Privacy policy
What personal data GoBeastTV collects, why it is processed, how long it is kept and how to exercise your rights over it.
Data controller
[TO COMPLETE] Company name, whose registered office is at [TO COMPLETE].
Contact for any question about personal data: [TO COMPLETE].
Data protection officer, where one is appointed: [TO COMPLETE].
Data we collect
- Customer account: name, email address, password (stored as a hash).
- Order and billing: billing address, plan chosen, number of connections, order history.
- Payment: card details are handled directly by the payment provider and are never stored on our servers.
- Contact form: name, email address, subject, message and, where given, an order number.
- Technical data: IP address, browser type, pages viewed, timestamps, security logs.
- Cookies: see the Cookie settings page.
Purposes and legal bases
- Creating and running the account, delivering the subscription — performance of the contract.
- Invoicing and accounting obligations — legal obligation.
- Answering messages sent through the contact form — legitimate interest in replying to an enquiry.
- Site security, fraud and abuse prevention — legitimate interest.
- Audience measurement and marketing messages — consent, which you may withdraw at any time.
Who receives the data
Data is accessible to authorised staff and to processors acting on instruction: the hosting provider, the payment provider, the email service and, where used, the audience measurement tool. No data is sold or rented to third parties.
Transfers outside the European Union
[TO COMPLETE] State whether any processor is established outside the European Union. Where that is the case, name the transfer mechanism relied on: an adequacy decision, or the European Commission’s standard contractual clauses.
How long data is kept
- Customer account: for the duration of the contractual relationship, then three years from the last contact.
- Accounting records and invoices: ten years, as required by law.
- Contact form messages: three years from the last exchange.
- Technical and security logs: twelve months.
- Audience measurement cookies: thirteen months at most.
Your rights
Under the General Data Protection Regulation you have the right of access, rectification, erasure, restriction, objection and portability, together with the right to withdraw consent at any time and to give directions on what happens to your data after your death.
To exercise those rights, write to [TO COMPLETE]. Proof of identity may be requested where there is reasonable doubt about who is asking. You will receive a reply within one month.
Complaints
If, having contacted us, you consider your rights are not being respected, you may lodge a complaint with the competent supervisory authority. In France that is the Commission nationale de l’informatique et des libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr.
Security
Access to the site is encrypted in transit. Passwords are stored as hashes. Administrative access is limited to authorised people. Despite these measures, no transmission over the internet can be guaranteed to be entirely secure.
Children
The service is not intended for people under sixteen without the agreement of a parent or guardian. A family space and parental controls are provided to frame use by younger viewers.
Changes to this policy
This policy may be updated to reflect legal or technical changes. The date of the latest revision appears at the foot of the page. Where a change is substantial, you will be informed by appropriate means.