PRIVACY POLICY
Last Updated: 01/06/2023
We, WebGroup Czech Republic, a.s., a company registered and existing under the laws of the Czech Republic, with registration number 291 45 465, having its registered office at Krakovska 1366/25, 110 00 Prague 1, Czech Republic (hereinafter referred to as “WebGroup” or “we”), as the provider of the website www.xvideos.com (hereinafter referred to as the “Website”), are the responsible data controller in the sense of Article 4(7) of European Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the “GDPR”).
The Website will be used by the following categories of users:
a) Category 1: a visitor of the Website who does not create an account on the Website and cannot upload any videos;
b) Category 2: a user of the Website who creates an account, but does not upload any videos or other material;
c) Category 3: a user of the Website who creates an account and uploads videos or other material; and
d) Category 4: a user of the Website who creates an account and participates in revenue sharing.
Subject to our Terms of Service at https://info.xvideos.com/legal/tos (hereinafter referred to as “Terms of Service”) and as explained in the Privacy Notice at https://info.xvideos.com/legal/privacynotice (hereinafter referred to as the “Privacy Notice”), we do not process personal data of the Category 1 users (i.e., the visitors of the Website who have not created an account). Instead, in such instances, we use cookies for the purposes identified in our Cookie Policy, which is available at https://info.xvideos.com/legal/cookiepolicy (hereinafter referred to as the “Cookie Policy”). For more information, including on how to manage your preferences on, and disable, cookies, please refer to our Cookie Policy.
For the individuals who fall within the remaining three categories of users listed above (i.e., Category 2; Category 3; and Category 4), personal data is processed in line with this Privacy Policy (hereinafter referred to as the “Privacy Policy”).
This Privacy Policy for Categories 2, 3 and 4 above describes how we collect, use, process, and disclose your information, including personal information, in conjunction with your access to and use of the Website. We process personal data only in accordance with this Privacy Policy and the relevant legislation, in particular GDPR. By accessing the Website, you acknowledge that you have read this Privacy Policy and understand that your personal data may be processed, including as explained below any data that may reflect or concern your sex life, sexual preferences, and sexual orientation. You also acknowledge that without your consent with personal data processing, we may be unable to comply with our contractual obligations, may be unable to offer you the entire range of products and services available on the Website, and may prevent you from creating an account on this Website.
By accessing this Website and creating an account, you consent to WebGroup processing your personal data, including data that may reflect or concern your sex life, sexual preferences, and sexual orientation. You grant your consent on the basis that WebGroup undertakes to rely on this basis only where so is necessary and proportionate in order to be able to carry out its contractual obligations and protect its legitimate business aims.
1. INFORMATION WE COLLECT
Personal data refers to any information that tells us something about you or that allows us to identify you, including your name, location data, and online identifiers.
Subject to the Terms of Service and as explained in the Privacy Notice we do not process personal data of the visitors of the Website who have not created an account (i.e., those that fall within the Category 1 of users, as set out above in this Privacy Policy). Instead, we use cookies for the purposes identified in our Cookie Policy, where you may find additional information regarding cookies, including on how to manage your preferences on and to disable cookies.
