RCS Business Group
Privacy Policy and Cookie Notice

Revised December 31, 2019

1) INTRODUCTION

The RCS Business Group (“RCS Group”, “RCS”, “we”, “us”, or “our”) is committed to maintaining your confidence and trust as it relates to the privacy of your information. This policy describes how we collect, protect, share and use your information, both offline and online, including (as part of our websites), software, online services and apps (collectively, “Platforms”), and your rights and choices in connection with your information. When we ask you to provide certain information by which you can be identified when using our services, you can be assured that it will only be used in accordance with this Policy.

WHO WE ARE

Within this policy, “RCS” refers to our broadcast software business (RCS originally being an acronym for “Radio Computing Services”).

“RCS Business Group” (also “RCS Group”) is an umbrella group of businesses and companies, owned by iHeartMedia Management Services Inc. In the United States, these are: RCS, Media Monitors, Florical, TestAllMedia (TAM), RateTheMusic (RTM), Mediabase and Hit Predictor. In Europe and the European Union, subsidiaries of iHeartMedia Management Services Inc., include: Radio Computing Services (UK) Ltd, Radiojar, RCS Europe sarl and associated branch offices, RCS Europe SARL, Niederlassung Deutschland, RCS Europe SA, France, Filial Sverige and RCS Europe sarl (SP. Z O.O.) Oddzial W Polsce.

This policy applies to all RCS Group companies and businesses in the European Union and to iHeartMedia in the event that our companies should process personal data of individual persons located in the European Union.

All other RCS Group offices – including those outside Europe – also operate under this Policy.

2) GDPR LEGAL BASIS

Mediabase asserts that it is in our legitimate interest to collect and store personal data from our customers. As a technology company serving music and radio companies worldwide, Mediabase leverages robust, best practice methods to optimize communication between ourselves and our customers and their employees. At present, the immediate and universally supported communication method is email. It is in the legitimate interests of Mediabase to use email, cellphones and landlines to apprise customers and prospects regarding the status of their services; to provide timely updates regarding the progress of support issues; to send advisories regarding account security or planned service outages; and to determine customer preferences and priorities in the marketplace.

Because many other companies use these techniques and tools, our users expect to hear from Mediabase by email, cellphones and landlines throughout the lifetime of their relationship with us.

3) PERSONAL INFORMATION WE COLLECT

Mediabase (and the vendors we hire to perform business functions on our behalf) collect, receive and develop several categories of personal information about you based on the nature of your interactions with us.

Identifiers: We may collect your name, email address(es), phone number, mobile phone number, address, and Mediabase account usernames and passwords. We also collect with which Mediabase client businesses you are affiliated and your title at each.

Purchase and Preference Information: We may collect records of your product activations, purchases, and notification subscriptions.

Payment Information: We collect your credit card or debit card details, including a billing address, when you make a purchase.

Browser, Usage, and Device Information: We, or our analytics providers, may use tracking tools like cookies to automatically collect information about your interactions with our Platforms, including your IP address, computer name, operating system and other hardware metrics of your device or computer.

INFORMATION COLLECTED BY ACTIVITY

Note that some information we collect from you varies based on the nature of your activity:

a. When you visit our websites

When you visit our websites, including Mediabase.com, Mediabase may collect the IP address of your computer, the date and time of your visit, and the names of any files you download, reports you run and music pulled or sampled while within the Mediabase platform.

If you request information by completing the Contact Us form, Mediabase may also store your employer name.

Mediabase web sites use cookies to store information on your computer or device. This information consists of your username and favorite format. Cookies do not expire.

4) SOURCES OF PERSONAL INFORMATION

Mediabase (and the vendors we hire to perform business functions on our behalf) may collect or receive personal information from various sources:

Directly from you: We, along with our service providers, collect personal information from you when you use the Platforms, for example to create an account, update your information, subscribe to features or notifications, use certain features, create a profile, or indicate your preferences or settings.

Automatically from your devices or computers: The computers or devices you use to connect to Mediabase Services and Platforms may send us information about which features and functions you use most frequently. This data will be anonymous and will not contain your personal information or any information about your product databases or settings.

