Stan application data protection policy
Stan Group (simplified joint stock company) whose registered office is at 174, rue de Courcelles – 75017 Paris, France, registered under SIREN number 987 729 514) is the publisher of the Stan application, which connects artists and other users (the “Application“).
In this context, Stan Group collects and uses personal data concerning the artists of the Application (the “Artists“) and other users of the Application (the “Users“).
The present policy is intended for Artists and Users and aims to inform you of the conditions under which Stan Group collects and uses data concerning you within the framework of the Application and its services.
Stan Group uses your data in compliance with the French Data Protection Act No. 78-17 of January 6, 1978, as amended (the “Data Protection Act“) and European Regulation 2016/679 of April 27, 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, known as the General Data Protection Regulation (the “GDPR“)..
1 WHAT DATA DO WE USE?
Stan Group uses the following types of data:
| ARTIST side | USER side |
|---|---|
| Identification data: data enabling us and other Artists and Users to identify you. Such as: - First and last name - Date of birth - Pseudonym used on the Application - Profile picture - Profile description/bio - URL addresses of profiles on other social networks and other proof of the Artist's musical activity - Copy of national identity card - Subscriber ID generated by application market platforms (App Store, Google Play Store, etc.) - Kbis extract and URSSAF certificate | Identification data: data enabling us, Artists and other Users to identify you. Such as : - First and last name - Date of birth - City - Pseudonym used on the Application - Profile picture - Subscriber ID generated by application marketplace platforms (App Store, Google Play Store) |
| Interests: musical interests entered by Users on the Application. Such as "Classical", "Electro" or "Gospel". |
|
| Contact data: data enabling us to contact you and issue certain documents such as invoices. Such as : - Email address - Postal address - Phone number | Contact data: data enabling us to contact you and issue certain documents such as invoices. Such as : - Email address - Phone number |
| Authentication data: data enabling us to connect you to your account. Such as : - Password - Name, first name and e-mail address of persons authorized to access your account - Technical data enabling you to remain temporarily or permanently connected to the Application | Authentication data: data enabling us to connect you to your account. Such as : - Password, - Technical data enabling you to remain temporarily or permanently connected to the Application |
| Contractual data: data concerning your subscriptions to the Application, your Stan Coins orders and transactions between Artists and Users. Such as : - Characteristics of subscriptions, orders and transactions offered and concluded on the Application - History of these contracts - Technical data on contract acceptance (date, time, device ID, etc.) |
|
| Banking and financial data: data enabling us to carry out transfers and to publish and keep accounting documents, as well as to monitor financial movements between Stan Group and the Artist. Such as : - Bank details - VAT numbers - Statements and invoices for artists and their beneficiaries - Amounts paid to artists and their beneficiaries - Stan Group's associated commissions | Banking and financial data: data enabling us to produce and store accounting documents, and to track amounts debited. [to be completed on the basis of information on Users provided by the market platforms for applications and information kept on Users for accounting purposes]. |
| Data concerning your interactions with the content of the Application: data concerning the content (videos, audio files, photographs, comments, etc.) that you share and view on the Application and your interactions with this content. Such as : - Content shared on the Application - Content you view or interact with - How you interact with them (e.g., likes or read time) - Constituted playlists - Advertisements viewed to access content, - History of these interactions |
|
| Data concerning your interactions with people: data enabling us to provide you with our messaging service and to correspond with you. Such as : - Messages you exchange on the Application with Stan Group, Users and Artists - Technical data associated with these messages (date, time, device ID, etc.) - Messages you send us outside the Application |
|
| Data concerning your interactions with the Application: data enabling us to track and understand how you interact with the Application and its functionalities. Such as : - Hours, frequency and duration of your activities on the Application - How you use the Application (e.g. time spent on content) - Research history - Characteristics of devices connecting to the Application (e.g. device model and version of operating system - or OS), device identifiers enabling them to be distinguished from other devices (including [to be completed]) |
|
| Audience statistics (Artist side): data concerning the audience for your content and profile Such as : - Audience measurement - Statistics on Artist content and profiles (e.g., most frequently viewed content or profiles) | |
| Sponsorship: data enabling us to track sponsorships on the Application Such as : - Names of other Artists or Users who have sponsored you or whom you sponsor |
|
| Stan Coins: data about your virtual wallet Such as : - Stan Coins units available - Corresponding amount in euros Characteristics of operations leading to the addition or expenditure of Stan Coins | Stan Coins: data about your virtual wallet Such as : - Stan Coins units available - Characteristics of operations that led to the addition or expenditure of Stan Coins |
| Reviews data: data on reviews left by Artists and Users on the online Application (and in particular on application market platforms). Such as : - Content of reviews - Opinion source - Date and time of notices - Stan Group's response, if any |
|
| Complaints and reports: data concerning complaints and reports received by Stan Group and their processing Such as : - Internal or external reports made on or outside the Application concerning content or profiles on the Application or non-compliance with the law or contracts concluded with Stan Group. - Checks carried out - Measures taken in response |
|
| Data concerning the exercise of your rights: data concerning your possible requests based on rights arising from the RGPD and the Data Protection Act (defined below) and their processing Such as : - Requests made - Checks carried out - Measures taken in response |
