California residents may have different or additional rights. Please see the section titled Privacy Notice for California Residents.
I. WHAT DATA DO WE COLLECT AND PROCESS?
Contact Data This may include your name and your email address. This information will be collected by us if you communicate with us, for example if you use the links on our Platforms to communicate with us via email.
Account Data If you create an account on our Platforms (including the creation of a gestua.website ID) to benefit from our Platforms, you may need to provide your name, email address, phone number and your photograph. If you use Facebook or Google to login to our Platforms, Facebook [or Google] will share data with us including but not limited to your profile data, language, location and publicly available information about you and your friends.
User Content When you use our Karaoke app, this includes the videos you create (e.g. of you performing songs) and upload to our Platform. When you use our Beat Maker Go app, this includes audio recordings you upload to the Platform. By providing such User Content you acknowledge that we may make it available to other users of the Platform until you delete your account on our Platform.
Session Data This includes your IP address, your device’s unique identifier details, browser details including version, device operating system, geo-location, time zone setting and time/date of access requests, the amount of data transmitted and the requesting provider. We may also capture other information about visits to our Platforms such as pages viewed and traffic patterns.
Payment data Our Platforms include purchases directly in the application (including subscriptions) and/or purchases directly through our website. If you want to make a purchase in the application, you may do this with the help of payment system provided by Google Play (managed by Google) or AppStore (managed by Apple) and integrated into the apps. The in-app payment system is managed by the Google Play/AppStore administration or its authorized partner. Under no circumstances do we collect or process any information related to your payment instruments, such as bank card number, its validity term or your name as written on it. When you purchase directly through our website, including subscription, you authorize us to have our payment processor collect this information. We do not store such information on our servers.
II. HOW DO WE USE DATA? When you use our Platforms, we can collect and process some of your data for different legitimate purposes. You will find below explanations regarding the reasons why we may collect data and the legal bases we rely on in each case.
III. DATA RETENTION
1. By using our Platforms, you consent for us to store your personal data in line with legal, regulatory, financial and good-practice requirements.
2. The period for which we may retain your personal data will depend on the type of personal data collected, the purposes for which it was collected, applicable limitation periods for the exercise of legal rights and whether any legal or regulatory obligations require the retention of the personal data.
IV. COOKIES AND TRACKERS
Strictly necessary cookies These are cookies that are required for the operation of our Platforms. They include, for example, cookies that enable you to load webpages.
Analytical/performance cookies These cookies allow us to recognize and count the number of visitors to our Platforms and to see how visitors move around our Platforms. This helps us to improve the way our Platforms works, for example, by ensuring that visitors are finding what they are looking for easily. Functionality cookies These are used to recognize you when you return to our Platforms. This enables us to personalize our content for you, greet you by name and remember your preferences (for example, your choice of language or region).
3. You may block cookies by updating the relevant settings on your device or browser to allow you to refuse the setting of some or all types of cookies. However, if you use your browser settings to block all cookies (including strictly necessary cookies) you may not be able to access all or parts of our Platforms.
V. WHO DO WE SHARE YOUR DATA WITH?
gestua.website does not share your personal data except as consented by you or as described herein. We may need to share your personal data with selected third parties in the following circumstances:
Third party service providers This may include providers of certain systems and services that we use to host, administer and maintain our Platforms, including for example the servers used to host our Platforms, email service providers, payment processors, fraud prevention vendors, analytics, customer service providers and other service providers.
Third party service providers for marketing purposes If you explicitly consent to any marketing from us, certain personal data may be shared with third party service providers we use to help us carry out marketing including, for example, third party marketing automation platforms.
A list of these third-party service providers and business partners their privacy policies is available at gestua.website. The privacy policies of our partners may include additional terms and disclosures regarding their data collection and use practices. We encourage you to check those privacy policies to learn more about their data collection and use practices.
Group companies We are an international organization, with businesses both inside and outside of the European Union (“EU”). When you create User Content you will be asked if you’d like to share such User Content with other users of our Platforms who could be based both inside and outside of the EU. To comply with legal or regulatory requests If we are under a duty to disclose or share your personal data to comply with any legal or regulatory obligation, we may share your personal data with a regulator or law enforcement agency.
Prospective buyers or sellers If gestua.website, or its owners, buys or sells any business or assets, we may disclose your personal data to the prospective buyer or seller of such business or assets. If gestua.website (or substantially all of its assets) is acquired by a third party, your personal data held by gestua.website, or within such assets, may be transferred to such third party.
VI. INTERNATIONAL TRANSFERS
1. We will not transfer your personal data outside of the EU, except as set out in paragraph 5 above, for example if we utilise cloud-based platforms to store personal data, which may involve use of geographically distributed data centres.
2. In the case of these extra-EU transfers, where the transfers are not to countries that provide an adequate level of protection, we will put in place appropriate safeguards to cover transfers of personal data including, for example, signing standard contractual clauses, relying on a Privacy Shield certification and/or data protection clauses adopted by the European Commission.
3. If there are any other circumstances which would require us to transfer personal data outside of the UK, we will seek your consent to transfer your personal data outside of the UK.
VII. THIRD PARTY WEBSITES
1. We take data security seriously. We implement and maintain appropriate technical and organizational measures including resilient security systems and protocols to protect the personal data we store.
2. We have put procedures in place to deal with any suspected data security breach and will notify you and applicable regulator of a suspected breach where the breach may cause a risk to you.
3. Our security procedures mean that we may occasionally request proof of identity before we are able to disclose personal data to you.
IX. ACCESSING YOUR PERSONAL DATA AND YOUR RIGHTS
As a result of us collecting and processing your personal data, you have the following legal rights:
a. To access personal data we hold on you;
b. To request us to make any changes to your personal data if it is inaccurate or incomplete;
c. To request your personal data is erased where we do not have a compelling reason to continue to process such personal data in certain circumstances;
d. To receive your personal data provided to us as a data controller in a structured, commonly used and machine-readable format where our processing of the personal data is based on: (i) your consent;
(ii) our necessity for performance of a contract to which you are a party to; or
(iii) steps taken at your request prior to entering into a contract with us and the processing is carried out by automated means;
e. To object to, or restrict, our processing of your personal data in certain circumstances;
f. If we use your personal data for direct marketing, you can ask us to stop and we will comply with your request;
g. If we use your personal data on the basis of having a legitimate interest, you can object to our use of it for those purposes, giving an explanation of your particular situation, and we will consider your objection;
h. To object to, and not be subject to a decision which is based solely on, automated processing (including profiling), which produces legal effects or could significantly affect you;
i. If we are processing your personal data with your consent, you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect the processing of your personal data conducted pursuant to lawful processing grounds other than consent. You may do so by contacting us;
j. To lodge a complaint with a data protection supervisory body, which at present, is the Information Commissioner’s Office .
To exercise your rights, please contact our data protection officer at DPO@gestua.website or write to us at the address set forth in the “Contact” section.
X. OUR POLICIES CONCERNING CHILDREN
Our Platforms are not intended for children (under the age of 13 or such higher age as required by applicable law). We do not knowingly collect or solicit any personal data or target interest based advertising to children and we do not knowingly allow children to register for or use the Platforms. Children should not use our Platforms or send us any personal data about themselves at any time. In the event that we learn that we have inadvertently gathered personal data from children, we will take reasonable measures to promptly erase such information from our records. If you believe that we might have information from or about a child, please contact us DPO@gestua.website