Your trust is very important to us. This means the BBC is committed to protecting the privacy and security of your personal information. It is important that you read this notice so that you are aware of how and why we are using such information. This privacy notice describes how we collect and use personal information about you during and after your relationship with us, in accordance with data protection law.
What will the BBC collect and how we will use it?
You will need to sign in to your BBC account to use the BBC Sounds app. We may use your account information to send important messages to you about the BBC Sounds app. When you use the BBC Sounds app, we will collect and process information about you to provide you with a personalised BBC Sounds experience and to improve the BBC Sounds service.
- Subscribed and Bookmarks
When you add something to My Sounds, the action is stored on BBC servers to allow you to access these lists across devices (e.g. via the bbc.co.uk/sounds website).
You can remove these entries via the My Sounds section in the app or via bbc.co.uk/sounds/my.
The BBC uses technologies similar to cookies to measure audience behaviour. Our data processor AppsFlyer automatically collects the below information for attribution and analysis purpose:
- Your device information, such as device type, OS version
- IP address to determine your location
- Activity data, such as time when you downloaded this app
- Which sites referred you to download and use this app
We also use this data together with your BBC account data to improve BBC Sounds service. You can “opt out” from AppsFlyer tracking by filling out the “Forget My Device” form in this link: https://www.appsflyer.com/optout
- Playback position, completion and recommendations
When you play something in the BBC Sounds app we store your history and your progression through programmes on BBC servers. This allows you to pick up where you left off on different platforms.
We also use this information to recommend to you programmes in the Recommendations module found on the Listen page in the BBC Sounds app.
- Push notification
If you opt in to this service, our data processors Airship and Salesforce will process the below information about you in order to send push notifications and in-app messages from BBC Sounds to recommend new BBC content:
- Device ID which is assigned to your device
- Your name given by you when you registered the BBC account
- Activity data, such as programmes you listened to
- BBC user ID which is associated with your BBC account
Types of push notifications that will be sent to you include series notifications, future reminders and also other related content that may be of interest to you. You can opt out of this service at any time by switching it off in your app or account setting.
- Deleting your app
If you are accessing BBC Sounds through an app, you can delete all BBC Sounds app data stored on your device by deleting the app.
Who is the Data Controller?
The BBC is the “data controller” of your personal information. This means that the BBC decides what your personal information is used for, and the ways in which it is processed. For the avoidance of doubt, your personal information will be collected and processed solely for the purposes set out in this privacy notice. As the data controller, the BBC has the responsibility to comply, and to demonstrate compliance with, data protection law.
- Lawful basis for processing your personal information
We need a valid reason to use your personal information. It’s called our “lawful basis of processing.” When you use the BBC Sounds app we have a “legitimate interest” to process your personal information to authenticate your BBC account, provide you with BBC content, access to the BBC Sounds app and make a personalised experience as described above. We use your personal information to provide the best experience and improve your BBC Sounds experience.
We may provide you with more specific notices for some of the processing described above, and where we require your consent we will ask for this at the time we collect your personal data.
- Sharing your information
When we transfer some limited personal information outside of the European Economic Area (EEA), we make sure that our contracts include safeguards for the transfer of your personal information outside the EEA. The data processors listed above have entered into an appropriate contract, which ensures they cannot do anything with your personal information except as we have instructed them to do so.
Retaining your information
Your personal data is stored in the BBC’s server within EEA. The BBC will retain the data in accordance with the factors listed in Using the BBC.
Our data processors AppsFlyer, Airship and Salesforce will retain users’ data as instructed by the BBC or in accordance with their retention policy where our Using the BBC policy doesn’t apply. Where any inconsistency between this privacy notice and the BBC’s Privacy and Cookies Policy occurs, the terms of this privacy notice will apply. More information can be found in below links:
Your rights and more information
If you delete your BBC account, your personal information, such as email address, postal code, year or date of birth will be permanently deleted. Any data about how you've used BBC services will be anonymised, and we will no longer be able to identify you from that data.
You can contact email@example.com if you have questions or you wish to find out more details about your rights. Please visit the BBC’s Privacy and Cookies Policy at www.bbc.co.uk/privacy.
If you have a concern about the way the BBC has handled your personal information, you can raise your concern with the supervisory authority in the UK, the Information Commissioner’s Office (ICO): https://ico.org.uk/.
Updating this privacy notice
We will revise the privacy notice if there are significant changes to how we use your personal information.