|
2 WHY DO WE USE OUR DATA?
The table below:
- sets out the different purposes pursued when using your data (referred to as purposes in the RGPD)
- specifies whether the use of your data for these purposes is made on the basis of your consent.
consent or if it is necessary for the performance of contracts or pre-contractual measures or to comply with legal obligations or to pursue the legitimate interests of Stan Group and third parties (and, if so, which); - the data categories used for these different purposes.
These objectives and legal bases are as follows.
| Objectives | Legal basis | Data categories used |
|---|---|---|
| Provision of the Application and its services We use your data to : – creating and maintaining your account and profile; – content sharing and search on the Application, as well as interactions with this content – subscription to Artist profiles – building playlists – proposal, conclusion and the execution of transactions between Artists and Users – management of the Stan Coins virtual wallet – exchanges between Artists and Users by e-mail – the calculation and payment to the Artists of the sums due to them | Execution of your contract(s) with Stan Group | Identification data Contact data Authentication data Contractual data Bank and financial data (Artist side) Data linked to Application content Data on interactions with individuals Audience statistics (Artist side) Stan Coins |
| Access to photos and videos stored on your devices to share content You will be asked for your consent to access the photographs and videos stored on your devices. | Consent | Application content data |
| Authentication If you wish, you can remain logged in to the Application after closing it, without having to re-enter your login details each time you open it. To do this, we need your consent, which is requested when you create your account. You can withdraw this consent at any time via your account settings. | Consent | Authentication data |
| Personalize your experience on the Application We study your references, your content viewing and listening history and [to be completed] to make suggestions and highlight content that you are likely to enjoy. | Pursuit of Stan Group's legitimate interests namely the optimization of services provided on the Application | Centers of interest (User side) Audience statistics ((Artist side) |
| Sponsorship management We use your data to register referrals on the Application and to award the corresponding rewards | Pursuit of Stan Group's legitimate interests i.e. increasing the number of Artists and Users | Sponsorship data |
| Diagnosis and resolution of Application malfunctions We use your data for : – monitoring the proper operation of the Application; – diagnosing and correcting any problems. | Execution of your contract(s) with Stan Group | Application interaction data Person interaction data |
| Protection of the Application, Artists, Users and third parties We use your data for : – verify the identity of the Artists; – identify and manage cases of non-compliance contracts between Stan Group, on the one hand, and Users and Artists, on the other; – detect, prevent and combat illicit behavior, in particular by examining and, in some cases, deleting content reported to us. | Pursuit of legitimate interests: – of Stan Group Namely the safety of its services and the defence of its interests – third parties Protecting the interests, rights and freedoms of third parties | Identification data Contact data Data related to Application content Data on interactions with individuals Complaints and reports |
| Management of declarations and outpayments related to the viewing of content and advertising We use your data for : – follow the listening and viewing of content and advertising on the Application; – make declarations and payments required from holders of intellectual property rights on content and from organizations to which these rights have been entrusted; – enable Stan Group and its to calculate the remuneration due to Stan Group for advertisements displayed on the Application. | Pursuit of Stan Group's legitimate interests i.e. meeting contractual obligations with third parties | Application content data Banking and financial data (Artist side) |
| Statistics on subscriptions and use of the Application We use your data to compile statistics on the use of the Application, for example on the Application's audience, in particular in order to improve the Application and develop new adapted functionalities. | Pursuit of Stan Group's legitimate interests i.e. better knowledge of the use of the Application and improvement of its services | Identification data Data related to Application content Data on interactions with the Application |
