PlayHT’s commitment to GDPR

The GDPR (General Data Protection Regulation) is an important piece of legislation that is designed to strengthen and unify data protection laws for all individuals within the European Union.

If your company needs to ensure it is GDPR-compliant, it also needs to ensure its providers (i.e. PlayHT) are also GDPR compliant. PlayHT is GDPR-compliant, and strictly enforces the regulation as to protect the user data we store.

Types of Data collected

If you are a Visitor, User or Business Partner, we may collect one or both of the following types of data from you when you use or access our website, the Services or when you interact with the Technology, as applicable.

The first type of data is aggregated, non-personal, non-identifiable information pertaining to your use of the website or interaction with the Technology (“Non-personal Data “). We are not aware of the identity of the individual from which the Non-personal Data is collected. Non-Personal Data may include your aggregated usage information and technical information transmitted by your device, including certain software and hardware information about your device (e.g., the device you use, the type of browser and operating system your device uses, language preferences, access times and the website’s domain name from which you accessed the Services, etc.), in order to enhance the functionality of the Services and for security and functionality purposes.

The second type of information is individually identifiable information, namely information that identifies an individual or may with reasonable effort identify an individual (“Personal Data“).

For the avoidance of doubt, if we combine Personal Data with Non-personal Data, the combined data will be treated as Personal Data as long as the data types remain combined. We act as a Processor of a User's Personal Data that we process on behalf of our Business Partners. We are considered to be the Controller of the Personal Data we collect from our Business Partners and Visitors.

The types of data that we collect as well as our reasons for processing such data are specified in the tables below:

Data We Collect from Business Partners and Visitors

Data We Collect from Users:

Audio Widgets

Our Audio Widgets include: Article Player and Audio Buttons.

• Personal Data: When the Visitor or a Business Partner chooses to use our Audio Widgets, we store no personal information.
  
• Non-Personal Data: We do store anonymous statistical data, for the use of our Visitors and Business Partners, in the form of Analytics (Listens, Shares, Downloads).
  
• Email Subscriptions: Under the consent of our Visitors and Business partners, solely for their use, we store Email Lists for Them, for Marketing and Advertising purposes, again with the end user's consent (user who’s benefiting from our Visitors or Business Partners).
  
  You can always choose to Opt-Out of this information sharing, after which the Visitor and Business Partner can exercise their Right of Erasure to remove said information.

How PlayHT collects Data

Depending on the nature of your interaction with the website or the Services, the above mentioned data may be collected as follows:

• Voluntarily – In the event you choose to provide us with information, e.g., when you contact us or if you are a Business Partner and you choose to share other information with us via your use of the Services.

• Automatically – Your data may be collected automatically including via cookies (as explained below) and other similar tracking technologies. We will ask for your consent to collect Personal Data and offer you the choice to opt-out of such collection if we are required to do so in accordance with applicable law.

Who do we disclose Information to?

We do not share your Personal Data with third parties except as specifically mentioned herein:

• Third Party service providers – we may disclose your Personal Data to third parties that perform services on our behalf (e.g. tracking, servers, service functionality and support, marketing, etc.). These entities may be located in a different jurisdiction than you and are prohibited from using your Personal Data for any purposes other than providing us with the requested services;

Our third parties help us use your personal information, as described above, and include:

• Third Party Rights – we may share your Personal Data, solely to the extent needed to prevent harm to the rights (including intellectual property rights and other legal rights), property or safety of us, our Visitors, Business Partners and their Users, yourself or any other third party.

• Policy Enforcement – we may share your Personal Data, solely to the extent needed in order to enforce our policies including investigations of potential violations thereof, to establish or exercise our rights to defend against legal claims or to detect, prevent, or take action regarding illegal activities or other wrongdoing, suspected fraud or security issues;

• Legal Requirement – we may disclose or share your Personal Data, solely to the extent needed to comply with any applicable law, regulation, legal process or governmental request (i.e., to comply with a court injunction, etc.) or for the purpose of collaborating with law enforcement agencies; or

• Affiliated Companies and Corporate Transaction – we may share your Personal Data with a parent company, subsidiaries, joint ventures, or other companies under common control with the Company ("Affiliated Companies") solely if and when applicable or necessary. In addition, we may share information, in the event of a corporate transaction (e.g. sale, merger, consolidation, etc.), provided however, that our Affiliated Companies or acquiring company will be subject to the obligations detailed herein with respect to your Personal Data.

• Online Identifiers – we may share Online Identifiers with our Business Partners and advertising partners for the purpose of the Services, as well as to detect fraud and calculate payments.

Your Individual Rights

• Right to be informed: we clearly inform our users about the use that will be made of their data

• Right of access: our users can access all their data, without restriction, from the Crisp apps
  
• Right of rectification: it's as simple as contacting us, we'll process all your rectification queries
  
• Right of erasure: it's as simple as contacting us, we'll process all your erasure queries
  
• Right to restrict processing: we don't process the data of our customers (and our customers end-users)
  
• Right to data portability: our users may contact us anytime if they wish to get an export of their data (this may take time, however, as the data is fragmented amongst multiple isolated data-stores)
  
• Right to object: we handle all requests on this matter from our users and users end-users (contact us)
  
• Right not to be subject to automated decision-making including profiling: we don't do that (and never will)

Please review our Privacy Rights Policy to learn more.

Change in Control or Sale

We can also share your personal information as part of a sale, merger or change in control, or in preparation for any of these events. Any other entity which buys us or part of our business will have the right to continue to use your information, but only in the manner set out in this Policy unless you agree otherwise.

International transfers of personal information (for users in the Designated Countries)

For our users in the Designated Countries, where we transfer your personal information to a third party provider that is not located in the Designated Country and is not subject to an adequacy decision by the EU Commission, we will require those third party providers to enter into an agreement that provides appropriate safeguards for your information.

Security

Our team closely monitors any unauthorized system access, and has put in place multiple preventive measures to reduce the attack surface on our systems and services. In 4 years, PlayHT has had 0 major security issues, with only a few minor ones, which we fixed the same day they were reported (those would not have allowed a hack or data breach).

Data Retention

We generally retain your personal information as long as you keep your account open or as needed to provide you Services. This includes data you or others provided to us and data generated or inferred from your use of our Services. In some cases we choose to retain certain information (e.g., insights about Services use) in a depersonalized or aggregated form.

Data Protection Officer

PlayHT has a designated Data Protection Officer, as required by GDPR:

Syed Mohammed Zubair
Role: Director of Account Management and Customer Success
Email: [email protected]