2. PERSONAL DATA CONTROLLER
2.1 Storytel Sweden AB is the data controller for the processing of Your personal data handled by Storytel. You may contact either entity regarding for example integrity and privacy. Information on how to contact us can be found in section 13.
3. WHEN AND FROM WHERE DOES STORYTEL COLLECT PERSONAL DATA?
3.1 Storytel collects personal data about You when:
- You set up an account with Storytel and/or use the Service,
- You order an add-on service or a product from Storytel,
- You install and/or use any application included in the Service with our without an underlying subscription plan,
- You visit the website,
- You register as a subscriber of Storytel’s newsletter,
- You report errors, infringing or otherwise inappropriate material or contact Storytel’s customer services for any other reason,
- You link the Service to Your Facebook account or a similar third-party service, e.g. to facilitate login to the Service, in which case we receive data from such third-party service,
- You answer a survey, including but not limited to customer satisfaction questionnaires or marketing surveys or reply to communication from Storytel, or
- It is otherwise necessary to manage the relationship between You and Storytel.
4. WHAT PERSONAL DATA DOES STORYTEL COLLECT?
4.1 When You set up an account with Storytel or contact Storytel’s customer services, Storytel collects personal data about You. Basic user data that Storytel collects includes Your contact details such as name and/or user name, e-mail address and/or phone number and Your payment details such as your credit card type and expiration date of such card. Storytel may also collect data regarding Your date of birth, gender and additional contact details such as Your address. Storytel may also collect personal data that You provide about Your family members (including Your family members’ names, e-mails, dates of birth and their interests). If You choose to provide such personal data, You are responsible for having the right to do so with their consent and You should also inform them about our processing activities.
4.2 When You use the Service or any additional Storytel services and products, and visit Storytel’s website and app, Storytel may also collect data concerning usage (such as choices of titles and search queries), viewing information (such as content viewed) and technical data (such as unique platform IDs, phone and platform versions, device IP address, Storytel app version, language settings, URL information, password (encrypted), cookie data and browser type). If, when You signed up as a customer with Storytel You signed up as an invoice customer, Storytel may also need to collect and process some of the information You provide to Storytel’s payment service provider to facilitate such invoicing.
4.3 If You choose to link the Service to Facebook or a similar third-party service that controls personal data, Storytel may collect and process personal data which You have given Facebook, or such other third-party, permission to share with Storytel. Storytel encourages You to inform yourself of such third parties’ privacy practices.
4.4 Further Storytel may also collect and process personal data that You provide in public forums on Storytel’s website or to Storytel when You use Storytel’s website, Storytel’s sites on third-party platforms such as application stores, social networking sites or link Your profile on a third-party site or platform with Your personal account.
4.5 Storytel may also collect and process certain personal data related to Your eligibility to use the Service and Your chosen method of payment. However, as Storytel cooperates with third party payment service providers who operate independently in systems separated from Storytel, no complete payment data, such as complete credit card numbers, will be stored by Storytel. Storytel encourages You to inform yourself of such third party payment providers’ privacy practices.
5. FOR HOW LONG IS THE DATA KEPT?
5.1 Storytel will keep Your personal data only as long as it is necessary with regard to the purpose of the respective processing activity.
5.2 This means that personal data collected and processed for marketing purposes will be stored for as long as You are a Subscriber and for twelve (12) months after Your subscription has ended unless You have given Storytel Your consent to continue to process such data.
5.3 In order to fulfill our contractual obligations, monitor and document usage of Gift Cards and Free Trial periods and other add-on services, we will store the personal data You have provided at sign up (such as Your name and/or user name, e-mail address and/or phone number and payment details) as long as You are a Subscriber, Gift Card user or Free Trial user and for a period of twenty-four (24) months after Your subscription, Your purchase of a Gift Card, or Your use of Gift Card or Free Trial has ended whichever is the latest.
5.4 We will keep Your personal Storytel audiobook/ebook library information as long as You are a Subscriber and for a period of twenty-four (24) months thereafter in order to facilitate and improve Your experience, should You wish to return as a Subscriber within the aforementioned time period.
5.5 When You contact Storytel to receive support or for other purposes we will store Your personal data for twenty-four (24) months after resolving Your latest support ticket (e.g. issues and requests).
5.6 Your Personal data is processed for analytical purposes during Your subscription period and for twenty-four (24) months thereafter.
5.7 Storytel may store personal data for a longer time than the aforementioned times if required by law or in order to establish, exercise or defend a right in a legal claim.
6. WHERE IS THE PERSONAL DATA STORED?
7. WHY DOES STORYTEL PROCESS YOUR PERSONAL DATA?
7.1 Storytel processes Your personal data for various purposes. Primarily, Storytel processes Your personal data in order to manage the customer relationship with You and to fulfill its legal obligations. Your personal data may also be processed for market and customer analysis, market research, statistics, business monitoring and business and methodological development for Storytel in order to develop and customize the Service and its features.
7.2 Storytel also processes Your personal data to provide better and more personalized offers and services. Storytel also processes Your personal data to decrease the risk of sending You irrelevant advertising or other types of irrelevant marketing . Personal data may, for example, be processed, linked, segmented and analyzed in order, by means of targeted marketing via for instance email, in app push notifications and advertising on third party channels, to provide information, offers or recommendations on Storytel’s or its partners’ goods and services, which are tailored to Your preferences, behavior, needs or lifestyle. It may also be used as a basis for targeted marketing towards audiences that are similar to Storytel’s existing users. This may e.g. include processing of personal data for the purpose of creating custom audiences on third party platforms such as Facebook and Google. Storytel may also analyze and combine the information about You to which Storytel has access via the Service from Your online visits or other records (e.g. Facebook or other similar social media providers) for purposes specified in this section.
