What Information Do We Collect From You?
We collect Personal Data about you when you provide such information directly to us, when third parties such as our business partners or service providers provide us with Personal Data about you, or when Personal Data about you is automatically collected in connection with your use of our Services. The information we gather enables us to personalize, improve, understand and continue to operate the Services. In connection with certain aspects of the Services, we may request, collect and/or display some of your Personal Data. Below explains in greater detail the types of information that we collect from our users.
Information You Provide to Us
If you create an Account, you will provide information that could be Personal Data, such as your email address and a password. You may also choose to provide additional Personal Data, including your contact name, information about yourself, basic demographic information including age and gender identity, a description of your channel, and links to your website or social media profiles.
Additionally, if you register for or access the Services using a Third Party Service (such as your social media account login credentials), we may receive Personal Data that you have made available to share through such Third Party Service, which may include, without limitation, your user ID, email, name, and image. You acknowledge that this information may be personal to you, and by creating an Account and providing Personal Data to us, you allow others, including us, to identify you and therefore may not be anonymous. We may use your contact information to send you information about our Services.
Information From Others
Information Collected Automatically
We automatically receive and record information from your web browser or device when you interact with the Services, including your IP address, device ID and cookie information. This information is used for fighting spam/malware and also to facilitate collection of data concerning your interaction with the Services (e.g., what links you have clicked on). Your IP address may be used to send you geographically-targeted advertisements.
Generally, the Services automatically collect usage information, such as the number and frequency of visitors to the Site and the Services. We may use this data in aggregate form, for example, as a statistical measure or in other anonymous forms, but not in a manner that would identify you personally. This type of aggregate data enables us and third parties authorized by us to figure out how often individuals use parts of the Services so that we can analyze and improve them.
Information Collected Using Cookies
• Most browsers have an option for turning off the cookie feature, which will prevent your browser from accepting new cookies, as well as (depending on the sophistication of your browser software) allowing you to decide on acceptance of each new cookie in a variety of ways. We strongly recommend that you leave cookies active, because they enable you to take advantage of the most attractive features of the Services.
Information Related to Advertising and the Use of Web Beacons
Advertisements served through the Services may be targeted to users who fit a certain general profile category and may be based on anonymized information inferred from information provided to us by a user, including Personal Data (e.g., gender or age), may be based on the Services usage patterns of particular users, or may be based on your activity on Third Party Services. We do not provide Personal Data to any ad networks for use outside of the Services.
To increase the effectiveness of ad delivery, we may deliver a file (known as a "web beacon") from an ad network to you through the Services. Web beacons allow ad networks to provide anonymized, aggregated auditing, research and reporting for us and for advertisers. Web beacons also enable ad networks to serve targeted advertisements to you when you visit other websites. Because your web browser must request these advertisements and web beacons from the ad network's servers, these companies can view, edit or set their own cookies, just as if you had requested a web page from their site.
We may also collect advertising identifiers from your mobile device. Advertising identifiers are resettable identifiers unique to your mobile device, and which are used in connection with advertising delivered to your mobile device. The IDFA (developed by Apple, Inc. for the iPhone) and Google Ad ID (developed by Google for Android) are examples of advertising identifiers.
We collect statistical information about how both unregistered and registered users, collectively, use the Services ("Aggregate Information"). Some of this information is derived from Personal Data. This statistical information is not Personal Data and cannot be tied back to you, your Account, or your web browser.
Personal Data of Children
As noted in the Terms of Service, we do not knowingly collect or solicit Personal Data from anyone under the age of 13. If you are under 13, please do not attempt to register for the Services or send any Personal Data about yourself to us. If we learn that we have collected Personal Data from a child under age 13, we will delete that information as quickly as possible. If you believe that a child under 13 may have provided us Personal Data, please contact us at email@example.com.
In order to use the facial scan feature through our mobile application, you must first read through our “Facial Scan Consent” and grant us permission by typing your initials above the “I Accept” button on your mobile device. We only use your facial scans in connection with your use of the Services in order to provide, personalize, and improve the Services for you. We don’t use your facial scans or any related facial data captured in the facial scans internally, and we don’t share your facial scans or any related facial data with other users or any other third parties. We also do not store your facial scans and related facial data. Please read our “Facial Scan Consent” to learn more about our facial scans feature.
How, and With Whom, Is My Information Shared?
