Definitions
"Agreement" refers to this Privacy Policy.
"Personal Data" refers to any information relating to an identified or identifiable natural person.
"Processing" means any operation or set of operations performed on Personal Data, whether or not by automated means.
"Data Controller" refers to TaleTech Studios AG, which determines the purposes and means of the Processing of Personal Data.
"Data Processor" refers to any entity that processes Personal Data on behalf of the Data Controller.
"User" refers to any individual or entity that accesses or uses the Services.
2. Information We Collect
We collect and store the following types of Personal Data:
- Personal Identification Information: This includes, but is not limited to, your name and email address, which you provide when registering for an account on our platform.
- Generated Content: Information regarding your use of our services, including, but not limited to, interaction data, preferences, and settings.
- Usage Data: Information automatically collected when you use our services, such as IP address, browser type, operating system, referring URLs, and other usage statistics.
- Device Information: Information about the device you use to access our services, including device type, operating system, unique device identifiers, and mobile network information.
- Location Data: Information about your location, which may be derived from your IP address or other location-tracking technologies.
- Cookies and Tracking Technologies: Data collected through cookies, web beacons, and other tracking technologies to enhance user experience and analyze site usage.
- Third-Party Data: Information obtained from third parties, such as social media platforms or other integrations, to facilitate account creation and service usage.
3. Use of Collected Information
Personal Data that you provide to us through our website and services will be used for the purposes specified in this Privacy Policy or as disclosed to you on relevant parts of our website or services. Specifically, we may use your information to:
- Account Management: Facilitate your registration, maintain your account, and provide you with the services requested.
- Service Provision: Analyze and process the content you submit to deliver the services you have requested.
- Service Improvement: Monitor and improve the performance and user experience of our website and services.
- Communication: Contact you regarding service updates, changes to our policies, or other relevant communications.
- Security: Ensure the security of our website, services, and your data.
- Legal Compliance: Comply with legal obligations and protect our rights.
Legal Basis for Processing: We process your Personal Data based on the following legal grounds:
- Consent: Where you have given explicit consent for specific processing activities.
- Contractual Necessity: To fulfill our contractual obligations to you.
- Legitimate Interests: For our legitimate business interests, provided that such interests are not overridden by your rights and freedoms.
- Legal Obligation: To comply with applicable laws and regulations.
We will not use your Personal Data for any purposes other than those outlined in this policy without your express consent.
4. Data Retention
We retain Personal Data only for as long as necessary to fulfill the purposes for which it was collected or to comply with legal, regulatory, or contractual obligations. Specifically:
- User Content: Original content uploaded by Users is not retained after processing. However, derivative content generated by our services may be retained securely in our database for a period of 12 months to facilitate service improvement and analytics.
- Personal Information: Personal identification information is retained for the duration of your use of our services and as long as necessary thereafter for legal or business purposes, typically up to 7 years.
- Usage Data: Usage data is retained for up to 24 months to monitor and improve service performance.
Criteria for Data Retention: The retention periods are determined based on the necessity to provide and improve our services, comply with legal obligations, and protect our rights.
Data Deletion Procedures: Upon expiration of the retention period, Personal Data will be securely deleted or anonymized to prevent any further use.
5. Disclosure of Personal Information
We may disclose your Personal Data to the extent necessary to fulfill our obligations under this Privacy Policy, including:
- Service Providers: We may share your information with trusted third-party service providers who assist us in operating our website, conducting our business, or providing services to you, including, but not limited to, payment processors, cloud service providers, analytics providers, and email service providers. These service providers are authorized to use your Personal Data only as necessary to perform their functions and are contractually obligated to protect your information.
- Legal Compliance: We may disclose your Personal Data if required to do so by law or in response to valid legal processes, such as a court order or subpoena.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, Personal Data held by us may be transferred to the acquiring entity. We will notify you via email and/or a prominent notice on our website of any change in ownership or uses of your Personal Data, as well as any choices you may have regarding your Personal Data.
Third-Party Marketing: We do not sell, trade, or rent your Personal Data to third parties for their marketing purposes without your explicit consent.
Links to Other Websites: Our website may contain links to other websites. We are not responsible for the privacy practices or the content of those websites.