7.3 In addition to the above, Storytel processes Your personal data to prevent, detect and investigate potential prohibited or illegal activities, including fraud, and to enforce our Terms (e.g. determining whether You are eligible for a Free Trial period or for any other offer or marketing campaign as the case may be).
8. WHAT IS THE LEGAL BASIS FOR THE PROCESSING?
8.1 A majority of the personal data that Storytel processes about You are processed because it is necessary for Storytel’s performance of the Terms, i.e. in order for Storytel to be able to provide and administer the Service and its features. Such is the case when Storytel processes e.g. Your contact details such as Your e-mail address or Your phone number and information from the payment service provider.
8.2 Some of the personal data which Storytel processes are processed based on a balance of interest, i.e. Storytel’s legitimate interest of processing the data outweighs the impact and risk the processing may have on Your integrity. Such is the case when Storytel processes Your personal data for support purposes (e.g. general support requests) or certain marketing purposes other than for direct marketing and when we store Your Storytel audio/ebook (including other literary content) library information after Your subscription has ended.
8.3 Additionally, some personal data is processed based on Your consent. This is the case for the processing of such personal data that Storytel gets access to via Your Facebook account, for direct marketing of Storytel’s or Storytel’s partners’ goods and services. If You provide personal data of other natural persons, such as Your family members, You are responsible for seeing to that they consent to the processing of their personal data.
8.4 To the extent that processing is carried out with consent as a sole legal basis, it is voluntary for You to give such a consent and You may at any time, wholly or partly, withdraw Your consent.
9. DATA SECURITY AND INTEGRITY
The security, integrity and confidentiality of Your personal data is very important to us. We have implemented technical, administrative and physical security measures that are designed to protect Your personal data from in particular unauthorized access or disclosure, use, modification, destruction and loss. From time to time, we review our security procedures in order to assess the need to implement additional measures or to make technical upgrades to existing procedures. Please be aware that, despite our best efforts, few security measures are impenetrable, and we therefore kindly ask that You inform us immediately of any suspicious activities that You notice in the Service.
10. WHO DOES STORYTEL DISCLOSE YOUR PERSONAL DATA TO?
10.2 Storytel may also disclose Your personal data to third parties for the purpose of sending You tailored advertising and marketing, for the purpose of avoiding to send You irrelevant advertising or other types of irrelevant marketing, to measure the success and outreach of our digital marketing and for other promotional purposes. Such is the case when Storytel uses remarketing features and impression, interest and demographic reporting in Google Analytics, uploads custom audiences to e.g. Facebook and Google and when we inform our business partners, such as Facebook and Google, that a certain marketing measure generated a new specific customer or a number of new customers as the case may be.
10.3 Storytel may also disclose personal data to companies that process personal data on our behalf, such as our IT system providers, customer service companies and affiliates. If personal data is disclosed to such companies that process data on Storytel’s behalf, Storytel enters into data processing agreements with such parties in order to ensure that a high level of security for Your personal data is maintained.
10.4 Personal data may also be disclosed, if needed, to comply with statutory legal requirements or requirements from authorities or agencies, to safeguard Storytel’s legal interests or to detect, prevent, or pay attention to fraud and other security or technical issues.
11. LINKS TO EXTERNAL WEBSITES
Information provided by Storytel may contain links to websites operated or owned by someone other than Storytel. Storytel is not responsible for the processing of personal data carried out on these websites. Storytel encourages You to inform yourself of the privacy practices of the respective website controllers.
13. YOUR RIGHTS UNDER EU/EEA LAW
13.1 If You are located in the EU/EEA, or if Your personal data is otherwise being processed by a Storytel entity within the EU/EEA, You have the following rights (in addition to withdraw Your consent):
Right of access: You have a right to ask whether or not we have personal data about You and, if that is the case, request information on what personal data we have about You and why and how we process it.
Right to rectification: We are required to rectify inaccurate personal data, or to complete personal data that is incomplete, on request.
Right to erasure (right to be forgotten): We are in some circumstances required to erase Your personal data on Your request.
Right to restriction of processing: We are in some circumstances required to restrict our use of Your personal data on Your request. In such cases, we may only use the personal data for certain limited purposes set out by law.
Right to data portability: Under certain circumstances, You may have the right to receive their personal data to which we have access, in a structured, commonly used and machine-readable format and with a right to transmit those data to another entity.
Right to object: In some cases, You may object to our use of Your personal data. We may then be required to stop using the personal data. One example when this might apply is when personal data is used for marketing and profiling purposes.
13.2 Please note that some of the rights above may only be exercised in certain situations, e.g. the right to data portability, which only applies when the processing is carried out on the basis of contractual necessity or consent and if the processing is carried out by automated means and the right to have data deleted, which only applies when data is processed based on a balance of interest or consent. In case You have any questions regarding how Storytel processes Your personal data, want to exercise any of Your rights or want to know more about the rights, You may contact us as indicated below.
E-mail address: firstname.lastname@example.org
Address: Attention: Support, Box 24167, 104 51 Stockholm, Sweden
13.4 You are also entitled to lodge a complaint with a supervisory authority if You consider that Your personal data has been processed in contradiction with applicable data protection legislation. If You are a resident of, if Your place of work is in or if the alleged infringement of data protection law has taken place in Sweden, You may lodge Your complaint to the Swedish Data Protection Authority.
Last reviewed on 2 November 2018
Storytel Sweden AB