite provides these disclosures in the following table. Soundbite has not sold personal information in the past 12 months.
Sources of Collection: Website visits and registration for Soundbite Services
Purposes of Collection: To allow use of Soundbite Services and to enable Soundbite to communicate with you
Disclosures for a Business Purpose: To Soundbite service providers for the purpose of providing Soundbite Services to you
Category: Personal information categories listed in the California Customer Records statute
Sources of Collection: Registration for Soundbite Services
Purposes of Collection: Credit card information to permit payment for premium Soundbite Services
Disclosures for a Business Purpose: To Soundbite service providers to facilitate payment transactions
Category: Internet or other similar network activity
Sources of Collection: Your browsing and search history on the Soundbite Site
Purposes of Collection: To improve the visitor experience on the Soundbite Site, diagnose server problems and administer the Soundbite Site
Disclosures for a Business Purpose: To marketing specialist companies for the purpose of enhancing the Soundbite Site and improving the effectiveness of our advertising
California residents also have the rights described below. We will not discriminate against any California resident who exercises these rights.
Right to access/know. You may request from us a list of (i) the personal information that we have collected about you, and (ii) the categories of third parties to whom we have disclosed your personal information. You have the right to up to two (2) access requests each twelve (12) months.
Right to delete your personal information. You may request, at any time, that we delete your personal information.
You may contact us to exercise these rights via our website contact form. To ensure the privacy and protection of individuals, we are required to verify your identity or otherwise authenticate your request(s). Please note that, under the CCPA, we are not required to grant a request to access/know or a request to delete with respect to personal information obtained from you in your role as an employee, owner, director, officer or contractor of a company and within the context of Soundbite providing the Soundbite Services to such company.
THIRD PARTY WEBSITES AND SERVICES
The Soundbite may contain links to third party websites or services, including Third Party Services, (collectively, “Third Party Sources”) who may collect Personal Information and Non-Personal Information directly from you. Links to Third Party Sources are intended for convenience only. Third Party Sources are wholly independent from Soundbite. Third Party Source may have separate privacy policies and data collection practices, independent of Soundbite. Soundbite: (a) has no responsibility or liability for these independent policies or actions; (b) is not responsible for the privacy practices or the content of such websites; and (c) does not make any warranties or representations about the contents, products or services offered on such websites or the security of any information you provide to them.
HOW TO CONTACT US
If you are a resident of the European Union, and you believe that our processing of your Personal Information is inconsistent with your data protection rights under the GDPR and we have not adequately addressed your concerns, you have the right to lodge a complaint with the data protection supervisory authority of your country. http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.html