YOUTUBE INTEGRATION PRIVACY POLICY
Last updated: 8.1.2021
This YouTube integration privacy policy (“YouTube Privacy Policy”) provides information on how Dream Broker Ltd (Business ID 2092227-2, “Dream Broker”) processes personal data and Google user data (both together “Data”) when the YouTube integration (“YouTube Integration”) of Dream Broker Studio software (“Software”) is used. The YouTube Integration is offered separately from the Software. Processing of personal data in the Software is described in the Data Processing Agreement entered into by Dream Broker and its customers.
What Data is processed and why?
Processing of the Data is necessary for the performance of the contractual obligations between Dream Broker and its customers, for providing the YouTube Integration and for compliance with the legal obligations. The Software is requesting access to the YouTube Data API in order to upload and publish video resources on behalf of the authenticated user to their YouTube channels. The Data that is processed includes only the necessary information to enable this function i.e. YouTube channel ID and YouTube resource ID, for the purpose of being able to publish and unpublish a video in a YouTube channel. To keep the user informed, the username and email is requested and displayed alongside the integrated channel.
Google user data (username and email address) is requested in order to show the owner details of the YouTube channel that the Software has been integrated with. This user data or any other personal data processed in connection with the YouTube Integration is not stored by Dream Broker.
The following Data is processed:
- YouTube username and email address;
- YouTube channel ID, YouTube resource ID; and
- activity and access logs: activities and time of each activity when using the YouTube Data API.
Data is processed for the following purposes:
- to provide the YouTube Integration, its features and functionalities to the customers;
- to allow customers to authenticate and authorize towards the YouTube Data API; and
- to maintain a link towards resources that are published to the YouTube channel by the customer.
In addition, Dream Broker may collect and process Data in anonymous form for marketing and research purposes.
Legal Basis for Processing of Data
Data is processed to fulfil the agreement between Dream Broker and customer. In addition, Data is processed in order to fulfil Dream Broker’s legal obligations in accordance with applicable legislation and orders of competent authorities.
Security Measures
The YouTube Integration is designed with the security by design approach. This means, for example, that the data protection principles of the GDPR are implemented into the YouTube Integration and related processes. Only such Data is processed which is necessary in order to provide the YouTube Integration to the customers in a secure way.
Security measures are adjusted based on risk assessment.
Data is processed in a confined, secured, certified and monitored production environment. The system maintenance information can only be accessed by a limited number of personnel on a need-to-know basis and under confidentiality obligation for the purposes being able to provide and maintain the Mobile Application. Dream Broker’s personnel are regularly trained to follow the internal security policies and strict access controls are applied. All access to Data and production environment are logged and audited. Dream Broker has regular system back-ups.
Communication between the users is secured. Secure protocol (HTTPS) is used to communicate between the servers and the YouTube Integration.
Transfers of Data and Third-Party Processors
Dream Broker processes Data only on its secure servers located in Finland (in the EU/EEA area). However, some content, features and functionalities (such as the YouTube Integration) related to the Software are provided by third parties wholly or partly. When using such content, features and functionalities provided by a third party, privacy policies and terms and conditions of such third party shall apply. Some of the third parties operate, transfer and store the personal data outside of the EU/EEA area.
In connection with the YouTube Integration, Dream Broker transfers the Data to Google, if customer is using the YouTube Integration. More information on how Google processes data can be found at Google’s website. If you do not agree on how Google processes the data, do not use the YouTube Integration.
Rights of data subjects
When personal data is processed the data subjects have the following rights.
- Right to access to your personal data. You have the right to obtain confirmation as to whether or not your personal data is processed. Where that is the case, you have the right to access the personal data and information concerning data processing.
- Right to rectification. You have the right to obtain the rectification of inaccurate personal data concerning you from the controller.
- Right to erasure. You have the right to obtain erasure of personal data concerning you, and the controller will have the obligation to erase personal data, provided that the requirements of the GDPR are fulfilled.
- Right to restriction of processing. You have the right to obtain restriction of processing when accuracy of the personal data is contested; the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead; the controller no longer needs the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defense of legal claims; or you have objected to processing pending the verification whether the legitimate grounds of the controller override those of you.
- Right to object. You have the right to object, on grounds relating to your particular situation, at any time processing of personal data concerning you processed on basis of a legitimate interest of us or public interest, including profiling. In such cases we will no longer process personal data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.
- Right to data portability. You have the right to receive data concerning you, in a structured, commonly used and machine-readable format and you have the right to transmit that data to another controller in cases where processing of personal data is based on consent or contract and the processing is carried out by automated means.
- Right to withdraw consent. When the processing of personal data is based on your consent, you always have the right to withdraw your consent for processing of personal data or for electronic direct marketing.
Some of these rights can be exercised directly through the Software. Otherwise Dream Broker can be contacted by sending e-mail to the address privacy@dreambroker.com. In order to exercise these rights, Dream Broker needs to be able to identify the requesting data subject in a reliable way.
Changes to Privacy Policy
Dream Broker may change or update this YouTube Privacy Policy at any time. The updated version is published in www.dreambroker.com/youtube-privacy-policy. Thus, we recommend that you return and familiarize yourself to this YouTube Privacy Policy from time to time.
Right to lodge a complaint with a supervisory authority
If you consider that there is an infringement of applicable legislation concerning personal data processing and data protection, you have the right to lodge a complaint with the competent supervisory authority. In accordance with Article 77 of the GDPR, the complaint may be lodged in the Member State of your habitual residence, place of work or place of the alleged infringement. In Finland, the competent supervisory authority is the Data Protection Ombudsman (www.tietosuoja.fi).
Contact information
Dream Broker Ltd.
Energiakuja 3
FI-00180 Helsinki
Finland
Phone: +358 10 232 7770
E-mail: privacy@dreambroker.com