Privacy Statement

XITE Privacy Statement – 2023 – UK 


1) Introduction


Thank you for watching XITE! In this Privacy Statement, we provide a detailed explanation of how we process your personal data and what rights you hold. We realize that reading this is not as exciting as watching music videos, but it is nevertheless good for you to know how we handle your data, so we advise you to read this Privacy Statement carefully.


2) GDPR 


We process personal data in accordance with the applicable privacy legislation, including the General Data Protection Regulation (EU) 2016/679 (GDPR), and act in accordance with GDPR principles when processing your personal data. These principles include: fairness, lawfulness, transparency, explicit & lawful processing of data, data minimization, accuracy of data, storage limits, respect for individual’s rights, integrity and confidentiality.


 3) Contact


 If you have any questions about this Privacy Statement, about our processing activities, or the use of cookies/similar technologies, please get in touch via email at [email protected] or write us at the following address: attn. ‘Data Protection Officer', XITE Networks Netherlands B.V., Spijkerkade 28, 1021 JS Amsterdam, the Netherlands.


4) XITE Services


The data we collect is primarily used to provide you with our music video services and to improve your music video viewing and listening experience on the XITE App. We offer the following services that are related to watching music videos and personalizing your viewing and listening experience and everything that goes with it, jointly referred to as the "XITE Services”:


  • XITE TV - 24/7 music videos on TV;
  • XITE App - a personal music video streaming service that gives you access to the largest music video catalog of over hundred thousand music videos;
  • XITE websites (e.g. xite.nl and xite.com) - on the XITE websites, you will find lots of cool background information about your favorite XITE shows and artists;
  • XITE social media channels - YouTube, Facebook, Instagram, LinkedIn, TikTok and Twitter
  • XITE Newsletter; and
  • XITE Events.

5) Categories of Personal Data & Purposes of Processing


We collect and use data from subscribers, free registered members, free guests and any other users of XITE Services.


We also collect and use data from visitors, users, members and registrants of the XITE websites, participants of ‘giveaways’, competitions, promotions, surveys, XITE Newsletter subscribers, event visitors and invitees, via XITE social media channels, and any other users of our XITE Services.


And lastly, we collect and use data from (new) hires, our employees, suppliers, partners and service providers to which our internal privacy policy and data processing practices apply. From these data types, there are roughly three categories of personal data that we collect and use for the following purposes:


 


 


  1. Personal Data needed to enable you to use the XITE Services: - Registration details: your first name, surname, date of birth, email address, gender, language, login details and other details you provide when creating an XITE account for XITE Services. We also process personal data related to the type of XITE subscription and the version of the XITE Service you use; - General non-specific location information: based on IP address. Our permissions to show music videos and other content are territory-based, so we need to know your region when accessing and using the XITE Services; - Technical information: to guarantee and improve the technical functionality of the XITE Services, to develop new services, and to analyze your use of the XITE Services, including your interaction with applications, advertising, products and services made available by, linked to, or offered through the XITE Services. This may include the type of browser, provider, network connection and device (set-top box, TV, etc.) you use, URL data, the technical details of your screen, data enabling digital rights management and your operating system. These are technical details that are needed for the technical delivery of our XITE Services, while it also allows you to use the controls on the XITE Services and us to perform certain simple operations, such as rotating videos and recommending music videos based on whether you are sitting still or walking; - Email address, name and surname to communicate with you for purposes relating to the XITE Services (e.g. service mails); - Functional and analytical cookies and other similar technologies to enable, analyze and improve the functionalities of our websites to which our Cookie Statement (link) applies; - Certain data to enforce this Privacy Statement, our Terms of Use, and any other terms and conditions you have accepted, including to protect the rights, property or security of XITE, its users, or any other person or copyrighted content on the XITE Services.
  2. Personal Data we may use to offer you additional features and an improved and personalized experience of the XITE Services: - The music videos you watch, search, skip, the time and date of watched music videos and your interactions with the XITE Services. This enables us to improve, analyze and personalize your experience, make recommendations, and suggest content that may be relevant and interesting to you; - Data collected via XITE (marketing) campaigns, such as answers to questions of competitions via our website or social media channels that we may use for giveaways, promotions and surveys. In such cases also your name and surname and email address may be collected and used by us (e.g. to choose a winner and to send you updates); - We may offer you via our websites and/or social media channels or the XITE Newsletter the opportunity to participate in promotions such as events, competitions, offers and/or surveys - ’Special Promotions’. A Special Promotion may be subject to a separate privacy statement and/or terms of use that are additional to, or separate from and will prevail over this Privacy Statement and Terms and Conditions of Use. If you participate in a Special Promotion, we may ask you for certain additional personal information in addition to that provided in this Privacy Statement. We may combine these additional personal information with other account information and may use and share it as described in this Privacy Statement; - General non-specific location information: This enables us to recommend music videos based on your general location, such as suggestions for certain XITE channels or music videos, as well as for festivals, gigs, or concerts. - Behavioral data: about how you use the XITE Services (e.g. watched, skipped, liked, searched music videos) to deliver, personalize, and improve your experience as a user of the XITE Services and advertising (including for third-party products and services) provided on or through the XITE Services (including on other websites you visit), including for the delivery of customized, personalized, or localized content, music videos, recommendations, features, and advertising on or outside the XITE Services; - Data collected to enable and promote the XITE Services and other services or products, within or outside the actual XITE Services, including features and content made available through the XITE Services, other audiovisual content, other XITE users, third-party applications, and advertising, products and services offered, which are linked to, made available on, or collected through the XITE Services; - We may also receive information about you from our service providers, partners and video platforms that we use to analyze and personalize your experience of the XITE Services, to measure the quality of advertising, responses to advertising, and to display advertising that is more relevant to you.