For the individuals who have created an account on or through this Website (i.e., those individuals who fall within the Category 2, Category 3, or Category 4 of users as set out above in this Privacy Policy), we process the following information mentioned in the chart below:
PERSONAL DATA PROCESSED | PURPOSE OF PROCESSING | CATEGORIES OF DATA SUBJECTS | LEGAL TITLE OF PROCESSING | RETENTION / DELETION PERIOD |
---|---|---|---|---|
Standard personal data | ||||
email address | Provide, Improve, and Develop the Website: enable you to access and use the Website (creation of user account; login to user account) provide customer service; send you service or support messages, updates, security alerts, and account notifications. | registered user of the website | performance of the contract | for the duration of the contractual relationship (duration of the user account) + 3 months from its termination, or for the period necessary for the proper exercise of legal claims arising from the relevant contract |
email address | Your direct contact with us: Respond to your queries regarding the service or your complaints and any other queries you may have for which you contact us; Provide you with further information on privacy policies. | registered user of the website | performance of the contract | for the duration of the contractual relationship (duration of the user account) + 3 months from its termination, or for the period necessary for the proper exercise of legal claims arising from the relevant contract |
email address | Protect us and our Users and Comply with Legal Obligations: comply with our legal obligations, including assistance in the prevention of crimes (blocking child sexual abuse material or non-consensual sexual acts); communication with law enforcement authorities; communicate with you regarding any abuse reports and/or copyright infringement reports; protecting the controller's assets, enforcing/protecting the controller's rights under customer contracts. | registered user of the website | the legitimate interests of the controller; performance of a legal obligation | for the duration of the contractual relationship (duration of the user account) + 4 years from its termination, or for the period necessary for the proper exercise of legal claims arising from the relevant contract |
email address | Protect us and our Users and Comply with Legal Obligations: handling counter-notification requests in accordance with Section 6C of the Terms of Service (and content takedown requests due to copyright protection under the DMCA). | users who have submitted a counter-notification request | the legitimate interests of the controller | 4 years from the end of the DMCA procedure, or for as long as necessary to properly assert the resulting legal claims |
name and surname of the user | Provide, Improve, and Develop the Website: enable you to access and use the Website (age verification); user profile customization; enable you to communicate with other users (chat function) and search for other customer's user account (filtering of user account search results); provide customer service. | registered user of the website | performance of the contract | for the duration of the contractual relationship (duration of the user account) + 3 months from its termination, or for the period necessary for the proper exercise of legal claims arising from the relevant contract |
name and surname of the user | Protect us and our Users and Comply with Legal Obligations: comply with our legal obligations, including assistance in the prevention of crimes (blocking child sexual abuse material or non-consensual sexual acts); communication with law enforcement authorities; protecting the controller's assets, enforcing/protecting the controller's rights under customer contracts; resolve any disputes with any of our users and enforce our agreements with third parties; | registered user of the website | the legitimate interests of the controller; performance of a legal obligation | for the duration of the contractual relationship (duration of the user account) + 4 years from its termination, or for the period necessary for the proper exercise of legal claims arising from the relevant contract |
name and surname of the user | Protect us and our Users and Comply with Legal Obligations: handling counter-notification requests in accordance with Section 6C of the Terms of Service (and content takedown requests due to copyright protection under the DMCA). | users who have submitted a counter-notification request | the legitimate interests of the controller | 4 years from the end of the DMCA procedure, or for as long as necessary to properly assert the resulting legal claims |
address | Provide, Improve, and Develop the Website: user profile customization; enable you to communicate with other users (chat function) and search for other customer's user account (filtering of user account search results); provide customer service. | registered user of the website | performance of the contract | for the duration of the contractual relationship (duration of the user account) + 3 months from its termination, or for the period necessary for the proper exercise of legal claims arising from the relevant contract |
address | Protect us and our Users and Comply with Legal Obligations: comply with our legal obligations, including assistance in the prevention of crimes (blocking child sexual abuse material or non-consensual sexual acts); communication with law enforcement authorities; protecting the controller's assets, enforcing/protecting the controller's rights under customer contracts. | registered user of the website | the legitimate interests of the controller; performance of a legal obligation | for the duration of the contractual relationship (duration of the user account) + 4 years from its termination, or for the period necessary for the proper exercise of legal claims arising from the relevant contract |