6. International Data Transfers
Your Personal Data may be transferred to, and processed in, countries outside of your country of residence, including the United States, where data protection laws may differ from those in your jurisdiction. By using our services, you consent to such transfers and processing in accordance with this Privacy Policy.
Legal Safeguards: We ensure that all international data transfers are conducted in compliance with applicable data protection laws. This includes implementing appropriate safeguards such as Standard Contractual Clauses (SCCs) to protect your Personal Data during transfer and processing.
User Rights Regarding Transfers: You have the right to object to the transfer of your Personal Data to countries outside the European Economic Area (EEA). To exercise this right, please contact us using the contact information provided below.
7. Security of Your Information
We implement appropriate technical and organizational measures to protect your Personal Data against unauthorized access, loss, or destruction. These measures include:
- Encryption of data in transit and at rest.
- Access controls to restrict data access to authorized personnel only.
- Regular security assessments and vulnerability testing.
- Secure data storage solutions.
- Employee training on data protection and privacy practices.
Data Breach Protocols: In the event of a data breach, we will promptly assess the situation and take necessary actions to mitigate the impact. If the breach poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authorities in accordance with GDPR requirements.
However, please be aware that no method of transmitting or storing data is completely secure, and we cannot guarantee absolute security.
8. Your Rights
Under the GDPR, you have the following rights regarding your Personal Data:
- Right to Access: You have the right to request access to the Personal Data we hold about you.
- Right to Rectification: You have the right to request correction of any inaccurate or incomplete Personal Data.
- Right to Erasure ("Right to be Forgotten"): You have the right to request deletion of your Personal Data under certain conditions.
- Right to Restrict Processing: You have the right to request restriction of processing your Personal Data under certain conditions.
- Right to Data Portability: You have the right to receive your Personal Data in a structured, commonly used, and machine-readable format and have the right to transmit that data to another controller.
- Right to Object: You have the right to object to the processing of your Personal Data under certain conditions.
- Rights Related to Automated Decision-Making and Profiling: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or significantly affects you.
Exercising Your Rights: To exercise any of these rights, please contact us using the contact information provided below. We will respond to your request within the statutory timeframe, typically one month.
Verification Process: To protect your privacy, we may require you to verify your identity before responding to your request.
9. Cookies and Tracking Technologies
Our website uses cookies and similar tracking technologies to enhance user experience, analyze site usage, and assist in our marketing efforts. Cookies are small text files stored on your device that help us recognize you and understand how you interact with our website.
Types of Cookies We Use:
- Essential Cookies: Necessary for the operation of our website and services, enabling core functionalities such as security, network management, and accessibility.
- Performance Cookies: Collect information about how you use our website, such as which pages you visit most often and if you receive error messages.
- Functional Cookies: Allow our website to remember choices you make (such as your username, language, or region) and provide enhanced, more personalized features.
- Targeting/Advertising Cookies: Used to deliver advertisements more relevant to you and your interests, and to measure the effectiveness of advertising campaigns.
- Analytics Cookies: Help us understand how users engage with our website and services by collecting and reporting information anonymously.
Consent for Non-Essential Cookies: We obtain your consent before placing non-essential cookies (such as Performance, Functional, Targeting, Advertising, and Analytics Cookies) on your device. You can manage your cookie preferences through our Cookie Consent Management Platform (CMP) or your browser settings.
Managing Cookies: You can control the use of cookies through your browser settings. Please note that disabling certain types of cookies may affect the functionality and performance of our services.
Third-Party Cookies: We may allow third-party service providers to place cookies on your device for analytics, advertising, and other purposes. These third parties have their own privacy policies and are responsible for their use of cookies.
10. Changes to This Policy
We reserve the right to update this Privacy Policy at any time. Any changes will be posted on this page, and where appropriate, notified to you by email or through our services. Your continued use of our services following the posting of changes constitutes your acceptance of such changes.
Notification of Significant Changes: For significant changes that affect your rights or how we process your Personal Data, we will provide at least 30 days" notice via email or a prominent notice on our website.
11. Contact Us
If you have any questions or concerns about this Privacy Policy or your Personal Data, please contact us via:
Data Protection Officer (DPO): If required under GDPR, please contact our Data Protection Officer at dpo@story-boards.ai.
Response Times: We aim to respond to all privacy-related inquiries within 30 days.