 


If you accept our Privacy Statement, our Terms of Use and start using the XITE Services, you are authorizing us to collect and process the above data of the first and second category and use it for the purposes specified above.


  1. Personal Data we only use when you opt-in to share this data (which consent can be turned-off or withdrawn easily at any time): - Email address or other electronic or mobile data; to communicate with you for marketing and promotional purposes relating to the XITE Services (and/or third parties), including by email, notifications, text messages, or other messages, in accordance with the consent you have given us (e.g. XITE Newsletter); - Specific location (GPS): to deliver music videos, features, information, advertising or other content to you that is based on your location and your location with respect to other users of the XITE Services; - Commercial (third party) cookies and other technologies to deliver, personalize, and improve your experience as a user of the XITE Services and advertising (including for third-party products and services) provided on or through the XITE Services (including on other websites you visit), including for the delivery of customized, personalized, or localized content, music videos, recommendations, features, and advertising on or outside the XITE Services. Please read our Cookie Statement (link) for more information.

For the third category of data, we will always first ask for your consent and explain why we are asking for your consent for the purposes described above. You are free to change your mind and turn-off or withdraw your consent easily at any time.


New hires Want to work at XITE? If so, we may use your contact details and résumé to invite you to an introductory meeting as a potential co-worker. Our processing of data of new hires, (former) members of staff and employees is set out in a separate internal privacy policy. 


6) Grounds for Processing


We processes personal data on the basis of your consent (opt-in), to enable you to use the XITE Services (performance of our agreement with you), to execute our legal obligations and on the basis of the legitimate interests (such as for marketing activities, analyses, research and to promote and support the XITE Services and relevant services/products of service providers, partners, platforms and other relevant third parties).


7) Retention Periods


We do not retain personal data for longer than necessary and do not process more personal data than needed, for the purposes which we have initially collected the data for. We apply the principle of data minimization and keep our databases clean and up to date. Please contact us if you want to learn more about the retention periods of your data.


8) Data Sharing


We will always be clear about how and when we share data.


As part of our provision of the XITE Services, we may share your data with third parties. This happens when, for example, you log on through a third party platform, such as your cable TV provider or mobile operator. We will then share certain data with them and they will share certain data with us to activate your XITE account and use the XITE Services.


There may also be cases where you want us to share information, such as when you make a playlist and want to share it with friends. You can also ask us to share information (such as your email address) with artists, record companies, or other partners who may send you news updates or promotional material. Again, you can withdraw your consent at any time. All third parties that we share data with are required to deliver the necessary level of security and confidentiality regarding the processing of personal data. In agreements between XITE and such third parties, the obligations and responsibilities regarding compliance with relevant privacy legislation are always laid out. For example, when a third party processes personal data on our behalf (such as a hosting service provider), we will always first enter into a data processing agreement. This means we ensure that such third parties comply with this Privacy Statement and applicable privacy legislation. This in turn ensures adequate protection of your personal data. Below you will find more information on how and why we share certain data with specific partners we work with.


Marketing and Advertising


We may share data with marketing and advertising partners to send you promotional messages about XITE Services and relevant services and products of such third parties or to show you more customized and personalized content, including relevant advertising for products and services that may be interesting to you, and to understand how users respond to advertising. The data we share with marketing and advertising partners for these purposes and to make it technically possible to show customized and personalized content, such as hashed IP address, hashed device ID, age and music profile, are pseudonymized. We may display third-party advertising and content that links to third-party websites. We are unable to verify the privacy practices and content of such third parties and can therefore not be held liable for their practices and content. Please read these third parties’ privacy statements and policies to find out how they collect and process your personal data.


