TABLE OF CONTENTS

1. Introduction
2. How we process personal data
3. How we collect information
4. Safety measures
5. Your rights
6. Contact us
7. Services for the general public
8. Services that are open to the public and services with user login
9. Services for logging in users
10. Editorial services
11. Email
12. Job seekers
13. Glossary

 

PART 1 – GENERAL PART OF THE PRIVACY POLICY

1. Introduction

Personal information is information that can be linked to you as an individual. This can be name and contact details, but also other information that can be linked to you more indirectly. For BCC Media (hereinafter referred to as BCCM), it is important that people who are registered with us know what kind of personal data we process, so that the those who are registered can safeguard their rights under the data protection legislation.

We will periodically update this privacy policy to adapt to changes in our processing, any changes to the website, changes in legal requirements or other changes. In the event of major changes, we will provide special information about this on our website bcc.media.

2. How we process personal data

The services we provide are described in the chapter ‘Overview of the data we process’.

When you use a service in BCCM, we only store the personal data that is necessary to be able to offer you this service. We do not share your personal data with others unless you have actively given us your consent to do so.

We will never sell your personal information to others, and we delete information we no longer need. To ensure security, personal data is stored in a secure manner. When you provide your personal data to us through one of our services, BCCM is responsible for its processing. Our employees have signed a confidentiality agreement. If we use online services or other companies to do parts of the job for us, we have data processing agreements with them that ensure that your personal data is processed in accordance with your rights and the content of this privacy policy.

Detailed information about what data we store and how it is processed can be found under the overview of the various services in part 2 of this privacy policy.

3. How we collect information

We mainly process data about you in the following cases:

• • You have registered as a user of one of our services.
  • You are registered as a participant, audience member, or employee in connection with one of our productions.
  • You have sent us an inquiry or feedback
  • You have requested access
  • You have applied for a job with us

• • You are registered as a service provider or engaged as a volunteer

 We may also receive information about you from others in the following cases:

• • A deviation report contains information about you
  • A complaint or notification contains information about you
  • A job applicant has given you as a reference

4. Safety measures

BCCM has implemented suitable and sufficient security measures to safeguard the individual’s privacy in accordance with the data protection legislation’s requirements for information security.

5. Your rights

You can exercise your rights by contacting us. See section ‘Contact us’ for more information. You are entitled to a response without undue delay, and at the latest within 30 days.

5.1. Withdrawal of consent

In cases where the basis for processing your personal data is related to consent, you can withdraw your consent at any time, for example by accessing your user profile, by accessing the settings of the Service, or by contacting us.

5.2. Access to your own information

You can request access to what personal data BCCM processes about you.

5.3. Correction of personal data

You can ask us to correct or supplement information about you that is incorrect or misleading. If you have created a user profile in BCC’s member portal, you have the opportunity to go in and make changes to “My profile.”

5.4. Correction of personal data

In some situations, you can ask us to delete information about yourself. Read more about the right to erasure on the Norwegian Data Protection Authority’s website (www.datatilsynet.no).

5.5. Other rights

If you believe that we have registered incorrect personal data about you, you wish to object to the processing of personal data, or you have experienced something that you believe is a breach of privacy regulations, please contact us. See separate section with contact information. You can also complain about our processing of personal data to the Norwegian Data Protection Authority.

6. Contact us

Do you have questions or want to get in touch with us?  You have the right to get answers to inquiries about privacy, and we will do what we can to follow up with you in a good way.

Postal and visiting address
BCC Media STI
Vålerveien 159
NO-1599 MOSS
NORWAY

Organization number.:
925 564 257

Email address:
info@bcc.media

 

PART 2 – OVERVIEW OF THE DATA WE PROCESS

7. Services for the general public

Description and objectives

Provide information about BCC Media and the company’s services, ensure stable and secure operation of the website, publish and disseminate editorial content, respond to inquiries and feedback from readers, and analyze the use of the website for editorial and content improvement.  The bcc.media website is open to the public and stakeholders.

What we store and why

Personal data that is stored is the IP address as well as name and email address for inquiries.

The legal basis for our use of personal data for this purpose is Article 6(1)(f) of the Personal Data Act (Norway), which means that the company has a legitimate interest in processing this personal data.

How long will the data be stored?

Information and inquiries are normally deleted when inquiries have been processed.  For other inquiries, see section 10.

8. Services that are open to the public and services with user login

Description and objectives

Provide streaming service, manage user accounts, provide access to content and enable participation in Bible study projects, including contests, scoring systems, and leaderboards, as well as analyze usage for service improvement.  Applies to the following services:

• • Mobile app and TV app for streaming video content
  • Online streaming service for video content
  • Mobile app for streaming video content for children

To publish and disseminate editorial content, manage user accounts, provide access to content, respond to inquiries, and analyze usage to improve the service. Applies to the following services:

• • Website for children’s content and faith education

Deliver an interactive multimedia concept, manage user accounts, provide access to content, respond to inquiries, and analyze usage to improve the service. Applies to the following services:

• • Website for a multimedia concept for faith education for children

What we store and why

Personal data stored is name, e-mail, user ID, IP address, and in some specific projects and/or services age, gender and local church are stored.