| Contractual communication about your contract and subscriptions We use your data to send you information about your contract(s) with Stan Group (e.g. in the event of changes to the general terms and conditions of sale and use, temporary malfunction of the Application or insufficient Stan Coins balance to renew a subscription). | Execution of your contract(s) with Stan Group | Identification data Contact data Contract data Stan Coins |
| On-demand commercial communication on the Application and interactions with your content or content with which you have interacted We use your data to send you, according to your choices, commercial messages related to the Application, its services, your subscriptions and your content. You will be given the opportunity to opt out of these mailings when you create your account. You will also be able to change your mind at any time via your account settings and from emails sent to you. | Pursuit of Stan Group's legitimate interests To promote its activities | Contact data Centers of interest (User side) Data related to Application content |
| Accounting management We use your data for : – edit invoices ; – monitor cash receipts. | Compliance with a legal obligation As provided for in articles L.123-12 et seq. of the French Commercial Code | Identification data Contact data Banking and financial data (for artists and users) |
| Notification management We collect and analyze reviews that may be left by Artists and Users on our Application and third-party platforms. | Pursuit of Stan Group's legitimate interests i.e. better knowledge of the use of the Application and improvement of its services | Notification data |
| Cooperation with financial, judicial and administrative authorities We use your data to respond to injunctions that may be addressed to us to gain access to the data we process. | Compliance with a legal obligation Such as that provided for in article 60-1 of the French Code of Criminal Procedure concerning requisitions from the Public Prosecutor or officers or agents of the judicial police that may target Stan Group as an entity likely to hold information relevant to a criminal investigation. | Any data required for cooperation |
| Handling requests to exercise personal data rights We use your data to respond to requests to exercise rights that may be addressed to us pursuant to Articles 15 et seq. of the RGPD and Article 85 of the French Data Protection Act (described below). | Compliance with a legal obligation Namely that of responding to requests to exercise rights under the RGPD and the Data Protection Act | Information about exercising your rights Any data required to process requests |
| Preservation of evidence for the judicial and extrajudicial defence of Stan Group's interests We store and may use your data to defend ourselves, in particular before the courts, in the event of an infringement of Stan Group's interests (for example, if Stan Group is accused of disseminating illegal content). | Pursuit by Stan Group of its legitimate interests (judicial and extrajudicial defence of its interests) | Identification data Contact data Authentication data Contract data Banking and financial data Data related to Application content Data on interactions with individuals Audience statistics (Artist side) Stan Coins Complaints and reports Information about exercising your rights |
3 IS THE COLLECTION OF YOUR DATA MANDATORY?
The collection of certain data is mandatory.
This collection may be necessary for:
- allow Stan Group to create an account for you on the Application;
- provide you with the services associated with the Application;
- respond to your requests to exercise your rights under the RGPD or the Data Protection Act and described below;
- respond to your requests for technical support or any other request related to the management of your account or the provision of services associated with the Application;
- [to be completed if necessary].
Where data collection is mandatory, this is indicated:
- either by placing an asterisk or a note on our data collection forms;
- or during our exchanges.
The consequences of failing to collect data depend on the situation. For example, depending on the case:
- you will not be able to create an account on the Application;
- you will not be able to use the Application or some of its features;
- Stan Group will not be able to process or accept your request to exercise your rights;
- Stan Group will not be able to process your requests relating to the management of your account or the provision of services associated with the Application;
- [to be completed if necessary].