The Services are designed to help you share information with others. As a result, some of the information generated through the Services is shared publicly or with Third Party Services. Below further describes the ways in which we may share your information.
Public Information About You and Your Activity on the Services
User profile and channel information that you choose to provide, including your username, contact name, GIFs you upload, information about yourself, a description of your channel, and links to your website or social media profiles, may be displayed to other users to facilitate user interaction within the Services. We will not directly reveal user email addresses to other users.
Please remember that if you choose to provide Personal Data using certain public features of the Services, then that information is governed by the privacy settings of those particular features and may be publicly available. Individuals reading such information may use or disclose it to other individuals or entities without our control and without your knowledge, and search engines may index that information. We therefore urge you to think carefully about including any specific information you may deem private in content that you create or information that you submit through the Services.
Information Shared Through Third Party Services
Information Shared In Connection with Related Services
We also share Aggregate Information with our partners, service providers and other persons with whom we conduct business. We share this type of statistical data so that our partners can understand how and how often people use our Services and their services or websites, which facilitates improving both their services and how our Services interface with them. In addition, these third parties may share with us non-private, aggregated or otherwise non Personal Information about you that they have independently developed or acquired.
Information Shared with Our Agents
We employ and contract with people and other entities that perform certain tasks on our behalf and who are under our control (our "Agents"). We may need to share Personal Data with our Agents in order to provide products or services to you. Unless we tell you differently, our Agents do not have any right to use Personal Data or other information we share with them beyond what is necessary to assist us. You hereby consent to our sharing of Personal Data with our Agents.
Information Disclosed Pursuant to a Change in Control or Sale
In some cases, we may choose to buy or sell assets. In these types of transactions, user information is typically one of the transferred business assets. Moreover, if we, or substantially all of our assets, were acquired, or if we go out of business or enter bankruptcy, user information would be one of the assets that is transferred or acquired by a third party. You acknowledge that such transfers may occur, and that any acquirer of us or our assets may continue to use your Personal Data as set forth in this policy.
Information Disclosed for Our Protection and the Protection of Others
Information We Share With Your Consent
Except as set forth herein, you will be notified when your Personal Data may be shared with third parties, and will be able to prevent the sharing of this information.
What Choices Do I Have Regarding My Information?
Access and Control Your Personal Data
• If you are a registered user, you can access information associated with your Account by logging into the Services. Registered and unregistered users can access and delete cookies through their web browser settings.
• You can use many of the features of the Services without registering, thereby limiting the type of information that we collect.
• You can always opt not to disclose certain information to us, but please note that such information may be needed to take advantage of some of our features.
• You can opt-out of certain cookies and tracking technologies by following the steps set forth in the section titled “Information Collected Using Cookies” above.
• Your browser may offer you a “Do Not Track” or “DNT” option, which allows you to signal to operators of websites, and web applications, and services that you do not wish such operators to track certain of your online activities over time and across different websites.
California Privacy Rights: Under California Civil Code sections 1798.83-1798.84, California residents are entitled to ask us for a notice identifying the categories of personal customer information which we share with our affiliates and/or third parties for marketing purposes, and providing contact information for such affiliates and/or third parties. If you are a California resident and would like a copy of this notice, please submit a written request to the following address: 416 West 13th Street, Suite 207, New York, NY 10014.
Opt-Out of Targeted Advertising
• Through the Digital Advertising Alliance (“DAA”) and Network Advertising Initiative (“NAI”), several media and marketing associations have developed an industry self-regulatory program to give consumers a better understanding of and greater control over ads that are customized based on their online behavior across different websites. To make choices about interest-based ads from participating third parties, please visit the DAA’s or NAI’s consumer opt out pages, which are located at http://www.networkadvertising.org/choices/ or www.aboutads.info/choices.
• Reset your mobile device’s advertising identifier or set it to opt out of targeted advertising.
- iOS: You can opt-out of targeted advertising by choosing “Limit Ad Tracking” in your device’s settings menu.
- Android: You can reset your advertising ID at any time from the Ads section under Settings on your device, or you can also opt-out of targeting advertising in this same section.
We want you to know that by opting-out of targeted advertising does not mean that you will no longer receive advertising, but just that the advertising that you do receive will not be customized to you and may feel less relevant to you.