date of birth | Provide, Improve, and Develop the Website: enable you to access and use the Website (age verification); user profile customization; enable you to communicate with other users (chat function) and search for other customer's user account (filtering of user account search results); provide customer service. | registered user of the website | performance of the contract | for the duration of the contractual relationship (duration of the user account) + 3 months from its termination, or for the period necessary for the proper exercise of legal claims arising from the relevant contract |
date of birth | Protect us and our Users and Comply with Legal Obligations: comply with our legal obligations, including assistance in the prevention of crimes (blocking child sexual abuse material or non-consensual sexual acts); communication with law enforcement authorities; protecting the controller's assets, enforcing/protecting the controller's rights under customer contracts. | registered user of the website | the legitimate interests of the controller; performance of a legal obligation | for the duration of the contractual relationship (duration of the user account) + 4 years from its termination, or for the period necessary for the proper exercise of legal claims arising from the relevant contract |
photo | Provide, Improve, and Develop the Website: user profile customization; | registered user of the website | performance of the contract | for the duration of the contractual relationship (duration of the user account) + 3 months from its termination, or for the period necessary for the proper exercise of legal claims arising from the relevant contract |
IP address | Provide, Improve, and Develop the Website: generating internal statistics and reports as part of the controller's business activities, improving the controller's services; conducting analytics and research (in order to find out how visitors use the website and to improve their user experience). | registered user of the website | the legitimate interests of the controller | for the duration of the contractual relationship (duration of the user account) |
IP address | Protect us and our Users and Comply with Legal Obligations: comply with our legal obligations, including assistance in the prevention of crimes (blocking child sexual abuse material or non-consensual sexual acts); communication with law enforcement authorities; protecting the controller's assets, enforcing/protecting the controller's rights under customer contracts; detect and prevent fraud, spam, abuse, security incidents, and other harmful activity; conduct security investigations and risk assessments. | registered user of the website | the legitimate interests of the controller | for the duration of the contractual relationship (duration of the user account) + 6 months from its termination, or for the period necessary for the proper exercise of legal claims arising from the relevant contract |
date and time of login | Provide, Improve, and Develop the Website: generating internal statistics and reports as part of the controller's business activities, improving the controller's services; conducting analytics and research (in order to find out how visitors use the website and to improve their user experience). | registered user of the website | the legitimate interests of the controller | for the duration of the contractual relationship (duration of the user account) |
date and time of login | Protect us and our Users and Comply with Legal Obligations: comply with our legal obligations, including assistance in the prevention of crimes (blocking child sexual abuse material or non-consensual sexual acts); communication with law enforcement authorities; protecting the controller's assets, enforcing/protecting the controller's rights under customer contracts; detect and prevent fraud, spam, abuse, security incidents, and other harmful activity; conduct security investigations and risk assessments. | registered user of the website | the legitimate interests of the controller; performance of a legal obligation | for the duration of the contractual relationship (duration of the user account) + 6 months from its termination, or for the period necessary for the proper exercise of legal claims arising from the relevant contract |
device information (type of internet connection, type of device) | Provide, Improve, and Develop the Website: generating internal statistics and reports as part of the controller's business activities, improving the controller's services; conducting analytics and research (in order to find out how visitors use the website and to improve their user experience). | registered user of the website | the legitimate interests of the controller | for the duration of the contractual relationship (duration of the user account) |
device information (type of internet connection, type of device) | Protect us and our Users and Comply with Legal Obligations: comply with our legal obligations, including assistance in the prevention of crimes (blocking child sexual abuse material or non-consensual sexual acts); communication with law enforcement authorities; protecting the controller's assets, enforcing/protecting the controller's rights under customer contracts; detect and prevent fraud, spam, abuse, security incidents, and other harmful activity; conduct security investigations and risk assessments. | registered user of the website | the legitimate interests of the controller; performance of a legal obligation | for the duration of the contractual relationship (duration of the user account) + 6 months from its termination, or for the period necessary for the proper exercise of legal claims arising from the relevant contract |
