Who we are and what we do
Acceptance and Changes
2. Data We Collect About You
We collect information about you when you use our services. In addition, third parties may collect information about you when you use our services. Collected information may include or reflect personal information that could identify you, as well as non-personal information. We refer to your information as "your data" for short.
To create an account, you must provide a valid email address and password. If you choose to sign-up and/or authenticate using a third-party account (e.g., Facebook, Google), you authorize us to obtain account information from the third-party platform.
To donate, you may need to provide a valid payment method (e.g., credit card, PayPal account or patreon.com). Your payment information will be collected and processed by our authorized payment vendors. We do not directly collect or store credit or debit card numbers ourselves in the ordinary course of processing transactions. If we allow purchase through a third-party platform (i.e. in-app purchase), the payment method stored with the third-party platform will be charged.
Accountholders may create a profile and upload content such as videos, text, photographs. Your profile may display information about you and your activities. This information may be accessed by others. Your videos may be viewed and otherwise accessed by others, and associated metadata (e.g., titles, descriptions, tags, etc.) are viewable by others. Your interactions with other users (e.g., comments, "favs") may be seen by others. You cannot choose to limit the availability of your profile and videos.
If you submit images or videos to us we may filter content with the help of an administrator in order to block inappropriate content and to ensure quality.
Other Information You May Submit
You may submit data to us for limited purposes such as requesting customer support; answering a questionnaire; participating in a study; entering contests or sweepstakes; or signing up to receive communications from us or another user.
Information Collected by Third Parties
Some third parties may collect data about you when you use our services. This may include data you submit (such as payment information) or automatically-collected information (in the case of third-party analytics providers and advertising partners).
We may obtain data from third parties about you. We may combine that data with information that we have collected. For example, some advertisers or advertising platforms may allow us to determine what other online services you might use so that we may place relevant ads on those services.
3. How We Use Your Data
We may use your data for the following purposes:
Identification and authentication: We use your data to verify you when you access your account.
Operating our services: We use your data to provide our services, process and fulfill orders, provide customer support, and to otherwise comply with our contractual obligations to you. We (and/or our third-party vendors) use your financial information to process purchases made by you and to pay you amounts you have earned.
Communicating with you: We use your data when we communicate with you (e.g., when we respond to a customer support or other inquiry).
Improving our services: We use your data to understand how our services are being used and how we can improve them. In general, we analyze aggregated data, rather than specific user data. We may, however, need to analyze a specific case to address a specific problem (e.g., a bug that affects only a few accounts).
Customizing your experience: We use your data to personalize the service to you. This may include remembering your preferences for language or volume or displaying videos that you might enjoy, based upon your viewing choices.
Exercising our rights: Where reasonably necessary, we use your data to exercise our legal rights and prevent abuse of our service. For example, we may use your data to detect and prevent fraud, spam, or content that violates our Terms of Service.
Legal compliance: We use your data where we are legally required to do so. For example, we may need to gather your data to respond to a subpoena or court order. GDPR.
Protecting your information: Where appropriate, we may anonymize, backup, and delete certain data.
We may use algorithms and other automated means to implement any of the above.
Whenever we process your data for one of these purposes, we have determined that one or more of the following lawful bases apply:
Performance of a service and contract;
Legitimate commercial interest;
Compliance with a legal obligation; or
4. With Whom We Share Your Data
We share data with third parties as follows:
As you instruct: We may make your profile and videos available to others as you instruct in using our services. We may share your data with persons to whom you have granted account-level access.
With your consent: We may share your data with third parties where we have obtained your express consent to do so.
Analytics: We may share your data with analytics providers which help us understand how customers are using our services.
Affiliates and advisors: We may share your data with our auditors and advisors for planning, financial reporting, accounting, auditing, tax filings, and legal compliance. We may share your data with our affiliates to the extent necessary to provide you with the services ordered.
Certain legal situations: We may share your data where we believe disclosure is necessary to comply with a legal obligation or in connection with a corporate transaction as discussed in Section 6.
Aggregated or anonymized information: We may publicly disclose non-personal aggregated or anonymized information such as our number of visitors and registered users.
5. Legal and Safety-Related Disclosures
We may disclose your data in response to official requests (e.g., court orders, subpoenas, search warrants, national security requests, etc.) ("requests") that we receive from government authorities or parties to legal proceedings.
We handle hungarian requests in accordance with hungarian law. If the request originates from a foreign jurisdiction, we will typically disclose information where we in good faith believe that disclosure is permitted by both hungarian law and local law. In all cases, we may raise or waive any legal objection or right available to us, in our sole discretion.
6. Data Retention
We retain your data for as long as you have an account. When you close an account, we will still retain its content, including its videos. We may retain logs of automatically collected information (for internal analytics and security purposes); your email address; communications with you; and your transactional information (for auditing,). When we no longer have a business reason for retaining data, we will delete or anonymize it.
We retain deleted videos on our servers for a short period in case you wish to reverse deletion. Once we delete a video, we may not be able to recover it. If you have previously made a video public, the video or its thumbnail may be discoverable in a search engine's cache for a time. We have no control over search engines; however, we will, upon request, not send any request for deletion to major search engines.
If we receive legal process pertaining to your account, we will retain your data for as long as we in good faith believe is necessary to comply with the legal process. Similarly, if we believe that your account has been involved in wrongdoing, we may preserve your data to defend or assert our rights.
7. Your Privacy Choices
We enable you to make numerous choices about your data:
You may choose not to provide us with certain information. For example, you may choose not to create an account or not to provide optional account information.
You may change or correct information voluntarily submitted to us. We encourage you to keep your data current by viewing your settings page.
You may close your account or delete certain videos.
