Privacy & Cookies

peseta.media (the “Website”) is operated by PESETA.MEDIA LTD, a company incorporated and registered in England and Wales with company number 17495003, whose registered office is:

124 City Road
London
EC1V 2NX
United Kingdom

PESETA.MEDIA LTD (“Peseta.Media”, “we”, “us”, “our”) is the controller of personal data where we determine why and how that personal data is processed.

This notice applies to:

• creators whose content may be made available through Peseta.Media;
• publishers, brands, broadcasters, agencies and other licensing customers;
• registered Website users;
• people who contact us or make enquiries; and
• visitors to the Website.

For questions about this notice or to exercise your data-protection rights, contact:

privacy@peseta.media

We collect only information reasonably required to operate Peseta.Media and provide the relevant part of the service.

Account Data

When you register for a buyer or Client account, we may collect:

• your name;
• email address;
• company or organisation;
• job title, where provided; and
• authentication information.

Where passwords are used, we do not store your password in readable form. Passwords are stored using an appropriate one-way hashing process.

Creator Data

When you enter into the Creator General Terms, we may collect:

• your legal name;
• email address;
• telephone number, where provided;
• social-media usernames and handles;
• social-media profile URLs;
• Account information;
• profile information;
• Content associated with Accounts you have identified to us; and
• information concerning the ownership, permissions, releases or clearance status of Content.

Creator Acceptance Records

When you accept the Creator General Terms, we may retain evidence of that acceptance, including:

• your name;
• email address;
• the date and time of acceptance;
• the exact version of the Creator General Terms accepted;
• a copy or record of the full text of those Terms;
• a version identifier or cryptographic fingerprint of the Terms;
• Accounts identified by you;
• answers or declarations provided during the acceptance process;
• the acceptance action taken;
• your IP address; and
• relevant browser, device or technical information.

Unlike general Website Technical Data, the IP address associated with acceptance of the Creator General Terms may be retained in full because it forms part of the evidence that the agreement was entered into.

Creator Acceptance Records may be retained after the creator relationship ends where reasonably necessary to evidence copyright permissions, licences, sublicences, chain of title or the terms under which Content was made available.

Content and Licensing Data

We may collect or generate information relating to:

• Content made available through Peseta.Media;
• Content ownership;
• rights and clearance status;
• licence restrictions;
• Clients to whom Content has been presented or licensed;
• licence dates and terms;
• attribution information; and
• records required to administer existing licences.

Enquiry & Communications Data

If you contact us through a form, email, chat or other communication channel, we may collect:

• your name;
• email address;
• company;
• job title;
• telephone number;
• the contents of your message;
• correspondence with us; and
• information reasonably necessary to respond to your enquiry.

Transaction Data

Where applicable, we may collect:

• licensing plan;
• licences purchased;
• Content downloaded or licensed;
• order history;
• invoices;
• billing information; and
• transaction records.

We do not store full payment-card details ourselves. Where card payments are accepted, payment information is processed by the relevant payment provider.

Profile Data

Where profiles are available, this may include:

• an avatar you upload;
• an automatically assigned avatar;
• display name; and
• other optional profile information.

Technical Data

When you use the Website, we may automatically receive limited technical information such as:

• IP address;
• browser type;
• device type;
• operating-system information;
• security and authentication information; and
• technical logs.

For ordinary Website operation and security, IP addresses may be truncated, hashed or otherwise minimised where appropriate.

Creator Acceptance Records are an exception where a full IP address may be retained for evidential purposes.

Usage Data

If you consent to analytics cookies or similar optional technologies, we may collect information about how you use the Website, such as:

• pages viewed;
• clips viewed;
• searches performed;
• interactions with Website features;
• navigation through the Website; and
• related analytics events.

Where analytics requires consent, this data is not collected through those analytics technologies unless you have consented.

We may separately maintain aggregated service-level statistics that no longer identify an individual, such as total clip views or aggregate licensing activity.

We may obtain personal data:

• directly from you;
• from Accounts that you identify to Peseta.Media;
• from publicly accessible social-media profiles and platforms;
• from Clients or prospective Clients;
• from people who contact us regarding Content, copyright, permissions or ownership;
• from service providers acting on our behalf; and
• from Website and system activity generated when you use our services.

Where we obtain personal data from a source other than you, we use and disclose it in accordance with applicable data-protection law.

Under UK data-protection law, we need a lawful basis for processing personal data.

The basis depends on why we are using the information.

Performing our contract with you

We may process information where necessary to enter into or perform a contract with you.

Examples include:

• creating and administering an account;
• fulfilling a licence;
• providing Content or download access;
• processing an order;
• administering licensing arrangements;
• entering into and administering the Creator General Terms;
• identifying the Accounts covered by the Creator General Terms;
• recording the rights granted to Peseta.Media;
• communicating with creators about Content and licences; and
• sending confirmation that Creator General Terms have been accepted.