Vendors and service providers: We may receive information about you from our vendors and business directory providers that we hire to help us run our business, including those that host, protect or operate our Platforms; analyze data; collect debts for us; provide customer service; send emails for us; process payments; conduct surveys; fulfill orders; provide electronic coursework or training materials; or provide marketing or advertising services.

Combined information: Information obtained from various sources may be combined to identify patterns in various customer groups.

5) HOW WE USE THE INFORMATION WE GATHER

We may use personal information for the following purposes:

·         To respond to your questions and requests;

·         To provide customer service;

·         To control your access to certain areas and features of the Platforms, such as product-specific support information, documentation and materials;

·         To communicate with you about your account and activities on the Platforms, such as changes to any Mediabase policy;

·         To notify you about updates to your open support issues including progress in resolving issues or changing the status of your issues;

·         To administer the Platforms; diagnose problems with our services; and facilitate site navigation;

·         For market research;

·         To notify you about available software updates; service bulletins; planned network or service outages; or known software or service issues;

·         To improve the Platforms, their features and usability;

·         To track effectiveness of advertising (such as measuring how many people view or click an ad) and for advertising attribution, analytics and reporting;

·         To personalize your Mediabase customer experience, including knowing your preferences for feature operation or notification messages;

·         To send you marketing and promotional messages;

·         To notify you of any security breaches involving your information;

·         To protect against fraud, online threats, protecting the rights of our clients and subscribers; detecting illegal activity; and responding to legal or regulatory compliance obligations;

·         To verify your identity; authenticate you and provide activation or communication services to you; and provide file downloads;

·         To identify electronic classroom and training materials you have purchased and are entitled to access; and to send your certificate to you upon successful course completion;

·         For other lawful purposes disclosed at the time we collect your information or otherwise with your consent.

6) SHARING YOUR INFORMATION

Mediabase may share personal information as described below:

6.1 Vendors and Service Providers: Mediabase may share some personal information with our service providers in order to facilitate, process or streamline our communications with you, deliver our products and services to you, and obtain information about your preferences or your satisfaction with our services and products.

6.2 A representative list of service providers to which Mediabase may disclose personal information is provided below (but note that our service providers may change from time to time, and there may be a delay before this list is updated to reflect such changes):

        SurveyMonkey

        MailChimp

        SendInBlue

        Freshdesk

        Microsoft Office365

6.3 Mediabase does not sell personal information to third parties based on our understanding of the definition of “sell” under California law.

6.4 Business transfers: As we continue to develop our business, we may sell or purchase assets. If another entity acquires us or all or substantially all of our assets, or assets related to the Platforms, your information may be disclosed to such entity as part of the due diligence process and may be transferred to such entity as one of the transferred assets. Also, if any bankruptcy or reorganization proceeding is brought by or against us, all such information may be considered an asset of ours and as such may be sold or transferred to third parties.

Legal compliance: Mediabase may share personal information with other parties to comply with a legal obligation; when we believe in good faith that the law requires it; at the request of governmental authorities conducting an investigation; to verify or enforce our Terms of Use [KE1]  or other applicable policies; to respond to an emergency; or otherwise to protect the rights, property, safety, or security of other parties, visitors to our Platforms, or the public.

Other disclosures: We may share personal information for other reasons we may describe to you from time to time as permitted by law.

Non-personal information: We may share information that has been de-identified or aggregated such that it does not identify or relate to you, with other parties for any lawful purpose. This may include aggregated user statistics about the Platforms or aggregated demographic information about our users.

7) SECURITY OF YOUR INFORMATION

We are committed to ensuring that your information is secure by using reasonable technical, administrative and physical security measures designed to protect your information. However, no electronic data transmission or storage of information can be guaranteed to be 100% secure. Please note that we cannot ensure or warrant the security of any information you transmit to us, and you use the Platforms and provide us with your information at your own risk.

Mediabase routinely performs penetration testing on network nodes to ensure the security technology and protocols are adequately protecting the network and stored information.

If a breach of security is discovered and the breach is likely to pose risk to the persons whose data is impacted, Mediabase will report the breach. The Mediabase IT department is instructed to identify and report any issues of data breach to the designated company officer, who will notify any relevant governing bodies within 72 hours. All impacted users will also be notified of any breach.