data about your interactions with the Website, (e.g. records of videos viewed) | Provide, Improve, and Develop the Website: personalisation and customisation of the user experience (for example, offering suggestions for other videos you might be interested in or sorting search results). | registered user of the website | the legitimate interests of the controller | for the duration of the contractual relationship (duration of the user account) |
Special categories of personal data ("sensitive personal data") | ||||
race | Provide, Improve, and Develop the Website: enabling to search for a customer's user account by other customers (filtering of user account search results according to the provided information) and interaction between individual customers (chat function). | registered user of the website | consent from the data subject | for as long as the purpose for which the consent was granted lasts (no longer than for the duration of the website customer's user account), or until the consent is withdrawn; |
ethnicity | ||||
religion | ||||
sexual preference (possible choices: female, male, couple, gay male, gay couple, lesbian, lesbian couples, transvestite, transsexual, transsexual couple, dominant, submissive, transsexual male, transsexual female, transvestite male, non-binary) | ||||
role: dominant/submissive | ||||
sexual orientation ("category") (straight/gay/trans) | Provide, Improve, and Develop the Website: basic customer segmentation (displaying content corresponding to the selected sexual orientation); personalize and customize your experience (such as making suggestions or ranking search results). | registered user of the website | the legitimate interests of the controller; consent from the data subject | for as long as the purpose for which the consent was granted lasts, or until the consent is withdrawn; |
Cookies | ||||
nb_thumbs_cols_XXX | Proper display of the Website. It keeps the number of column of thumbs. | visitor/user of the website | the performance of the contract and the legitimate interests of the controller | 90 days |
thumbloadstats_vthumbs | High availability and performance of the Website. It measures the thumb loading speed. | 90 days | ||
static_cdn | High availability and performance of the Website. It allows us to know which content delivery network is used. | 168 days | ||
html5_networkspeed | High availability and performance of the Website. It allows us to keep track of the user’s internet speed. | 30 days | ||
session_blih | Increasing account security. It keeps local login history for account security (trusted browser). | 60 days | ||
session_rem_XXX | Increasing account security. It is used to remember the users’ browsers for double authentication (2FA). | 30 days | ||
session_token | Enabling login to user account. It stores user logged information, such as the user login detail and some information about the account. | 30 days | ||
hide_xmsg | Proper display of the Website. It allows us to know whether the age confirmation window has already been displayed. | 15 days | ||
last_subs_check | High availability and performance of the Website. It avoids making too much queries to the server. | 5 minutes | ||
chat_deco | Proper display of the Website. It allows us to know whether the user is logout from chat to avoid making request in chat. | 10 minutes | ||
disclaimer_vpn_display | Proper display of the Website. It allows us to know whether the user has closed the disclaimer. | 90 days | ||
chat_data_c | Proper display of the Website. Stores your chat private key for encryption. | 168 days | ||
xv_nbview | Offering more relevant content. It allows us to know how many videos has been played on the Website for the last 8 hours. | 16 hours | ||
wpn_ad_cookie | Proper display of the Website. It rotates the advertising banners every 24 hours to avoid displaying the same advertisements to the user. This cookie does not track your browsing history nor is used for user profiling or advertisement personalisation. | 7 days | ||
wgvid_user_msg | Proper display of the Website. It allows us to know whether the user has already read a notification. | 90 days | ||
last_views | Offering more relevant content. It allows us to suggest similar videos to those previously watched by a user on the Website. | visitor/user of the website | consent from the data subject | 3 months |
pending_thumb | Offering more relevant content. Avoids re-suggesting videos that have already been watched. | 3 hours | ||
html5_pref | Better video playback. It allows us to apply the users’ preferences in using video player. | 30 days | ||
session_ath (HTML5 Local Storage) | Optimizing the Website display. It remembers whether the user prefers to browse the website in light or dark mode. | 90 days |
Please be informed in detail about the processing of the following categories of information:
1.1 Information You Give to Us.
We collect your personal information that we receive from you when you use the Website, including personal information you provide to us including when you: watch a video or other content of the Website, enquire or make an application for our services, register to use and/or use any of our services and when you communicate with us through email, the Website or portal, or any other electronic means.
