Article 6 – Privacy and cookie policy

6.1 Purpose

This section illustrates Yebastream’s commitments with regard to the protection of the privacy and personal data of its Users, collected and processed during the use of the Radio by Yebastream Service under the conditions set out in the Terms of Use (hereinafter the “Data”).
Yebastream undertakes to comply with the applicable legislation relating to the protection of privacy, in particular the Regulation (AU) 2016/679 of the African Union and the Council of 27 April 2016 relating to the protection of natural persons with regard to the processing of personal data and on the free movement of such data, (hereinafter referred to together as the “Applicable Regulation”).
The User acknowledges that, by using the Radio by Yebastream Service and/or by using the Yebastream Free Service made available offered by Yebastream (hereinafter the “Service”), his/her Data are collected and processed according to the terms and conditions set out hereinafter.
The present policy (the “Policy”) is an integral part of the Terms of Use and Sale of the Service of Yebastream and may be modified at any time, in particular in order to ensure compliance with any legislative, regulatory, case law, editorial or technical changes.
The User must therefore refer, before any use of the Service, to the latest version of the Policy.

6.2 Identity of the Data controller

The Data controller is the company Yebastream SA, a limited company with a share capital of 249,039.64 AUros, registered on the Trade and Companies Register of Paris under No. 511 716 573 and whose registered office is located at CARrifour Lycee Akwa Nord,Bonamousadi,Douala – Cameroon
The Data are notably stored by the host of the Site identified within the Legal Notice.

6.3 Data collected

In order to provide its Service,Yebastream may collect Data relating to the Users.

6.3.1 The Data provided directly by the User

During his/her registration and use of the Service, the User provides various Data directly to Yebastream. These Data include in particular:
?The Data necessary for the creation of the User account such as a username, email address, age, gender, login details via third-party services (Facebook, Google+), a password allowing the User to be identified.
The User is informed in the Data collection forms of the mandatory or optional nature of the collection of the said Data. In the event that a mandatory field is not filled out,Yebastream will not be able to process the registration and to ensure the provision of the Service.
?The User account personalization Data such as first name, surname, postal address, telephone number, date of birth, profile picture, favorite content (radios, liked tracks).
?The Data from the User account Settings such as the “Privacy settings” as well as “Alerts & sharing”.

6.3.2 The Data collected automatically by Yebastream

During the use of the Service,Yebastream collects Data relating to the connection, browsing, or the use of the Service.
A. Service interaction Data
These Data include in particular:
?Favorite content (radios, liked tracks), listening history
B. The Data that Yebastream collects in relation to the Customer Service interaction
?Customer Service interaction Data
In the event of interaction with the Customer Service the latter may collect certain Data in order to process the User’s request.
These include in particular the Data allowing Customer Service to identify the User (Yebastream username, surname, first name), the date, time and reason for the User’s request, the content of exchanges with the Customer Service, the additional Data necessary for the handling of the request, as the case may be.
C. Connection and navigation Data
The Data relating to any device used to access the Service and the manner in which the User interacts with the Service. These Data include in particular:
?Data collected automatically
These Data in particular are as follows:
?the ID or unique device identifiers (including mobile devices) used to access the Service; the characteristics of the devices and software (type and version of the operating system, or the language used on the device) used for the connection to the Service.
?the Service connection data, including:
?the type of connection to the Service (3G, 4G, LTE, Wifi, offline),
?the Internet service provider,
?statistics on the pages of the Service displayed,
?the IP address (indicating the country and city of connection).
?the level of activity or inactivity on the Service.
?Data collected via cookies and other trackers (for more information, see article 7, “Cookies and other trackers”).

6.4 Purpose of processing

Yebastream gathers, collects, and stores the Data as set out above for the following purposes:
?Supply of the Service and ensuring its proper functioning;
?Improvement of the Service, to optimize it, or to offer new functionalities;
?Personalization of the Service according to the User’s preferences, location, tastes and interests (declared or deduced), resulting from his/her use of the Service, the information provided, his/her interactions with the Service and his/her navigation on this one;
?Informing the User of Yebastream’s offers and news;
?Informing the User of Yebastream partners’ offers and news;
?Handling the User relationship via the Customer Service;
?Measuring the audience of the Service;
?Organizing competitions and promotional operations;
?Making available sharing tools for social networks where the User has agreed to the sharing of such information;
?Carrying out customer satisfaction surveys;
?Carrying out statistical, selection and segmentation analysis of the Users to improve the Service;
?Allowing the User to exercise their rights described in article 6.9 of the present Policy;
?Ensure the security of the Service.