Service Providers, Partners and Platforms


We may share your data with services providers, partners and platforms to facilitate delivery of our XITE Services, while always complying with this Privacy Statement. We work together with service providers that, for example, host, distribute, and run XITE Services, and we work with third parties that make analyses to help us better understand how our XITE Services are used.


Rights Holders


The XITE Services give you access to fully licensed music videos. We share data (such as the number of persons, age bracket and the specific artist(s)) with the rights holders in conformity with the provisions agreed in the licenses. The data that we share has been pseudonymized and cannot be directly traced back to you, unless you consent to sharing your personal data. We may also share non-identifiable data with our partners in the music industry to help them analyze the performance of the content they have licensed to us.


Distribution Partners


If you access the XITE App through a third party, such as a TV provider (e.g. Ziggo, SamsungTV), it might not usually be the case, but we may also share data concerning your use of the XITE Services with this third party. This may concern data on how you use the XITE Services, whether you have created an XITE account, and whether you are an active user of the XITE Services. These distribution partners may also collect and use your personal data directly (e.g. via set-top box or IP address), for which processing XITE cannot be held liable, so we advise you to read the applicable privacy statement of such distribution partners carefully to find out how they collect and use your data.


9) Other forms of sharing


Aside from the above, we may also share your data with third parties to enable a merger, takeover, or sale of part of or all our assets, to respond to a legal procedure (such as a court order), to comply with applicable law, to deal with fraud, security problems, or technical issues, for statistical analysis and academic research by academic researchers, albeit only in anonymized form, to issue anonymized or aggregated information about the use of the XITE Services and to allow XITE group companies to use your data, as specified in this Privacy Statement.


10) Data Storage & Transfer


XITE stores you data on a server in Google Cloud. The clouds used for this purpose are primarily European ones. We may transfer your data to a cloud outside the EU (e.g. US) to allow us to share your data with other XITE group companies only for the purposes specified in this Privacy Statement. In principle we don't transfer your personal data outside the EU, but we may outsource the processing of your data to, or share your data with, third parties in - and outside the EU. Your personal data may therefore be governed by privacy and data protection legislation that differs from the legislation in the EU. We will always abide by security standards that apply under the GDPR and use appropriate safeguards, such as data processing agreements and Standard Contractual Clauses with these third parties to ensure protection of your data.


11) Security


We are very careful with your privacy and the protection of your data. We have implemented technical and organisational measures to ensure an appropriate level of data security with respect to your personal data. We strive in our services to prevent and limit as much as possible incidents and breaches with respect to your data. To do so, we use methods such as hashing to pseudonymize your data. Besides, your user account is password-protected, so make sure you use a unique and strong password, control access to your computer and browser, and log off after using the XITE Services.


12) Minors


You must be at least 16 years old to be allowed to create a user account on XITE. Persons aged under 16 can only create a XITE user account with the approval of a parent or guardian, otherwise you will not be allowed to use the XITE Services and share any personal data with us. If you are the parent or guardian of an individual below 16 years of age and you have found out that your child has provided personal data to XITE without your approval, please get in touch with us on [email protected], so we make sure to erase the respective data.


13) Your Rights


 


At any time, you can ask XITE:


  • To access and verify which personal data XITE is processing about you;
  • To rectify, complete or adjust (if incorrect) your personal data XITE is processing;
  • To remove and erase your personal data (‘right to be forgotten’), whereby XITE for specific (legal) purposes (e.g. tax administration) may still need to process certain personal data of which XITE will inform you;
  • To limit certain processing of your personal data;
  • To object (opt-out) against certain processing of personal data (for e.g. marketing), in which case XITE will cease such processing immediately, unless urgent, specific legitimate grounds for XITE apply to continue processing of which XITE will inform you;
  • To provide personal data in a commonly used and machine-readable format (‘data portability’).

 


If you have any questions about your rights or if you want to exercise any of the rights specified above, please send an email to [email protected] or send us a letter at the address set out at the first page of this Privacy Statement. Aside from that, you may always withdraw your consent to certain processing of your personal data by XITE and file a complaint with the relevant privacy authority if you are of the opinion that XITE did not act in accordance with the applicable privacy legislation. For the Netherlands this is the Dutch Data Protection Authority (‘Autoriteit Persoonsgegevens’).


14) Contact the Dutch Data Protection Authority (DPA):


Postal address:


Autoriteit Persoonsgegevens PO Box 93374 2509AJ Den Haag


Telephone Telephone number:


(+31)(0)70 888 85 00


Fax: (+31)(0)70 888 85 01


Visiting address (only by appointment):


Bezuidenhoutseweg 30


2594AV Den Haag 


15) Changes


This Privacy Statement is subject to change, so we advise you to check it regularly. If we intend to make significant changes to how and the purpose for which we process personal data we will first notify you. You can contact us any time for more information about our Privacy Statement and how we collect and use your data on [email protected].