4 WHERE DOES YOUR DATA COME FROM?
We obtain your data:
- from you (for example, when you create your account on the Application);
- by means o f technical observations from the Application (for example: using cookies to ensure your authentication on the Application);
- via application market platforms (App Store, Google Play, etc.) – for identification, contractual, banking and financial data;
- through platforms on which reviews of the Application are published;
- [to be completed if necessary].
5 WHO RECEIVES YOUR DATA?
Insofar as this is necessary to achieve the aforementioned objectives, Stan Group communicates your data to its internal departments.
To the same extent, your data is also communicated:
- to our service providers for the performance of the services we entrust to them ([to be completed with the categories of service providers]) ;
- Artists and other Users in connection with your use of the Application when this is required for the provision of services at your request (for example, in the case of a transaction request addressed to an Artist);
- financial, judicial and administrative authorities, particularly in the context of legal proceedings, litigation, audit and/or request for disclosure of data, upon request and only to the extent permitted by law and regulation;
- [to be completed if necessary].
6 HOW LONG IS YOUR DATA STORED?
Stan Group only retains your data for the time necessary to achieve the purposes described above.
These periods are indicated in the table below.
| Objectives / Data concerned | Shelf life |
|---|---|
| Data processed for the management of requests to exercise personal data rights | 5 years from exercise of right of objection |
| Data related to directives concerning the fate of your data after your death | As long as the data concerned by the directives are kept |
7 IS YOUR DATA TRANSFERRED OUTSIDE THE EUROPEAN ECONOMIC AREA?
Your data may be transferred outside the European Economic Area.
These transfers must therefore be accompanied by guarantees to protect the data transferred.
These transfers are described in the table below.
| Recipient | Territory | Transfer objectives | Guarantees implemented to protect transferred data |
|---|---|---|---|
| Amazon Web Services Inc. | United States | Hosting video, audio and photo content shared on the Application | Self-certified entity under the Data Privacy Framework, an agreement between the European Commission and the United States aimed at regulating data transfers to the United States. Standard contractual clauses between Stan Group and Amazon Web Services Inc. |
8 WHAT ARE YOUR RIGHTS?
You have rights to control what is done with your data. These rights are summarized in the table below.
| Law concerned | Purpose of the right | Application details |
|---|---|---|
| Right of access Article 15 of the RGPD | You have the right to obtain confirmation as to whether or not your personal data is being used. When they are, you have the right to obtain access to said personal data (in the form of a copy) as well as to various information on this use. | To exercise this right, please write to us at [rgpd@stangroup.fr]. Please note: your right to obtain a copy of your data is limited by the rights and freedoms of others. In particular, this may mean that certain data concerning you but also concerning other people cannot be communicated to you in full. |
| Right of rectification Article 16 of the RGPD | You have the right to have inaccurate personal data corrected. You also have the right to obtain, depending on the purposes of the processing, that personal data concerning you which is incomplete be completed. | To exercise this right, you may: - log in to your account on the Application to directly modify certain information about you; - write to us at [rgpd@stangroup.fr]. |
| Right to erasure or oblivion Article 17 of the RGPD | You have the right to obtain the deletion of your personal data in the following cases: - your data is no longer required for with regard to the purposes for which they were collected or used; - you withdraw your consent to use of your data and their use is not based on any other legal basis for other purposes; - you exercise your right to object to certain uses of your data and we have no compelling legitimate reason on our side to continue those uses; - you exercise your right to object to the use of your data for prospecting purposes; - your personal data is processed unlawfully; - your personal data must be deleted to comply with a legal obligation under European Union or French law. This means that, in some cases, we will not be able to delete all or part of your data, for example : - if the use of this data is still necessary to process your data for certain purposes (for example, to continue to provide you with the services associated with the Application if you do not cancel your subscription); - when Stan Group has a legitimate reason compelling reasons for using the data which take precedence over your reasons for objecting to its use (for example, if we need the data to demonstrate compliance with our legal obligations or to defend our rights). | To exercise this right, you may : - log in to your account on the Application to delete certain information about you directly; - write to us at [rgpd@stangroup.fr]. Please note: the right to erasure does not apply in particular if the processing of your data is necessary: - the exercise of the right to freedom of expression and information; - to comply with a legal obligation that requires processing under EU or French law; - for archival purposes in the public interest, to for scientific or historical research or statistical purposes (if exercising the right to erasure is likely to render impossible or seriously compromise the achievement of the purposes of the processing concerned); - the establishment, exercise or defense of legal claims. This means that in some cases we will not be able to delete your data, for example if Stan Group is legally obliged to retain the data. |