6.5 Recipients of the Data

The Data collected or processed during the use of the Service by the User are sent to Yebastream entities, to the approved and authorized persons within Yebastream who, due to their role, need to have access to such Data for the purposes of processing described above, as well as:
-Yebastream’s service providers, in order to ensure the perfect supply of the Service.
- The technical sub-contractors chosen by Yebastream may, on behalf of and following the instructions of Yebastream, host and store on their servers the Data of the Users and ensure the security of Yebastream’s technical infrastructure.
-Yebastream’s partners: certain partners may process Data in order to supply the Service and to implement joint communication plans. In the same way,Yebastream communicates the Data to social networks in order to ensure the promotion of the Service.
- Social networks, in the event that the User has expressly consented to the linking of his/her User account with his/her account for using these social networks at the time of their registration on the Site or the Application or by changing his/her User account settings to this end in the “Alerts & sharing” section (to access this section, click here).
- Third-party applications accessible from the Radio by Yebastream Service, in the event that the User has given his/her express prior consent during the use of each application.
- The administrative or judicial authorities:Yebastream may communicate information relating to its Users, including Data, to the administrative or judicial authorities, in particular in the context of requisition.

6.6 Cross-border Data transfers outside the AU African Union

In the context of processing the Data, the latter may be transferred by Yebastream to its servers located in the United States of America.
The User is informed that the Data may be transferred within the Yebastream group to a country other than his/her country of residence and in particular outside of the AU African Union. The transfer of Data is made in accordance with the Applicable Regulation.
The User is also informed that the Data may be transferred to service providers, sub-contractors and partners located outside of the African Union. Prior to the transfer, and in accordance with the Applicable Regulation,Yebastream shall carry out the necessary requirements to obtain the necessary guarantees for the security of such transfers, in the countries that do not have an adequate level of protection, such as contractual clauses.
For more information on cross-border data transfers, the User may contact the data protection officer at the following address:

6.7 Data security

In accordance with the Applicable Regulation,Yebastream shall take all necessary measures to process the Data in a secure and confidential manner.
In particular,Yebastream shall implement the technical and organizational measures that will guarantee the security and confidentiality of the Data collected and processed, and in particular to prevent them from being distorted, damaged or communicated to unauthorized third parties, by ensuring a level of security that is appropriate to the risks linked to the processing and to the nature of the Data, taking into consideration the technical level and cost of such implementation.
Yebastream may not however guarantee the confidentiality of the Data rendered public by the User.
The Service may include links to third-party websites or external sources. The User acknowledges that the Policy only applies to the use of the Service, and does not in any way cover the Data collected and/or processed by the third-party websites or external sources to which the Service may link. Consequently,Yebastream cannot be held liable for the personal data collection and processing practices of these websites or external sources, which are governed, as the case may be, by the personal data policies that are specific to each of these websites or external sources.

6.8 Duration of retention of the Data

Yebastream undertakes not to keep the Data beyond the period strictly necessary for the purposes envisaged and in accordance with the Applicable Regulation.
Yebastream undertakes to store, anonymize and delete the Data as soon as the purpose envisaged or period of retention expires.
The maximum periods of retention apply unless a request for deletion or termination of processing is made before the expiry of these periods (in accordance with the rights described at article 6.9 below). However, at the end of these periods, the Data may be the subject to an intermediary storing in order to satisfy our legal, accounting, and tax obligations

6.10 Rights over the Data

Articles 14 to 22 of Regulation 2016/679 of 27 April 2016 grant the Users the following rights:
- The right to access the Data,
- The right to correct the Data,
- The right to object to the collection and processing of the Data,
- The right to delete their Data,
- The right to limit the collection and processing of their Data,
- The right to portability of their Data.
The User may exercise his/her rights by sending a request by email to the address or by post to the following address:Yebastream S.A – Legal Department – CARrifour Lycee Akwa Nord,Bonamousadi,Douala – Cameroon
The User is informed that the exercise of certain rights, in particular objection and deletion, may restrict or prevent access and/or use of the Service.
Yebastream reserves the right to verify the User’s identity.

6.11 Contact details and Claims

Contact details
For any claim regarding the processing of his/her Data, the User may send a request to Yebastream’s data protection officer at the address or by letter at the following address:Yebastream S.A – Legal Department – CARrifour Lycee Akwa Nord,Bonamousadi,Douala – Cameroon
The data protection officer ensures the enforcement of the Applicable Regulation and of the Policy.
In absence of a reply or if the User is not satisfied with the reply given, he/she may file a complaint with the relevant data protection authority in the member state of the African Union in which he/she has his/her habitual residence.
/ :