Plotagon Production AB Wallingatan 18 114 46 Stockholm Sweden
The personal data we collect
Depending on how you use the Services and what plan you sign up for, you may be required to provide certain personal data from various sources:
Information that you provide voluntarily
Profile Information: When you register a Plotagon® account, you will need to provide your email address, a username (which may be your real name or a pseudonym), your age and choose a password. In addition, if you purchase a premium subscription (Plotagon® Education or Plotagon® Studio), you will need to provide your real name, billing address and payment verification information. Payment information: If you pay for your use of the Services and/or additional content you will be asked to provide certain personal data so that we can complete your purchase. In order to do so we collect your name, phone number (optional), email address, delivery/shipping address, and payment information. Optional Data: When setting up your user profile in Plotagon® you may, depending on the service you are using, choose to provide us with additional personal data such as:
- your real name
- a profile picture
- profile description
None of this profile information is mandatory, and any information you do provide may be deleted, edited, changed or amended by you at any time by altering your profile information. All such voluntary information is hereinafter referred to as ”Optional Data”.
Information provided when communicating with us: You may provide us with certain personal data if you choose to contact us by email, use any of the web forms on the Website, or contact us by mail or other offline means. Survey Information: If you participate in any survey, you will provide certain personal data as part of your response, unless you respond anonymously.
Voluntary information provided by teachers and school administrators as part of Plotagon® Education
Students: If you are a student using Plotagon® Education as part of your school’s educational plan we will only store the email address and password that your teacher/school administrator provides us with when setting up your account. Automatically collected information
There is certain information that we collect automatically as the result of your use of the Services. We may, for example, collect information about the type of device you use to access the Services, the operating system and version, your Internet Protocol (IP) address, your general geographic location, as indicated by your IP address, your browser type, the webpages you view on our websites, whether you interact with content available on our website and how as well as information collected through cookies and similar technology, as described in the section Cookies and Logs below.
We may also collect metadata associated with your use of the Software, which may include content creation date, formatting information; location information such as country, region and city (geotags).
Information received from other sources
How we use your personal data
Plotagon® uses personal data to provide you with the Services, which includes using data to improve and personalize your experience. We also use the data to communicate with you, for example, to inform you about new software and security updates.
In short, Plotagon® uses personal data for the following general purposes:
- Providing the Services
- Providing customer support
- Software/service improvements
- Business Operations
- Communication, Marketing and Advertising
- Security, Safety, and Dispute Handling
Providing the Services
We use personal data to provide, operate, support and improve the Services we offer to ensure that our customers can create stories and other content as seamlessly as possible. Your personal data will also be used in order for you to communicate with other Plotagon® users and to identify you as the creator of the animated stories that you share, the comments that you post and/or the other contributions that you make when using the Services. This processing is necessary for the performance of the agreement we have with you.
Providing customer support
We use personal data to respond to customer enquiries, provide customer care and support services. Such support includes but is not limited to technical support. This processing is necessary for the performance of the agreement we have with you, as well as to serve our legitimate interest.
We continually use personal data for research purposes and to develop and improve the Services, including maintaining and improving the performance of the Software and the Website as well as developing and adding new features or capabilities. This processing is necessary to serve our legitimate interest.
We use personal data to aggregate business information that enables us to operate, protect, make informed decisions, and report on the performance of our business. This processing is necessary to serve our legitimate interest.
Communication, Marketing and Advertising
We use the personal data we collect to deliver and personalise our communications with you. For example, we may contact you by email or other means of electronic communication to inform you about new features or services, security or software updates, invite you to take part in a survey. This processing is necessary to serve our legitimate interest.
In addition, we may disclose personal data when we have reason to believe that disclosing this information is necessary to identify, contact or bring legal action against someone who may be causing injury to or interference with Plotagons rights or property, other Website or Application users or anyone else that could be harmed by such activities. This processing is necessary to serve our legitimate interest.
Special note for Plotagon® Education users
If you are a student using Plotagon® Education, please note that your name and email address will only be shared amongst teachers/administrators of the same group.
