Thank you for watching XITE! In this Privacy Statement, we provide a detailed explanation of how we process your personal data and what rights you hold. We realize that reading this is not as exciting as watching music videos, but it is nevertheless good for you to know how we handle your data, so we advise you to read this Privacy Statement carefully.
We process personal data in accordance with the applicable privacy legislation, including the General Data Protection Regulation (EU) 2016/679 (GDPR), and act in accordance with GDPR principles when processing your personal data. These principles include: fairness, lawfulness, transparency, explicit & lawful processing of data, data minimization, accuracy of data, storage limits, respect for individual’s rights, integrity and confidentiality.
If you have any questions about this Privacy Statement, about our processing activities, or the use of cookies/similar technologies, please get in touch via email at [email protected] or write us at the following address: attn. ‘Data Protection Officer', XITE Networks Netherlands B.V., Spijkerkade 28, 1021 JS Amsterdam, the Netherlands.
The data we collect is primarily used to provide you with our music video services and to improve your music video viewing and listening experience on the XITE App. We offer the following services that are related to watching music videos and personalizing your viewing and listening experience and everything that goes with it, jointly referred to as the "XITE Services”:
We collect and use data from subscribers, free registered members, free guests and any other users of XITE Services.
We also collect and use data from visitors, users, members and registrants of the XITE websites, participants of ‘giveaways’, competitions, promotions, surveys, XITE Newsletter subscribers, event visitors and invitees, via XITE social media channels, and any other users of our XITE Services.
And lastly, we collect and use data from (new) hires, our employees, suppliers, partners and service providers to which our internal privacy policy and data processing practices apply. From these data types, there are roughly three categories of personal data that we collect and use for the following purposes:
If you accept our Privacy Statement, our Terms of Use and start using the XITE Services, you are authorizing us to collect and process the above data of the first and second category and use it for the purposes specified above.
For the third category of data, we will always first ask for your consent and explain why we are asking for your consent for the purposes described above. You are free to change your mind and turn-off or withdraw your consent easily at any time.
New hires Want to work at XITE? If so, we may use your contact details and résumé to invite you to an introductory meeting as a potential co-worker. Our processing of data of new hires, (former) members of staff and employees is set out in a separate internal privacy policy.
We processes personal data on the basis of your consent (opt-in), to enable you to use the XITE Services (performance of our agreement with you), to execute our legal obligations and on the basis of the legitimate interests (such as for marketing activities, analyses, research and to promote and support the XITE Services and relevant services/products of service providers, partners, platforms and other relevant third parties).
We do not retain personal data for longer than necessary and do not process more personal data than needed, for the purposes which we have initially collected the data for. We apply the principle of data minimization and keep our databases clean and up to date. Please contact us if you want to learn more about the retention periods of your data.
We will always be clear about how and when we share data.
As part of our provision of the XITE Services, we may share your data with third parties. This happens when, for example, you log on through a third party platform, such as your cable TV provider or mobile operator. We will then share certain data with them and they will share certain data with us to activate your XITE account and use the XITE Services.
There may also be cases where you want us to share information, such as when you make a playlist and want to share it with friends. You can also ask us to share information (such as your email address) with artists, record companies, or other partners who may send you news updates or promotional material. Again, you can withdraw your consent at any time. All third parties that we share data with are required to deliver the necessary level of security and confidentiality regarding the processing of personal data. In agreements between XITE and such third parties, the obligations and responsibilities regarding compliance with relevant privacy legislation are always laid out. For example, when a third party processes personal data on our behalf (such as a hosting service provider), we will always first enter into a data processing agreement. This means we ensure that such third parties comply with this Privacy Statement and applicable privacy legislation. This in turn ensures adequate protection of your personal data. Below you will find more information on how and why we share certain data with specific partners we work with.
Marketing and Advertising
We may share data with marketing and advertising partners to send you promotional messages about XITE Services and relevant services and products of such third parties or to show you more customized and personalized content, including relevant advertising for products and services that may be interesting to you, and to understand how users respond to advertising. The data we share with marketing and advertising partners for these purposes and to make it technically possible to show customized and personalized content, such as hashed IP address, hashed device ID, age and music profile, are pseudonymized. We may display third-party advertising and content that links to third-party websites. We are unable to verify the privacy practices and content of such third parties and can therefore not be held liable for their practices and content. Please read these third parties’ privacy statements and policies to find out how they collect and process your personal data.