The processing basis for our use of personal data for log-in users (members) is Article 6 (1) (a) and Article 9 (2) (a) of the Personal Data Act (Norway), which requires that the data subject has consented to the processing of their personal data for one or more specific purposes.

For the general public, the legal basis for processing is Article 6(1)(a).

How long will the data be stored?

The personal data is not normally deleted unless the user requests this.

9. Services for logging in users

Description and objectives

Mobile and desktop app for streaming audio with user profile.

Online audio streaming service with user profile.

Manage user accounts, provide access to content and enable interactive participation in Bible study projects, including contests, scoring systems and leaderboards, as well as respond to inquiries and analyze usage to improve the service.  Applies to so-called engagement pages.

What we store and why

Personal data stored is name, e-mail, user ID, IP address, viewing and listening history, and usage patterns.  In some specific projects and/or services, age, gender, and local church are stored.

The legal basis for our use of personal data for this purpose is Article 6(1)(a) and Article 9(2)(a) of the Personal Data Act (Norway), which requires that the data subject has consented to the processing of their personal data for one or more specific purposes.

How long will the data be stored?

The personal data is not normally deleted unless the user requests this.

10. Editoral services

Description and objectives

Plan, produce, publish, and archive

• • audiovisual productions with identifiable participants
  • audio content such as podcasts and music with identifiable participants

Produce and publish articles and editorial material with identifiable persons where relevant.

Long-term storage and reuse of editorial material for documentation, history and future publication.

What we store and why

Personal data that is stored can be contributors, audiences, and employees. The information stored may be name, email, telephone number, image/video recording or audio recording.

The legal basis for our use of personal data for this purpose is Article 6(1)(a) and Article 9(2)(a) of the Personal Data Act (Norway), which requires that the data subject has consented to the processing of their personal data for one or more specific purposes.

How long will the data be stored?

Recordings that are archived will normally not be deleted as long as they are considered relevant to the business. 

11. Email

Description and objectives

We use email to carry out our work tasks.

Emails sent to shared email addresses (not personal) are handled by an inquiry system. Security features that protect against unauthorized access are used for all receipt and storage of email.

We recommend that you do not send us sensitive information directly by email. If we need such information to process the case, we will ask for this later.

What we store and why

The legal basis for our use of personal data for this purpose is legitimate interest. The legitimate interest is to be able to perform tasks for/answer inquiries from users.  Email history and email addresses are stored for as long as it is deemed necessary for the case.

How long will the data be stored?

Emails we have received will be deleted when they are no longer necessary for our daily work. In practice, this means that such emails should not normally be stored for longer than two years. 

12. Job seekers

Description and objectives

If you apply for a job at BCCM, we need to process information about you in order to assess your application. The recruitment process involves processing the information you provide to us through the documents you send us, including applications, CVs, diplomas and certificates. In addition to any interviews, BCCM may also conduct its own investigations, typically interviews with the job applicant’s references.

Purpose

The legal basis for our use of personal data for this purpose is legitimate interest. The legitimate interest is to be able to have the necessary documentation to assess the application from the data subject.

How long will the data be stored?

Job applications are stored at BCCM and deleted within 6 months. Exceptions to this must be agreed in each individual case.

13. Glossary

Privacy means a statutory protection of privacy and your personal integrity. The protection includes your right to influence the use and dissemination of personal data about you.

Person means a living, identified or identifiable natural person.

Personal data means information and assessments that can be linked to you as a person. Examples include name, address, telephone number, e-mail address, IP address, car number, photos, and national identity number (both date of birth and social security number). Information about you that tells about your racial or ethnic background, about your political, philosophical or religious beliefs, health conditions, sexual conditions, and any information that you have been suspected, charged, prosecuted or convicted of a criminal offense, as well as membership of trade unions, is defined as sensitive personal data.

Processing of personal data means all operations performed on personal data, such as collection, registration, structuring, storage, and dissemination.

Data controller means the company that is responsible for the processing of personal data, determines the purpose of the processing and the means to be used.

Personal data shall only be processed for specific, explicit, specified and legitimate purposes.

A data processor is a company that processes personal data on behalf of the data controller.

A data processing agreement is an agreement between the data processor and the data controller on how personal data is to be processed.

The legal basis for processing means the statutory basis for the processing of personal data. BCCM uses one of these grounds for processing:

• • the data subject has consented to the processing, cf. the General Data Protection Regulation (GDPR) Art. 6 (1)(a)
  • it is intended to fulfill a contract to which the data subject is a party, cf. GDPR Art. No. 6 (1)(b)
  • it is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental freedoms of the data subject and require the protection of personal data, cf. Art. 6 (1)(f)

Consent means a freely given, specific, informed, unambiguous, and active statement by you that you agree to the processing of specified personal data. A consent can be withdrawn at any time.

BCCM may process personal data if it is necessary to fulfill an agreement to which you are a party. The same applies where the processing is necessary to carry out measures that you have requested prior to entering into the agreement.

BCCM may process personal data if it is necessary to safeguard a legitimate interest that outweighs the individual’s privacy. BCCM uses this processing basis only where the interference with your privacy is very small and where the benefits outweigh the disadvantages.