Ocast is a platform for media buyers to view media information provided by media sellers (the "Service") powered by Ocast AB Swedish CNR 556910-7823, ( "Controller" “we” “us” etc.). It is important that persons using the Service ("Users”) feel safe with, and are informed about, how we handle their personal data.
The Service is a platform where media sellers “Sellers” can produce a digital document to market their advertising for media buyers “Buyers” visiting www.ocast.com. Buyers can create an account in association with a media agency. A Seller may create a profile in the Service to list their media information as a “Profile”. The Profile is accessed through www.ocast.com. A User may log in to edit, change, give access (“Accounts”) to employees, consultants and/or other natural persons (“Users”).
2. Collection and use of personal data
We process data differently depending on the category of Data Subject that the given subject falls within. Note that the same Data Subject may be part of more than one category. For the purpose of data processing, we have divided Data Subjects into the following categories:
Users – Users who are using Ocast’s service in their work for the Customer as an employee, consultant or otherwise.
“Influencer” – A Customer who is a natural person or a company so closely related to a natural person that the natural person may be identified using the company’s identity.
“Ocast contacts” – Representatives of Customers in the contractual relationship between Ocast and the Customer, such as the person responsible for the contract and other persons with whom Ocast has contacts. Note that the Customer may publish information in the Profile about whom to contact in certain matters, such contact persons are not Ocast-contacts, nor are we Controllers of such Personal Data.
“Leads” – Contact persons with companies that Ocast finds to be a potential, future, Customer.
All Personal Data is provided either by the User or by the Customer who owns the Profile to which the User’s Account is connected.
Data collected and processed regarding Users
The only information we collect and use regarding Users is the e-mail address used for login-purposes. We also use this information to contact Users regarding changes in the Service, support et cetera. The e-mail address is either provided by the User or by the Customer. This processing ceases when an Account is terminated. You may terminate your account at any time. However, you will not be able to use the Service without an Account.
The legal ground for this processing is our legitimate interest of providing the Customer with the Service. If you object to our processing of your e-mail address for this purpose you will not be able to use your Account. We do not require an e-mail address that is related to a natural person.
Data collected and processed regarding Influencers
If you are an Influencer, you will provide information regarding yourself that would normally not be considered Personal Data, such as your brand name, website URL and business information such as target audience.
By uploading such information, you consent to the information being published in the Service. To withdraw your consent, you may simply use your Account to delete the information from your Profile. Data deleted from the Profile will be permanently deleted.
Data collected and processed regarding Ocast-contacts
For normal customer-relation purposes, such as support issues, marketing and sales, invoicing et cetera, we need to have at least one Ocast-contact within the Customer’s organization. All such processing is performed on the legal ground of Ocast’s legitimate interest to maintain relationships with its Customers. We also have legal obligations to keep certain data (e.g. invoicing data, needs to be kept for seven years), such processing will end when there is no longer a legal requirement to keep such data.
This processing ceases when the Customer ceases to use the Service. Ocast-contacts may then, however, be considered Leads.
Data collected and processed regarding Leads
From publicly available sources, such as company websites and the company registry, from providers of lead-data and from the networks of our employees, we collect information regarding contact information of relevant persons with potential Customers ( “Lead Companies”) for direct marketing purposes. Such collection is based on our legitimate interest to market the Service. We inform Leads about this collection when we contact them. If a Lead Company proves to not be interested or not interesting, the Personal Data about Leads in such a Lead Company is deleted. If the Lead Company becomes a Customer, the Lead, or someone else, will be converted into an Ocast-contact. If you are contacted by Ocast and request us not to contact you with offers regarding our Service we will also delete your Personal Data.
3. Storage and transfers
We only process Personal Data within the EU/EEA, or where the adequate safeguards to protect the rights of the data subjects are in place. To obtain documentation regarding such adequate safeguards, contact us using the Contact details listed in paragraph 9.
4. Your rights
You have the right to request information about the personal data that is being processed by us, by notifying us in writing, using the contact details listed in paragraph 10. Users have the right to one (1) copy of the processed personal data which belongs to them without any charge. For further demanded copies, the Controller has a right to charge a reasonable fee based on administrative expenses for such a demand.
You have the right to, if necessary, demand rectification of inaccurate personal data concerning you, via a written request, using the contact details listed in paragraph 10.
You have the right to demand deletion or restriction of processing, and the right to object to processing based on legitimate interest under certain circumstances.
You have the right to revoke any consent to processing that has been given by you.
Under certain circumstances, you may have the right to data portability, i.e. the right to obtain the personal data digitally and/or to transfer such data to another controller.
We adopt appropriate data collection, storage and processing practices and security measures to protect against unauthorized access, alteration, disclosure or destruction of your Personal Information, username, password, transaction information and data stored on our Site and in the Service.
Sensitive and private data exchange between the Site/Service and its Users/visitors is made over a SSL secured communication channel and is encrypted and protected with digital signatures.
Transfers of information over the internet and mobile networks are never entirely risk free. Therefore, all transfers are made at the person transferring the data’s own risk. It is important that Users also take responsibility to ensure that their data is protected. It is the responsibility of the User that their login information is kept secret and secured.
6. Transfer of personal data to third party
We will not sell or otherwise transfer Users’ personal data to third parties.
We may transfer Users’ Personal Data to:
- I. Our contractors and sub-contractors, acting as our Processors and Sub-Processors in accordance with our instructions, for the provision of the Service;
- II. authorities or legal advisors in case criminal or improper behaviour is suspected; and
- III. authorities, legal advisors or other actors, if required by us according to law or authority’s injunction.
We will only transfer Users’ personal data to third parties that we have confidence in. We carefully choose partners to ensure that the User’s personal data is processed in accordance to current privacy legislation. We use the following categories of processors to process Personal Data:
- - E-mail services,
- - Server infrastructure providers.
7. Aggregated data (NON-IDENTIFIABLE PERSONAL DATA)
We may share aggregated data to third parties. The aggregated data has in those cases been compiled from information that has been collected through the Service and can, for example, consist of internet traffic statistics or the geological location for the use of the Service. The aggregated data does not contain any information that can be used to identify individual persons and is therefore not to be labelled as personal data.
For questions or for further information regarding our handling of Personal Data or for contact with us in other matters, please use the following contact details:
Smålandsgatan 16 5 tr.
SE 114 46 Stockholm