Service Providers, Partners and Platforms
We may share your data with services providers, partners and platforms to facilitate delivery of our XITE Services, while always complying with this Privacy Statement. We work together with service providers that, for example, host, distribute, and run XITE Services, and we work with third parties that make analyses to help us better understand how our XITE Services are used.
Rights Holders
The XITE Services give you access to fully licensed music videos. We share data (such as the number of persons, age bracket and the specific artist(s)) with the rights holders in conformity with the provisions agreed in the licenses. The data that we share has been pseudonymized and cannot be directly traced back to you, unless you consent to sharing your personal data. We may also share non-identifiable data with our partners in the music industry to help them analyze the performance of the content they have licensed to us.
Distribution Partners
If you access the XITE App through a third party, such as a TV provider (e.g. Ziggo, SamsungTV), it might not usually be the case, but we may also share data concerning your use of the XITE Services with this third party. This may concern data on how you use the XITE Services, whether you have created an XITE account, and whether you are an active user of the XITE Services. These distribution partners may also collect and use your personal data directly (e.g. via set-top box or IP address), for which processing XITE cannot be held liable, so we advise you to read the applicable privacy statement of such distribution partners carefully to find out how they collect and use your data.
Aside from the above, we may also share your data with third parties to enable a merger, takeover, or sale of part of or all our assets, to respond to a legal procedure (such as a court order), to comply with applicable law, to deal with fraud, security problems, or technical issues, for statistical analysis and academic research by academic researchers, albeit only in anonymized form, to issue anonymized or aggregated information about the use of the XITE Services and to allow XITE group companies to use your data, as specified in this Privacy Statement.
XITE stores you data on a server in Google Cloud. The clouds used for this purpose are primarily European ones. We may transfer your data to a cloud outside the EU (e.g. US) to allow us to share your data with other XITE group companies only for the purposes specified in this Privacy Statement. In principle we don't transfer your personal data outside the EU, but we may outsource the processing of your data to, or share your data with, third parties in - and outside the EU. Your personal data may therefore be governed by privacy and data protection legislation that differs from the legislation in the EU. We will always abide by security standards that apply under the GDPR and use appropriate safeguards, such as data processing agreements and Standard Contractual Clauses with these third parties to ensure protection of your data.
We are very careful with your privacy and the protection of your data. We have implemented technical and organisational measures to ensure an appropriate level of data security with respect to your personal data. We strive in our services to prevent and limit as much as possible incidents and breaches with respect to your data. To do so, we use methods such as hashing to pseudonymize your data. Besides, your user account is password-protected, so make sure you use a unique and strong password, control access to your computer and browser, and log off after using the XITE Services.
You must be at least 16 years old to be allowed to create a user account on XITE. Persons aged under 16 can only create a XITE user account with the approval of a parent or guardian, otherwise you will not be allowed to use the XITE Services and share any personal data with us. If you are the parent or guardian of an individual below 16 years of age and you have found out that your child has provided personal data to XITE without your approval, please get in touch with us on [email protected], so we make sure to erase the respective data.
At any time, you can ask XITE:
If you have any questions about your rights or if you want to exercise any of the rights specified above, please send an email to [email protected] or send us a letter at the address set out at the first page of this Privacy Statement. Aside from that, you may always withdraw your consent to certain processing of your personal data by XITE and file a complaint with the relevant privacy authority if you are of the opinion that XITE did not act in accordance with the applicable privacy legislation. For the Netherlands this is the Dutch Data Protection Authority (‘Autoriteit Persoonsgegevens’).
Postal address:
Autoriteit Persoonsgegevens PO Box 93374 2509AJ Den Haag
Telephone Telephone number:
(+31)(0)70 888 85 00
Fax: (+31)(0)70 888 85 01
Visiting address (only by appointment):
Bezuidenhoutseweg 30
2594AV Den Haag
This Privacy Statement is subject to change, so we advise you to check it regularly. If we intend to make significant changes to how and the purpose for which we process personal data we will first notify you. You can contact us any time for more information about our Privacy Statement and how we collect and use your data on [email protected].