8. Communications from Us
If you create an account, you may receive newsletters from us. You may always opt out from receiving newsletter messages in your account settings. Please note that any opt-out request may take several days to process and you will continue to receive transactional emails from us (e.g., emails confirming transactions and/or providing information about your account).
9. Protecting Your Information
We use physical, technical, and organizational security measures to safeguard your data from unauthorized or accidental disclosure. Despite these efforts, no information system can be 100% secure, so we cannot guarantee the absolute security of your information. Users also have a role to play in keeping their data safe. We encourage you to use a unique and hard-to-guess password for your account and to not share it with others. You should only grant access rights to people who you know and trust, and, even then, you should be careful in granting all access rights. You should monitor your account regularly. If you believe that someone has gained access to your account without your permission, please contact us immediately so that we can investigate.
10. Your Responsibilities
You may receive other people's data in using our service. If you receive information from other users, you must comply with all laws, including those concerning privacy and data security.
11. Third-Party Services
12. International Data Transfers and Certain User Rights
12.1 Location of Data
H2OFLOW is based in Hungary. We provide services globally using computer systems, servers, and databases located in Hungary.When you use our services from outside of Hungary, your information may be transferred to and processed in Hungary. Please note that Hungary data and privacy laws may not be as comprehensive as those in your country. Residents of certain countries may be subject to additional protections as set forth in Sections 14.2 and 14.3 below.
12.2 GDPR (EEA Users)
This Section 14.2 applies only to natural persons residing in the European Economic Area (for the purpose of this section only, "you" or "your" shall be limited accordingly). It is H2OFlow's policy to comply with the EU's General Data Protection Regulation (GDPR). In accordance with the GDPR, we may transfer your personal information from your home country to Hungary (or other countries) based upon the following legal bases:
Legitimate business interests: We could not provide our services or comply with our legal obligations without transferring your personal information to Hungary.
Our use of Standard Contractual Clauses (also known as "Model Clauses") where appropriate.
Our certification and adherence to the EU-U.S. and Swiss-U.S. Privacy Shield frameworks, as described further below.
You have the right to: opt out of non-essential cookies (see our GDPR); access, correct, delete, restrict, or object to our use of your personal information; be forgotten; port your data; and withdraw consents. We enable exercise of these rights primarily through our services (which we reserve the right to modify). For example, we allow users to change their information, download their videos, and close their accounts. We also fulfil our obligations in response to direct requests. We will endeavor to process requests within one month. Please note that we may not be able to comply with requests to the extent that they would cause us to violate any law or infringe any other person's rights. We reserve the right to request appropriate identification. We will process requests free of charge unless they would impose an unreasonable cost on us.
If you have a request, complaint or inquiry, please contact us at the address listed in Section 15. We are committed to working with you to obtain a fair resolution of any issue. You also have the right to file a complaint with the supervisory data protection authority of your jurisdiction.
12.3 Privacy Shield (EEA, UK and Swiss Users)
This Section 12.3 applies only to natural persons residing in the European Economic Area (EEA), the United Kingdom and Switzerland (for the purpose of this section only, "you" or "your" shall be limited accordingly).
Where H2OFlow has transferred personal information of EEA, UK or Swiss residents to third parties, Vimeo shall be liable if those third parties do not process personal information in compliance with the GDPR Principles. This shall not be the case where H2OFlow establishes that it is not responsible for the damage caused by the third party.
In accordance with GDPR, H2OFlow commits to resolve complaints about our collection or use of your personal information. If you have inquiries or complaints regarding our GDPR policy, you should first contact H2OFlow at the address listed in Section 13.
12.4 California Users
Under California’s “Shine the Light” law, California residents have the right to opt out of disclosing information to third parties for the purpose of allowing such third parties to directly market their products and services. At this time, we do not engage in this type of disclosure.
Under the California Consumer Privacy Act (“CCPA”), California consumers have the following rights, which can be exercised directly or in certain cases, through an authorized agent:
Right to Know. You have the right to request information about the categories and sources of personal information we collect, our purposes for collecting the information, and the types of third parties that receive that information. Details about our data collection, use and third-party disclosures can be found here. In addition, you have the right to request a copy of your personal information. You may exercise this right once per 12-month period by using this form.
Right to Delete. You have the right to request that we delete some or all of the personal information that we have about you. Deleting all data will typically require the deletion of your account, along with all content, including your videos. Notwithstanding the foregoing, we may retain information to provide services you have ordered, complete transactions, honor opt-outs, prevent fraud, spam, and other abuse, comply with our legal obligations, cooperate with law enforcement, and to exercise and defend our rights. You may exercise your right to delete using this form.
Do Not Sell. You have the right to opt out of the sale of your personal information, and to request information about whether we have sold your personal information in the past 12 months. H2OFlow does not sell personal information, and we have not done so in the last year. If we begin to do so, we will update this notice and provide a mechanism to opt out of any such sale.
Non-Discrimination. We won’t discriminate against you because you exercise any rights herein. To exercise your rights to know and delete, we must be able to verify your identity as the owner of the H2OFlow account you are inquiring about. We may not be able to fulfill your request until we can do so. In general, we verify identity by confirming that you are the owner of the email address associated with the account. An authorized agent submitting a request on your behalf must also have access to the email address associated with the account, along with sufficient evidence that you have authorized that person to submit the request on your behalf. Although you need not have a H2OFlow account to submit a request, we may not be able to locate certain information to process your request if you don’t have one.
12.5 Nevada Users
13. How to Contact Us
For any questions, inquiries, or complaints relating to your privacy, please contact us at:
Hungary 2400 Dunaújváros, Bocskai I. u. 2/E 1/1