8) CONTROLLING YOUR PERSONAL INFORMATION

You may choose to restrict the collection or use of your personal information from your profile page when you login to Mediabase.com.

Marketing Communications: If you do not want to receive promotional communications from us, including advertisements, surveys or other marketing announcements, you can unsubscribe by:

·         Following the link inside the communications you receive to manage your contact preferences

·         Contacting our Privacy Center at privacy@rcsworks.com

·         Calling our Privacy Center at 1-877-774-1013

·         Contacting us by mail at RCS, 445 Hamilton Avenue, White Plains NY 10601.

Please note that if you opt out of marketing oriented communications, we may still send you non-marketing communications such as those regarding your account or ongoing business relationships.

Do Not Track: Some browsers allow for the setting of a Do Not Track marker that conveys a request that the web site visited should not store information about the visitor during the course of their interaction with the web site. Because this is a non-uniform technology without support from most browsers, Mediabase does not observe the Do Not Track requests sent by browsers.

If you are an EU resident, you may request details of personal information that we may hold about you. If applicable, we will promptly correct any information found to be incorrect. Contact Mediabase for assistance, or contact our Privacy Center at 1-877-774-1013 or privacy@rcsworks.com

If you are a California resident , you have certain options and rights under the California Consumer Privacy Act (CCPA). See item 10 below for more information.

9) ACCOUNT DELETION

In accordance with routine data maintenance or housekeeping, Mediabase may delete certain records that contain personal information about you. We are under no obligation to store such personal information indefinitely and disclaim any liability arising out of, or related to, the destruction of such personal information.

REMOVAL PROCEDURE FOR CALIFORNIA RESIDENTS

If you wish to request deletion under provisions of the CCPA for residents of California, you may request deletion of your data from the Mediabase Privacy Request center at https://rcssupport.com/en/privacy/?site=mediabase or by calling the center at 1-877-774-1013.

10) PERSONAL INFORMATION AND YOUR RIGHTS

10.1 YOUR EUROPEAN UNION (EU) RIGHTS

The General Data Protection Regulation (GDPR) affords specific rights to users inside the European Union (EU). You have the right as an individual to manage the personal data we hold about you and make amendments to it if this is necessary and to withdraw any consent in relation to the use of your personal data that you may have given us. If you exercise any of your rights, Mediabase may ask for information from you to confirm your identity and, where applicable, to help Mediabase find your personal data. We will respond within 30 days after we receive a valid request backed up by suitable evidence of your identity.

The specific rights you have under the GDPR are:

·          to know what data Mediabase collects from you, how it is used, and who it is shared with (right to be informed);

·          to see what data is held about you (right of access);

·          to request a summary of the personal data we have about you (right to data portability);

·          to correct and update your personal data if incorrect (right to rectification);

·          to object to processing data in a purpose that is different from that under which the data was collected (right to object);

·          to request suspension of processing temporarily (right to restrict processing);

·          to withdraw your consent (where we have requested and you have given it to enable Mediabase to send you any general information that is not strictly necessary under any contract nor is within our legitimate interests to send to you);

·          to object to certain kinds of processing of your personal data such as automated processing and profiling;

·          to erase your personal data (right to erasure);

·          to complain to the Mediabase -nominated supervisory authority in the European Union which is the Datainspektionen in Sweden. The Datainspektionen may be contacted at PostaddressBox 8114, 104 20 Stockholm, Sweden ( https://www.datainspektionen.se/in-english/contact-us/ )

You have right under GDPR to ask Mediabase not to process your personal information for marketing purposes. To exercise these rights, you should indicate your notification preferences on your user profile when you log in to our web sites and services, or follow the instructions inside the materials you receive that describe how to manage your notification preferences.

10.2 YOUR CALIFORNIA RIGHTS

Residents of California have rights under the provisions of the CCPA (California Consumer Privacy Act):

Access : You have the right to request that we disclose to you the following: (i) the categories of personal information that we have collected about you; (ii) the categories of sources from which we have collected personal information about you; (iii) the business or commercial purpose for collecting or selling your personal information; (iv) the categories of personal information that we have sold about you and the categories of outside parties to whom the personal information was sold; (v) the categories of personal information that we have disclosed about you for our business purposes and the categories of suppliers to whom the personal information was disclosed; and (vi) the specific pieces of personal information that we have collected about you.