Certain information is necessary for us to enter into or administer these arrangements.

If you do not provide required information, we may be unable to provide the relevant service or enter into the relevant agreement with you.

Legitimate interests

We may process personal data where necessary for our legitimate interests or those of a third party, provided those interests are not overridden by your rights and interests.

Our legitimate interests may include:

• operating and developing our content-licensing business;
• identifying and presenting potentially licensable Content;
• maintaining evidence of copyright ownership, permissions and chain of title;
• retaining evidence of creator agreements;
• administering existing licences;
• protecting Peseta.Media and its Clients against copyright or ownership disputes;
• preventing fraud, abuse and misuse;
• maintaining Website and information security;
• investigating rights disputes and complaints;
• protecting and enforcing legal rights;
• defending legal claims;
• understanding non-identifying, aggregated service performance; and
• protecting the legitimate commercial interests of Peseta.Media, creators and Clients.

Where we rely on legitimate interests, you may have the right to object. See Your rights below.

Consent

We rely on consent where required for particular optional processing, including:

• optional analytics cookies or similar technologies; and
• marketing emails where consent is required and you have actively opted in.

You may withdraw consent at any time.

Withdrawing consent does not affect processing carried out before withdrawal and does not affect processing we carry out under another lawful basis.

Legal obligation

We may process personal data where necessary to comply with legal or regulatory obligations, including:

• accounting and tax requirements;
• responding to lawful requests from authorities;
• maintaining legally required business records; and
• complying with court orders or other legal obligations.

Establishing and defending legal rights

Personal data may also be retained or used where reasonably necessary to establish, exercise or defend legal claims, including copyright, ownership and licensing disputes.

Where you are a creator, certain personal information may need to be disclosed to Clients or prospective Clients in connection with Content.

This may include:

• creator name;
• social-media handle;
• Account information;
• Content source;
• attribution information;
• information relating to ownership or permissions; and
• other information reasonably necessary to demonstrate or administer licensing rights.

We only disclose information that is reasonably relevant to the licensing, attribution, rights-management or administration of the Content.

We use as few cookies and similar technologies as reasonably practicable.

They fall into two principal categories.

Strictly necessary

These technologies are required for the Website to function or to provide a service you have requested.

They may be used for purposes such as:

• authentication;
• security;
• keeping you signed in;
• maintaining sessions; and
• remembering your privacy or cookie preferences.

These technologies do not require consent where they are strictly necessary for the requested service.

Analytics

Analytics technologies help us understand how people use the Website, for example:

• pages viewed;
• clips viewed;
• searches;
• Website interactions; and
• navigation patterns.

Where consent is required, analytics technologies only operate after you actively accept them through the cookie controls.

Declining optional analytics does not prevent you from otherwise using the Website.

Cookies currently used

We may use cookies including:

pm_session
Used to maintain your authenticated Website session. Strictly necessary. It expires when you sign out or after the applicable session/inactivity period.

pm_visitor
A randomly generated identifier used to maintain Website preferences and, where you have consented, associate analytics events with the same visit or browser. It does not itself contain your name or contact details.

pm_consent
Records your cookie and analytics preference and when that preference was recorded. This allows the Website to remember your choice.

The actual cookies and technologies used by the Website may change as the Website develops. We will update this notice where changes materially affect how personal data is processed.

You may change or withdraw your analytics choice using the cookie controls available through the Website.

You can also control cookies through your browser settings. Blocking strictly necessary cookies may cause parts of the Website to stop functioning correctly.

We do not sell personal data to advertisers or data brokers.

We may share personal data with categories of recipients including:

Clients and prospective Clients

Where reasonably necessary to present, license, attribute or administer Content.

Email and communications providers

To send account, contractual, licensing, order, enquiry and other service-related communications.

Cloud-storage and hosting providers

To host the Website, Content, images, files and associated infrastructure.

Database providers

To securely store the information required to operate the service.

Payment providers

Where payments are processed.

Rights-management and verification providers

Where reasonably necessary to verify Content, ownership, licensing or permissions.

Professional advisers

Including solicitors, accountants, auditors and insurers.

Contractors and service providers

Where they provide services to Peseta.Media and process personal data on our behalf.

Courts, regulators and public authorities

Where disclosure is required or permitted by law.

Parties involved in rights disputes

Where reasonably necessary to investigate or resolve a copyright, ownership, privacy or other legal claim.

Corporate transactions

We may disclose appropriate information to prospective purchasers, investors, acquirers and their advisers in connection with a proposed investment, merger, acquisition, restructuring or sale of some or all of our business or assets, subject to appropriate safeguards where applicable.

Service providers processing data on our behalf are required to handle that information only in accordance with our instructions and applicable data-protection requirements.

Some Clients, service providers or infrastructure providers may be located outside the United Kingdom.

As a result, personal data may sometimes be transferred to or accessed from another country.