| Right to restrict processing Article 18 of the RGPD | You have the right to limit the use of your personal data in the following cases: – you dispute the accuracy of the data and In this case, we limit their use to the time required to verify their accuracy; – the processing of your data is unlawful but you object to their deletion; – your data is no longer required, but also for you to establish, exercise or defend your rights in court; – you are opposed to the use of your data and we will then restrict such use while we check whether the legitimate grounds for such processing override your rights, freedoms and interests. | To exercise this right, please write to us at [rgpd@stangroup.fr]. In the event of a processing restriction, your data may only be stored, on the one hand, and processed, on the other: – with your consent; – or for the establishment, exercise or defence of legal claims; – or to protect the rights of another natural or legal person; – or for important reasons of public interest to the Union or a Member State. |
| Right to portability Article 20 of the RGPD | You have the right to receive, in a structured, commonly used and machine-readable format, the personal data you have provided to us. You also have the right to transfer this data to another data controller without us having to object. You also have the right to have your data forwarded directly by us to another data controller, where this is technically possible. These rights are only applicable to your data that are processed : – on the basis of your consent or the performance of your contract(s) with Stan Group (see above for details of processing) – and automated processes. | To exercise this right, please write to us at [rgpd@stangroup.fr]. Please note: your right to data portability is limited by the rights and freedoms of others. In particular, this may mean that certain data concerning you but also concerning other people cannot be communicated to you in full. |
| Right to object Article 21§1 of the RGPD | You have the right to object at any time, for reasons relating to your particular situation, to the use of your data for uses based on the pursuit of legitimate interests (see above for details of processing). | To exercise this right, please write to us at [rgpd@stangroup.fr]. Please note: your right to object will not apply if we have a compelling legitimate reason to continue using your data that overrides your interest in stopping the processing (for example, if we need the data to demonstrate compliance with our legal obligations or to defend our rights). |
| Right to object to prospecting Article 21§2 of the RGPD | You have the right to object at any time to the use of your data for prospecting purposes. | To exercise this right, you may : – write to us at [rgpd@stangroup.fr]; – click on the unsubscribe link at the bottom of each email sent to you on the basis of your consent. |
| Right to withdraw your consent Article 7 of the RGPD | You have the right to withdraw your consent at any time to the use of your data based on it, namely : - access to your photos and videos on your device ; - maintaining your authentication on the Application to stay connected; - communications sent to you at your request on the Application, your subscriptions and interactions with your content. | To exercise this right, you may : – log in to your account and edit notification and connection settings from your profile ; – click on the unsubscribe link at the bottom of each email sent to you on the basis of your consent; – modify photo access authorizations and videos in your device settings ; – write to us at [rgpd@stangroup.fr]. |
| Right to control the use of your personal data after your death Article 85 of the French Data Protection Act | You have the right to define, modify and revoke at any time directives concerning the conservation, deletion and communication of your personal data after your death. You also have the right to designate a third party to whom your data may be communicated after your death. | To exercise this right, please write to us at [rgpd@stangroup.fr]. These directives are : – and can, where appropriate, be only be collected and stored by a trusted digital third party certified by the CNIL ; – and may, where appropriate, be collected by us. |
Your request will be processed within one month at the latest. If necessary, this period may be extended by two months, depending on the complexity and number of requests received by Stan Group.
You also have the right to lodge a complaint with the competent authorities:
- in France: the Commission Nationale de l’Informatique et des Libertés (CNIL);
- in Spain: AEPD;
- in the UK: the ICO.
9 CONTACT
If you have any queries regarding this privacy policy, please contact us by e-mail at the following address: [rgpd@stangroup.fr].
You can also write to us at the following postal address: [174 rue de courcelles 75017, Paris].
Update date: [02/12/24].