Such information may include:
- your name including first name and family name, gender, date of birth, email address, billing address, username, password, photograph, nationality and country of residence, etc.;
- additional personal information (e.g. data reflecting or concerning a natural person’s sexual orientation).
For more information please see the chart above.
We do not accept that we are a joint controller of personal data of any third parties (other than you) available or contained in any of the forms submitted, or otherwise provided to us, by you (hereinafter referred to as “Third Party Personal Data”), and disclaim any and all liability in connection with the Third Party Personal Data.
1.2 Information We Automatically And Necessarily Collect from Your Use of the Website.
We collect information about the services that you use and how you use them, such as when you watch a video on the Website or interact with our content. This information includes:
- Device information. We collect device specific information: IP address, access dates and times, information about the type of internet connection and the type of used device and cookie data.
- Geo-location Information. When you use certain features of the Website, we may collect information about your approximate location as determined through your IP address.
- Usage Information. We collect information about your interactions with the Website such as the content you view.
- Cookies. We use cookies and similar technologies (HTML5 Web Storage). For more information on our use of these technologies, see our Cookie Policy.
1.3 Information We Collect from Third Parties and Third-Party Links.
We may collect information, including personal information that others provide about you when they use the Website, or obtain information from other sources and combine that with information we collect through the Website. We do not control or supervise and are not responsible for how the third parties providing your information process your personal data, and any information request regarding the disclosure of your personal information to us should be directed to such third parties.
Furthermore, to the extent permitted by applicable law, we may receive additional information about you, such as fraud detection information and combine it with information we have about you.
Please note that this Website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control or supervise these third-party websites and are not responsible for their privacy statements. When you leave our Website, we encourage you to read the privacy policy of every site you visit.
1.4 Accuracy of Information.
It is also important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.
2. HOW WE USE INFORMATION WE COLLECT
We use, store, and process information, including personal information, about you to provide, understand, improve, and develop the Website, to protect us and our users and to comply with our legal obligations. We also use this information to offer you tailored content – like giving you more relevant search results.
For the avoidance of doubt, we do not accept that we are a joint controller of personal data of any third parties (other than you) available or contained in any user Submission uploaded by you pursuant to the Terms of Service, and disclaim any and all liability in connection with the Third Party Personal Data.
2.1 Provide, Improve, and Develop the Website.
- Enable you to access and use the Website.
- Enable you to communicate with other users.
- Operate, protect, improve, and optimize the Website, such as by performing analytics and conducting research.
- Provide customer service.
- Send you service or support messages, updates, security alerts, and account notifications.
- To operate, protect, improve, and optimize the Website, and personalize and customize your experience (such as making suggestions or ranking search results), we conduct basic profiling (customer segmentation) based on your interactions with the Website and your viewing history on the Website.
Lawful bases: we rely on the following three lawful bases to process your personal data for the specific purpose of providing, improving and developing the Website as described above.
- we process this information in order to adequately perform the contract with you;
- our legitimate business interests in processing your personal data, specifically for the purpose of improving the Website and our users’ experience with it, which we have determined can only be achieved by processing your personal data. We consider the processing of your personal data to be proportionate with your interests, rights and freedoms;
- to the extent necessary to perform our contract with you and customise your experience, consent to process special categories of data.
2.2 Protect us and our Users and Comply with Legal Obligations.
- Detect and prevent fraud, spam, abuse, security incidents, and other harmful activity.
- Conduct security investigations and risk assessments, including any reports third parties may file about you or the content you have uploaded pursuant to the Terms of Service.
- Comply with our legal obligations, including assistance in the prevention of crimes, such as blocking child sexual abuse material or non-consensual sexual acts.
- Resolve any disputes with any of our users and enforce our agreements with third parties.
- Communicate with you regarding any abuse reports (if you do not submit them anonymously), or any copyright infringement takedown requests or counter notifications (which cannot be submitted anonymously) that you may file pursuant to the Terms of Service.