Our legal basis for processing personal data
Plotagon® uses the following legal grounds to ensure lawful processing of your personal data:
Performance of a contract
The use of your personal data described in this policy is generally necessary in order to perform the agreement you have with us. Amongst others this means that we may need to process your personal data to give you access to the Services, to register and maintain your account, to enable payment services, to help with support issues and to make sure that the Services perform as intended or to respond to your requests.
We may use your personal data for our legitimate interests. For example, we rely on our legitimate interest to analyse and improve the Services and related content, to send you notifications about software updates or information about improvements of the Services or to use your personal data for administrative, fraud detection or legal purposes.
How we may share your personal data
We do not sell or share any personal data about you to or with any person or organization except (a) as authorized by you (e.g. in relation to user generated content), (b) as set forth in the relevant portion of the Services or in any agreement between us, (c) in connection with providing various products or Services to you, either directly or through one or more third parties (such as cloud based storage partners and payment partners), (d) as may be required by law or court order, or (e) as otherwise set forth herein.
We may aggregate your personal data with similar data relating to other users of the Services in order to create statistical information regarding the Services and its use, which we may then share with third parties or make publicly available. However, none of this information would include any email address or other contact information, or anything that could be used to identify you individually.
In the context of a business transfer:
We may share your personal data in the event of a corporate reorganization (e.g. all or substantially all of the assets) relating to Plotagon® are transferred or sold to another entity.
To protect legitimate interests:
We may disclose your personal data if we feel this is necessary in order to protect or defend our legitimate rights and interests, or those of our users, employees, directors or shareholders, and/or to ensure the safety and security of the Services.
For how long we store your personal data
We will send you a reminder by email if you have not accessed your Plotagon® account during a two (2) year period. If you have not accessed your account within ninety (90) days after receiving such notification, your account and related personal data will be permanently deleted, unless we are legally required to retain the information for a longer period of time.
If you have a question about a specific retention period for certain types of personal data we hold about you, please send an email to firstname.lastname@example.org.
International transfers of personal data
The personal data that we collect about you may be processed (and stored) in the region where you reside, for example in the EU or in any other country where Plotagon® or its affiliates, subsidiaries or service providers are located or maintain facilities. Before transferring personal data outside of the EU/EEA, Plotagon® will ensure adequate mechanisms to protect personal data when it is transferred internationally, for example by using the Standard Contractual Clauses as approved by the European Commission.
Cookies and Logs
Your rights to your personal data
We do our best to give you as much choice as possible regarding the amount of personal data you provide to us, and the control you have over that information.
You can do this in the following ways:
- By asking for a copy of the personal data we hold about you;
- By informing us of any changes to your personal data, or letting us know if you wish to correct any of the personal data we hold about you;
- In certain situations, you can ask us to erase, block or restrict the personal data we hold about you, or object to particular ways in which we are using your personal data; and
- In certain situations, you can also ask us to send the personal data you have given us to a third party.
Where we process your personal data based on legitimate interest, you have the right to object at any time to that use of your personal data.
We rely on you to ensure that your personal data is complete, accurate and up to date. Most of the personal data you provide to us can be accessed, removed and/or updated by logging in to your Plotagon® account in the sServices. You can also inform us of any changes to or faults in your personal data by contacting email@example.com.
If you ask us to delete your account (either via the Settings page in the Services or by email), we will do so within a reasonable period of time, but we may need to retain some of your personal data in order to satisfy our legal obligations, or where we have a legitimate reason for doing so.
Plotagon® is always committed to handle any request, complaint or concern that you may have about our use of your personal data in a lawful, fair and transparent way. If, however, you believe that we have not been able to assist with your complaint or concern, you may have the right to file a complaint with the data protection authority (if any) or supervisory authority in your country of residence.