Where UK data-protection law requires safeguards for an international transfer, we will use an appropriate lawful mechanism, which may include:

• UK adequacy regulations;
• the UK International Data Transfer Agreement;
• the UK Addendum to approved EU Standard Contractual Clauses; or
• another transfer mechanism permitted under UK data-protection law.

You can contact privacy@peseta.media if you would like further information about safeguards relevant to an international transfer of your personal data.

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected or subsequently lawfully processed.

Accounts and transaction records

Generally retained while your account is active and for an appropriate period afterwards where necessary for:

• accounting;
• tax;
• legal;
• fraud-prevention; or
• contractual purposes.

Enquiries and communications

Kept for as long as reasonably necessary to deal with the enquiry or maintain an appropriate business record.

Information may subsequently be deleted or anonymised where it is no longer required.

Analytics

Raw optional analytics events, where collected with consent, may be retained for up to 24 months before being deleted or converted into aggregated information that no longer identifies individuals.

Cookie-consent records

Retained for as long as reasonably necessary to remember your preference and demonstrate compliance.

Creator Acceptance Records

Creator Acceptance Records may be retained for as long as reasonably necessary to evidence:

• the Creator General Terms accepted;
• copyright permissions;
• rights granted to PESETA.MEDIA LTD;
• Client licences and sublicences;
• chain of title; and
• the establishment, exercise or defence of legal claims.

These records may need to remain after a creator terminates their relationship with Peseta.Media because licences granted while the agreement was active may continue afterwards.

Content and licensing records

Records relating to Content and Client licences may be retained for the duration of the relevant licence and afterwards where reasonably necessary to maintain evidence of rights granted or to manage potential legal claims.

When determining retention periods, we may consider:

• the duration of our relationship with you;
• the duration of relevant Client licences;
• applicable legal limitation periods;
• accounting and tax requirements;
• actual or potential disputes;
• the need to evidence copyright permissions or chain of title; and
• the nature and sensitivity of the information.

We may use automated or algorithmic tools to assist with activities such as:

• Content discovery;
• categorisation;
• search;
• recommendations;
• duplicate detection;
• moderation; and
• identifying Content that may be relevant to Clients.

Unless we specifically tell you otherwise, we do not use solely automated decision-making that produces legal effects or similarly significant effects concerning you.

We use appropriate technical and organisational measures designed to protect personal data against:

• unauthorised access;
• unlawful processing;
• accidental loss;
• destruction;
• alteration; and
• unauthorised disclosure.

The measures used depend on the nature of the information, the technology available and the risks involved.

No internet-based system can be guaranteed to be completely secure, but we take reasonable measures designed to protect the information entrusted to us.

Depending on the circumstances and the lawful basis on which we process your information, UK data-protection law may give you the right to:

• Access personal data we hold about you.
• Correct inaccurate or incomplete information.
• Ask us to delete personal data where there is no lawful reason for us to continue retaining it.
• Restrict processing in certain circumstances.
• Object to certain processing.
• Receive certain information in a portable format where the right to data portability applies.
• Withdraw consent at any time where we rely on consent.

These rights are not absolute. For example, we may need to retain Creator Acceptance Records even after a deletion request where those records are reasonably required to evidence existing copyright licences or establish, exercise or defend legal claims.

To exercise a data-protection right, contact:

privacy@peseta.media

We may need to verify your identity before completing a request.

Your right to object

Where we process your personal data on the basis of legitimate interests, you have the right to object to that processing in certain circumstances.

If you object, we will consider whether we have compelling legitimate grounds to continue processing the information or whether it is required for legal claims.

You may object to the use of your personal data for direct marketing at any time.

Complaints

If you are unhappy with how we handle your personal data, please contact us first at:

privacy@peseta.media

You also have the right to complain to the UK Information Commissioner’s Office (ICO).

Certain personal data may be required to:

• create an account;
• purchase or administer a licence;
• identify a creator;
• enter into the Creator General Terms;
• identify Accounts covered by those Terms;
• communicate with you; or
• maintain evidence of copyright and licensing rights.

Where information is necessary for a contract and you do not provide it, we may be unable to enter into or perform that contract or provide the relevant service.

The Website is not directed at children under 13, and we do not knowingly collect personal data from children under 13 through the Website.

Creators entering into the Peseta.Media Creator General Terms must be at least 18 years old.

If you believe that a child has provided us with personal data in circumstances where we should not hold it, contact:

privacy@peseta.media

and we will investigate and take appropriate action.

We may update this Privacy & Cookies notice where:

• our services change;
• the personal data we process changes;
• our service providers or technologies change;
• legal or regulatory requirements change; or
• our processing activities otherwise materially change.

When we update this notice, we will update the “Last updated” date at the top of the page.

Where a change materially affects how we use personal data, we will take reasonable steps to bring the change to the attention of affected individuals before beginning materially different processing where required by law.