- Enforce our Terms of Service and other terms and policies.
Lawful bases: we rely on the following three lawful basis to process your personal data:
- legal obligations to which we are subject, which may include disclosing your personal data to a third party or competent national authorities.
- consent to process certain special categories of personal data to the extent necessary to achieve the purposes set out above, such as transferring limited categories of your personal data to third parties against whom you have filed a copyright infringement takedown request under the Digital Millennium Copyright Act (hereinafter referred to as the “DMCA”) or to whom you are responding with a copyright counter-notification, in accordance with the Terms of Service and as further described below,
- legitimate interests in protecting our business, which includes protecting the Website and our reputation as a law-abiding business to the extent appropriate. We consider the processing of your personal data to be proportionate with your interests, rights and freedoms.
2.2.1 Personal data processed when filing a takedown request or a counter-notification pursuant to paragraph 6C of the Terms of Service.
Although our Company is based outside the United States, we respect the rights of copyright owners and thus have implemented certain policies in an effort to voluntarily comply with laws, such as the DMCA, which are described further below.
What is the Digital Millennium Copyright Act (“DMCA”)?
The takedown process provided for by the DMCA is a tool for copyright holders to have user-uploaded material that infringes their copyrights taken down from our Website. The process entails the copyright owner (or the owner’s agent) sending a copyright infringement takedown request to a service provider requesting that the provider remove material that the copyright owner contends is infringing their copyright(s). Once a website provider is in receipt of the takedown request, it is required to send the takedown request to the uploader of the material in question. The uploader is subsequently given a chance to respond to the takedown request. The mechanism serves as an initial step for the copyright holder and the uploader to resolve any dispute relating to the copyrighted material at issue. For that purpose, WebGroup is required to process and transfer limited personal data between the individuals submitting a takedown request (i.e., the alleged copyright holder) and the uploader. In compliance with the DMCA, we only accept copyright infringement takedown notices from content owners or someone officially authorized to act on their behalf. To read more about the requirements of a complete notice, we invite you to visit https://www.dmca.com/faq/What-is-a-DMCA-Takedown, and consult with your own counsel. (We do not and cannot provide you with legal advice, and none should be implied from this Privacy Policy or anything else on our Website.) Information provided for purposes of copyright takedown requests / counter-notifications will be forwarded to the uploader of the material at issue.
What lawful basis do we rely upon to process your personal data when you file a copyright infringement takedown request / counter-notification pursuant to the DMCA?
For the specific purpose of our review of your copyright infringement takedown request / counter-notification which you may have filed pursuant to paragraph 6C of the Terms of Service, you are required to provide the information needed to make a valid request, i.e.: (a) takedown website URL and (b) statement regarding the ownership of this content. We will process your personal data in order to further our legitimate interests as an adult entertainment business that respects intellectual property, abide by the law and acts appropriately when reports of copyright infringements are made. For those legitimate purposes, we process your personal data we deem necessary in order to be able to review the takedown request / counter-notification that you may have submitted pursuant to paragraph 6C of the Terms of Service and to allow us to contact you about its content. We consider the processing of your personal data to be proportionate with your interests, rights and freedoms.
What lawful basis do we rely upon to transfer your personal data to the addressee of the copyright infringement takedown request / counter-notification pursuant to the DMCA?
In line with the mechanism provided for under the DMCA, explained above, we will also share with the takedown request addressee or the counter-notification addressee the following personal data to comply with and follow the prescribed steps under the DMCA: your name, your contact information, as well as the contents of your takedown request or your counter-notification. We rely on your consent to transmit your personal data to the addressees of your takedown request or counter-notifications. By submitting a copyright infringement takedown request you consent to your data being transmitted to the uploader of the material in question in line with and for the reasons explained above and detailed in our Terms of Service. Without your consent, we are unable to process your takedown request or counter-notifications as prescribed under the DMCA.