Security and data breaches
We use appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing and against accidental loss, destruction or damage. Your personal data is stored in a secure manner on protected equipment. For example your data is protected with encryption, such as Transport Layer Security (TLS), during transition over the Internet. Only a limited number of personnel have access to our equipment and only persons with a legitimate reason have access to your personal data. Unfortunately, the transmission of your personal data via the internet is not completely secure. While we will endeavour (through the use of appropriate security measures) to protect your personal data, we cannot guarantee the security of such data when it is transmitted to us via the internet. We also ensure that our third-party data centre vendors provide adequate security measures.
Specific requirements for children residing in the United States
Please note that the following Section only applies to users in the United States.
You acknowledge that the Services are not intended for use if you are under thirteen (13) years of age unless you are using our educational software Plotagon® Education and have been given access thereto as part of your school’s educational plan. If you are under thirteen years (13) of age and are using Plotagon® Education in the United States, you shall further ensure that the consent of your parents or legal guardians has been obtained by your school as described below, in compliance with the Children’s Online Privacy Protection Act (“COPPA”).
Plotagon is required under COPPA, with limited exceptions, to obtain verifiable parental consent in order to collect, use, or disclose personal data from you, if you are under 13 years of age (a “Child”). COPPA allows your school to obtain consent for the online collection of personal data from you and other children who are students at your school. If you are a Child who wants to use our Educational Plan, you must first obtain an account from your school.
We provide parents/legal guardians the following choices with respect to the collection, use, retention and disclosure of personal data. A Child’s registration information is always accessible to him/her. A parent/legal guardian has the right to review his/her Child’s personal data, which the parent can obtain by contacting his/her Child’s school. After reviewing the Child’s personal data, the parent/legal guardian may ask us to update or delete the Child’s personal data by requesting such changes through the Child’s school.
If a parent/legal guardian chooses to prohibit any future collection, use or disclosure of the Child’s personal data, the parent/legal guardian may do so by terminating the Child’s account through the school, and requesting the deletion of the Child’s personal data through the school. Upon receiving such request from the Child’s school, we will delete the Child’s account information from our live databases and all the information and data stored for such account. Plotagon® will not have any liability whatsoever for any termination of the account or related deletion of the Child’s personal data. When we delete personal data, it will be deleted from our active databases but may remain in our archives.
Our policy on student data
Please note that the following Section only applies to users in the United States.
We acknowledge that the Family Educational Rights and Privacy Act, 20 U.S.C. § 1232g (“FERPA”) primarily applies to schools that receive funding from the U.S. Department of Education and that Plotagon® will be indirectly affected by the FERPA regulatory framework when providing services to educational institutions in the US.
As required of such schools under FERPA, as an administrator or teacher under an Educational Plan, You agree that You have obtained valid student and parental consent to disclose personally identifiable information to us.
Plotagon® makes the following commitments to schools regulated by FERPA: Plotagon® will protect the confidentiality of any student data and/or personally identifiable information provided to us or any of our representatives. We further acknowledge that we will review and comply with all information security programs, plans, guidelines, standards and policies that apply to our work as a result of the FERPA regulatory framework and will implement and maintain any other reasonable and appropriate security procedures and practices necessary to protect personal data and/or student information from unauthorized access, destruction, use, modification, disclosure or loss.
Plotagon® specifically agrees with schools regulated by FERPA to:
- use personable identifiable student data for no purpose other than in connection with providing the Services for a legitimate and educational interest;
- use reasonable methods, consistent with reasonable industry standards to protect student data from re-disclosure and not to share the student data received under this Agreement with any other entity without the prior written approval of the school responsible under FERPA;
- not to copy reproduce or transmit student data except as necessary to provide the Services in furtherance of a legitimate and educational interest;
- notify the Chief Information Officer for the school responsible under FERPA without undue delay that it has experienced a data breach, breach of security or unauthorized acquisition or use of student data;
- to maintain sufficient backup copies of data files in case of customer system failure or any other unseen event resulting in loss of student data;
- to, upon request of the school responsible under FERPA, promptly provide the school responsible under FERPA with any specified portion of the student data; and
- to, upon request of the school responsible under FERPA, promptly return and/or erase applicable portions of the student data.
Last amended: May 23, 2018