Deletion : You can request that we delete the personal information that we maintain about you, subject to certain exceptions.

Sale Opt-out : You can opt-out of the sale of your personal information to a third party by visiting the applicable offering’s Do Not Sell My Information method set forth below. For purposes of this privacy policy, “sell” means the sale, rental, release, disclosure, dissemination, availability, transfer, or other oral, written, or electronic communication of your personal information to an outside party for monetary or other valuable consideration.

To make a request, visit https://rcssupport.com/en/privacy/?site=mediabase , or contact our Privacy Request center at 1-877-774-1013 or privacy@rcsworks.com .

You will not receive discriminatory treatment by Mediabase for exercising privacy rights under the CCPA. 

We may deny certain requests, or fulfill a request only in part, based on our legal rights and obligations. For example, we may retain personal information as permitted by law, such as for tax or other record keeping purposes, to maintain an active account, and to process transactions and facilitate customer requests.

If you exercise any of your rights, Mediabase may ask you for information to verify your identity and, where applicable, to help Mediabase find your personal data.  The verification steps will vary depending on the sensitivity of the personal information and whether you have an account with us.  You may designate an authorized agent to make a request on your behalf.  When submitting the request, please ensure the authorized agent identifies himself/herself/itself as an authorized agent.

c. ADDITIONAL CCPA DISCLOSURES

Under the provisions afforded by CCPA, Mediabase makes the following disclosures about the categories of Personal Information it collects, sells or uses for a business purpose, and indicates the sources and uses of data collected:

Categories of Personal Information Collected in preceding 12 months:

·          Identifiers

·          Information categories listed in Cal. Civ. Code § 1798.80(e)

·          Protected classification characteristics under California or federal law

·          Internet or other similar network activity

Categories of Sources From Whom Personal Information is Collected:

Customers, analytics providers, business partners, third party industry directories

Categories of Personal Information Sold in preceding 12 months:

·          (none)

Mediabase does not sell Personal Information according to our understanding of the CCPA definition of “sell.”

Categories of Personal Information shared with other parties in preceding 12 months, such as service providers, vendors, and business partners:

·          Identifiers

·          Information categories listed in Cal. Civ. Code § 1798.80(e)

·          Internet or other similar network activity

·          Commercial information

·          Professional or employment-related information

Purpose for Collecting Personal Information

·          Providing customer support including account management

·          Training scheduling

·          Sending marketing or support messages

·          Delivering advertisements

·          Web site operation

·          Compiling analytics

·          Fulfilling orders and processing online payments

·          Communicating with you

·          Complying with our legal obligations or protecting our legal rights

·          Protecting against and preventing illegal or inappropriate activity

·          Verifying your identity in relation to CCPA requests

11) CHILDREN

The Platform is not directed to children under 13. We do not knowingly collect, use or disclose personal information from anyone under 13 years of age. If we determine upon collection that a user is under this age, we will not use or maintain his/her personal information without the parent/guardian's consent. If we become aware that we have unknowingly collected personal information from a child under the age of 13, we will make reasonable efforts to delete such information from our records.

12) CHANGES TO THIS POLICY

We reserve the right to update this Policy to reflect changes to our information practices by prominently posting notice of the update on our Sites, and, if required by law, obtaining your consent. Any updates will become effective immediately after posting the updates to this Policy and apply to all information collected about you, or where required. You agree that you will review this Policy periodically.

If we make any changes to this Policy, we will change the “Last Updated” date above.

The provisions of the CCPA require that this policy shall be updated at least once yearly.

If we make any major changes to this Policy – including, but not limited to, changes that materially impact previously collected information about you – we will contact you by email to notify you of the same, and where applicable, obtain your consent. If you do not agree or consent to these updates or changes, do not continue to use the Platform.

13) CONTACT US

If you have any questions about this Policy, or concerning information we may have collected about you and the manner in which it is used, please contact us by email at privacy@rcsworks.com , or call our Privacy Request center at 1-877-774-1013.

You can also contact your Mediabase sales or support office.

For RCS companies in Europe and the European Union, you may also contact:

Data Privacy Manager
RCS Europe
Ostergatan 39
216 19 Malmö
Sweden