Delete Your Account
Should you ever decide to delete your Account, you may do so by emailing firstname.lastname@example.org. Please note that we will need to verify that you have the authority to delete the Account. If you terminate your Account, any association between your Account and information we store will no longer be accessible through your Account. However, given the nature of sharing on the Services, any public activity on your Account prior to deletion will remain stored on our servers and may remain accessible to the public.
How Long Do We Retain Your Personal Data?
We retain Personal Data about you for as long as you have an open account with us or as otherwise necessary to provide you Services. In some cases we retain Personal Data for longer, if doing so is necessary to comply with our legal obligations, resolve disputes or collect fees owed, or is otherwise permitted or required by applicable law, rule or regulation. Afterwards, we retain some information in a depersonalized or aggregated form but not in a way that would identify you personally.
Is the Information About Me Secure?
Your Account information will be protected by a password for your privacy and security. You need to prevent unauthorized access to your Account and Personal Data by selecting and protecting your password appropriately and limiting access to your computer and browser by signing off after you have finished accessing your Account.
We seek to protect Account information to ensure that it is kept private; however, we cannot guarantee the security of any Account information. We store all of our information, including your IP address information, using industry-standard techniques. We do not guarantee or warrant that such techniques will prevent unauthorized access to information about you that we store, Personal Data or otherwise. Unauthorized entry or use, hardware or software failure, and other factors, may compromise the security of user information at any time.
What If I Have Questions or Concerns?
If you have any questions or concerns regarding privacy using the Services, please send us a detailed message to email@example.com. We will make every effort to resolve your concerns.
Effective Date: August 28, 2019
If you are a resident of the European Union (“EU”), United Kingdom, Lichtenstein, Norway, or Iceland, you may have additional rights under the EU General Data Protection Regulation (the “GDPR”) with respect to your Personal Data, as outlined below.
We will only process your Personal Data if we have a lawful basis for doing so. Lawful bases for processing include consent, contractual necessity and our “legitimate interests” or the legitimate interest of others, as further described below. The legal bases depend on the Services you use and how you use them.
• Contractual Necessity: We also process the following categories of Personal Data as a matter of “contractual necessity”, meaning that we need to process the data to perform under our Terms of Service with you, which enables us to provide you with the Services. When we process data due to contractual necessity, failure to provide such Personal Data will result in your inability to use some or all portions of the Services that require such data.
- IP Address
- Profile Data
- Device ID
- Cookie Data
• Legitimate Interest: We process the following categories of Personal Data when we believe it furthers the legitimate interest of us or third parties (which is not overridden by your data protection interests):
- IP Address
- Profile Data
- Device ID
- Cookie Data
Examples of these legitimate interests include:
- Operation and improvement of our business, products and services
- Marketing of our products and services
- Provision of user support
- Protection from fraud or security threats
- Compliance with legal obligations
- Completion of corporate transactions
• Consent: In some cases, including facial scans, we may process Personal Data based on the consent you expressly grant to us at the time we collect such data. When we process Personal Data based on your consent, it will be expressly indicated to you at the point and time of collection.
• Other Processing Grounds: From time to time we may also need to process Personal Data to comply with a legal obligation, if it is necessary to protect the vital interests of you or other data subjects, or if it is necessary for a task carried out in the public interest.
Personal Data of Children: We do not knowingly collect or solicit Personal Data from anyone under the age of 16. If you are under 16, please do not attempt to register for the Services or send any Personal Data about yourself to us. If we learn that we have collected Personal Data from a child under age 16, we will delete that information as quickly as possible. If you believe that a child under 16 may have provided us Personal Data, please contact us at firstname.lastname@example.org.
What Rights Do You Have Regarding Your Personal Data? You have certain rights with respect to your Personal Data, including those set forth below. For more information about these rights, or to submit a request, please email email@example.com. Please note that in some circumstances, we may not be able to fully comply with your request, such as if it is frivolous or extremely impractical, if it jeopardizes the rights of others, or if it is not required by law, but in those circumstances, we will still respond to notify you of such a decision. In some cases, we may also need to you to provide us with additional information, which may include Personal Data, if necessary to verify your identity and the nature of your request.
• Access: You can request more information about the Personal Data we hold about you and request a copy of such Personal Data.
• Rectification: If you believe that any Personal Data we are holding about you is incorrect or incomplete, you can request that we correct or supplement such data. You can also correct some of this information directly by updating any of the information contained in your user profile.