2.3 Your direct contact with us through our Website or by post, phone, email or otherwise
- Respond to your queries regarding service or your complaints.
- Provide you with further information on privacy policies.
- Any other queries you may have for which you contact us.
Lawful bases: when you contact us directly through our Website or by post, phone, email or otherwise, including for the purposes of exercising your rights under the GDPR or to file any complaints, we will rely on the following two bases to process your personal data:
- We will rely on our legitimate interests as a customer-friendly entertainment business that wants to improve the experience of the customers using our Website, to resolve satisfactorily any complaints made by our customers, or to respond to any requests for further information. We will process your personal data we deem necessary for these legitimate interests. Additionally, in rare cases where we reasonably determine that your direct communications with us or our staff are or become abusive, amount to harassment or otherwise illegal under the applicable laws, we may also process your personal data for these purposes and pass it onto the relevant governmental authorities. We consider the processing of your personal data on the basis of our legitimate interest to be proportionate with your interests, rights and freedoms.
- We may also need to rely on our legal obligations to process your personal data in cases where the applicable law compels us to communicate your personal data exchanged in direct communications with us to the responsible governmental authorities.
3. COOKIE POLICY
Our Website uses cookies and similar technologies (HTML5 Web Storage). To learn more about cookies, please visit our Cookie Policy, which explains how you can manage your preferences.
4. SECURITY
Note that all data is kept in a secure environment. We protect personal data by using appropriate safeguard procedures and measures, in particular:
- We encrypt our services using SSL (you can reach our SSL protected website under https://www.xvideos.com/).
- We use firewalls to protect your information.
- We review our information collection, storage and processing practices regularly, including physical security measures, to guard against unauthorised access to systems.
- We restrict access to personal information to employees, contractors and agents who need to know that information in order to process it for us and who are subject to strict contractual or other legal confidentiality obligations.
If you know or have reason to believe that your account credentials have been lost, stolen, misappropriated, or otherwise compromised or in case of any actual or suspected unauthorized use of your account, please contact us following the instructions in the Contact Us section below.
5. YOUR RIGHTS
You may exercise any of the rights described in this section by adjusting settings via your Website user account and, if it is not possible, you can contact us at our above mentioned address. Please note that we will ask you to verify your identity before taking further action on your request, and if we cannot identify you we cannot act according to your request.
5.1 Managing Your Information.
You may access and update some of your information through your account settings. You are responsible for keeping your personal information up-to-date in a secure place.
5.2 Rectification of Inaccurate or Incomplete Information.
You have the right to ask us to correct inaccurate or incomplete personal information concerning you (and which you cannot update yourself within your account) by contacting us at the address listed in the Contact Us section below.
5.3 Data Access and Portability.
You have a right to request copies of your personal information held by us (although not necessarily in the same format held by us). You are also entitled to request copies of personal information that you have provided to us in a structured, commonly used, and machine-readable format and/or request us to transmit this information to another service provider (where technically feasible). You may exercise this right and download your data in your user account settings by clicking “Export my data”.
5.4 Data Retention and Erasure.
We generally retain your personal information for as long as is necessary for the performance of the contract between you and us, to protect our legitimate interest or legitimate interest of a third party and to comply with our legal obligations on data retention as provided by the applicable laws. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you. To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means.
If you no longer want us to use your information to provide you the service, you can request that we close your account and erase your personal data in your user account by clicking “Delete my whole account”. Please note that if you request the erasure of your personal information:
- Most of the data are deleted right after account deletion, but we keep some information such as (email / login) for another 4 years and IP address for six months, and possibly for the additional time necessary to fulfil our legal obligation and to properly exercise our legal claims, after deletion as necessary for our legitimate business interests, such as fraud detection and prevention, copyright infringement and enhancing safety. For example, if we suspend an account for fraud or safety reasons, or based upon alleged copyright infringement, we may retain certain information from that account to prevent that user from opening a new account in the future.