• Erasure: You can request that we erase some or all of your Personal Data from our systems.
• Withdrawal of Consent: If we are processing your Personal Data based on your consent (as indicated at the time of collection of such data), you have the right to withdraw your consent at any time. Please note, however, that if you exercise this right, you may have to then provide express consent on a case-by-case basis for the use or disclosure of certain of your Personal Data, if such use or disclosure is necessary to enable you to utilize some or all of our Services.
• Portability: You can ask for a copy of your Personal Data in a machine-readable format. You can also request that we transmit the data to another controller where technically feasible.
• Objection: You can contact us to let us know that you object to the further use or disclosure of your Personal Data for certain purposes.
• Restriction of Processing: You can ask us to restrict further processing of your Personal Data.
• Right to File Complaint: You have the right to lodge a complaint about Giphy’s practices with respect to your Personal Data with the supervisory authority of your country or EU Member State.
Transfers of Personal Data: The Services are hosted and operated in the United States (“U.S.”) through Giphy and our service providers, and if you do not reside in the U.S., laws in the U.S. may differ from the laws where you reside. By using the Services, you acknowledge that any Personal Data about you, regardless of whether provided by you or obtained from a third party, is being provided to Giphy in the U.S. and will be hosted on U.S. servers, and you authorize us to transfer, store and process your information to and in the U.S., and possibly other countries. Giphy is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission.
Giphy complies with the EU.-U.S. Privacy Shield Framework set forth by the U.S. Department of Commerce regarding the collection, use and retention of Personal Data transferred from the EU to the U.S. Giphy has certified to the Department of Commerce that it adheres to the Privacy Shield Principles of (1) notice, (2) consent, (3) accountability for onward transfer, (4) security, (5) data integrity and purpose limitation, (6) access and (7) recourse, enforcement and liability with respect to all Personal Data received from within the EU. The Privacy Shield Principles require that we remain potentially liable if any third party processing Personal Data on our behalf fails to comply with these Privacy Shield Principles (except to the extent we are not responsible for the event giving rise to any alleged damage). To learn more about the Privacy Shield Program, please visit https://www.privacyshield.com.
In compliance with Privacy Shield Principles, Giphy commits to resolve complaints about our collection or use of Personal Data. Please contact us at firstname.lastname@example.org with any questions or concerns relating to Privacy Shield policy. Giphy has further committed to refer any unresolved Privacy Shield complaints through International Centre for Dispute Resolution - American Arbitration Association (ICDR-AAA), an alternative dispute resolution provider located in the United States. If you do not receive timely acknowledgment of your complaint from us, or if we have not addressed your complaint to your satisfaction, you can visit http://go.adr.org/privacyshield.html for more information or to file a complaint, at no cost to you. Under certain conditions, you may also be entitled to invoke binding arbitration for complaints not resolved by other means.
What If You Have Questions Regarding Your Personal Data? If you have any questions about this section or our data practices generally, please contact us using the following information:
Name: Giphy, Inc.
Physical address: 416 West 13th Street, Suite 207
New York, NY 10014
Email address for contact: email@example.com
Designated representative and contact information:
Tel.: +49 (0) 40 99999 – 3430
Mob.: +49 (0) 172 918 22 22
Beginning January 1, 2020, if you are a resident of California, you will have additional rights under the California Consumer Privacy Act (the “CCPA”) with respect to your Personal Data, as outlined below.
• Access: You may, not more than twice in a twelve-month period, request more information about the Personal Data we hold about you and request a copy of such Personal Data by emailing us at firstname.lastname@example.org. You can also access certain of your Personal Data by logging on to your account.
• Opt-Outs: You are entitled to contact us to prevent disclosure of Personal Data to third parties for such third parties’ direct marketing purposes; in order to submit such a request, please contact us at email@example.com. You may also opt out of our sale of your personal information by emailing us at firstname.lastname@example.org.
• Erasure: You may request that we delete the Personal Data that we have collected from you by emailing us at email@example.com. However, we may not be required to delete your Personal Data under certain circumstances, including if such data is necessary for us to provide you with the Services, if we use such data only for our internal analytical use, and if such data is needed to complete a transaction or other action you have requested. If you request that we delete your Personal Data, you may no longer be able to use the Services.
Last Updated December 13, 2019