- We may retain and use your personal information to the extent necessary to comply with our legal obligations.
- Information you have shared with others (e.g., likes, forum postings) may continue to be publicly visible on the Website, even after your account is cancelled. However, attribution of such information to you will be removed. Additionally, some copies of your information (e.g., log records) may remain in our database, but are disassociated from personal identifiers.
- Because we maintain the Website to protect from accidental or malicious loss and destruction, residual copies of your personal information may not be removed from our backup systems for a limited period of time.
5.5 Withdrawing Consent and Restriction of Processing.
Where you have provided your consent to the processing of your personal information by us, you may withdraw your consent at any time by changing your account settings. The withdrawal of your consent does not affect the lawfulness of any processing activities based on such consent before its withdrawal.
Additionally, you have the right to limit the ways in which we use your personal information, in particular where (i) you contest the accuracy of your personal information; (ii) the processing is unlawful and you oppose the erasure of your personal information; (iii) we no longer need your personal information for the purposes of the processing, but you require the information for the establishment, exercise or defence of legal claims; or (iv) you have objected to the processing pursuant to Section 5.6 and pending the verification whether the legitimate grounds of the Website provider override your own.
5.6 Objection to Processing.
You have a right to require us not to process your personal information for certain specific purposes (including profiling) where such processing is based on legitimate interest. If you object to such processing we will no longer process your personal information for these purposes unless we can demonstrate compelling legitimate grounds for such processing or such processing is required for the establishment, exercise or defence of legal claims.
Where your sensitive personal data are processed you may, at any time ask us to cease processing your data by changing your user’s profile settings.
5.7 Lodging Complaints.
You have the right to file a complaint about the data processing activities carried out before the competent data protection authorities either in your country of residence if that country is a member of the EEA or with the Czech Data Protection Office, where WebGroup is headquartered. More information about the Czech Data Protection Office is available at https://www.uoou.cz/en/
6. OPERATING GLOBALLY
Where we transfer, store and process your personal data outside of the EEA we have ensured that appropriate safeguards are in place to ensure adequate level of data protection. We rely on EU Standard Contractual Clauses and/or adequacy decisions issued by competent European authorities. If we are unable to rely on these two bases, we will transfer data outside the EEA to the extent doing do is: (a) necessary for the performance of a contract between you and us; (b) necessary for the conclusion or performance of a contract concluded for your interest between us and another natural or legal person; (c) necessary for the establishment, exercise or defence of legal claims; or (d) any other bases listed in Article 49 of the GDPR if applicable, such as seeking your consent.
We share certain data with the following groups of recipients to the extent we deem it necessary to be able to perform our operations or are compelled to do by law:
- Government authorities;
- Third party service providers;
- Financial institutions;
- Providers of storage systems;
- IT services providers;
- Providers of services necessary for the performance of our activity (administrative activities, archiving, legal advice, receivables management, etc.).
7. CHANGES TO THIS PRIVACY POLICY
We reserve the right to modify this Privacy Policy at any time in accordance with this provision. If we make changes to this Privacy Policy, we will post the revised Privacy Policy on the Website and update the “Last Updated” date at the top of this Privacy Policy. For the individuals who have created an account on or through this Website (i.e., those individuals who fall within the Category 2, Category 3, or Category 4 of users listed on page 1 of this Privacy Policy), we will also send you an email to inform you of any changes. If you disagree with the revised Privacy Policy, you may cancel your account. If you do not cancel your account before the date the revised Privacy Policy becomes effective, your continued access to or use of the Website will be subject to the revised Privacy Policy.
8. CONTACT US
We have appointed a data protection officer (“DPO”) . If you have any questions about this Privacy Policy or our data protection practices, please contact the DPO.
CONTACT DETAILS
WebGroup Czech Republic, a.s, Att. of Data Protection Officer
Email address: dpo@xvideos.com
Postal address:
Krakovska 1366/25
Prague 1
Czech Republic