Privacy policy
This page is a translation provided for information only. The Spanish version is the one that prevails.
This website does not ask its visitors for personal data: it has no forms or user accounts, it sets no cookies and it stores nothing in the browser, not even when the live stream is played.
Data controller
The data controller is the owner of the site: Associació Cultural The Machine That Makes The Machine, with tax ID (NIF) G67235747 and registered address at C/ Emilia Coranty 16, 08018 Barcelona, España. For any privacy matter, write to admin@tmtmtm.org.
The email the station receives
Anyone who writes to the station, at hola@marivent.live or at another of its addresses, gives it their email address and whatever they say in their message. The station uses that data only to reply and deal with the request. The basis for processing it is the consent of the person writing or, if they write in order to reach an agreement with the station, the steps taken before that agreement. It keeps the data for as long as the conversation lasts.
Measuring visits
The site measures how many visits it gets, where they come from and how many clicks the sponsors’ links receive, in order to know how much it is visited, how people reach it and how much interest those links attract. It does so with Umami, a measurement service that uses no cookies and stores nothing in the browser.
For each visit, Umami records the page viewed, the address the visitor came from, the browser, the operating system, the type of device, the screen size and the language; and the country, region and city, which it derives from the IP address without storing it. To know how many different visitors there are, it calculates an identifier from the IP address and the browser, with a key that changes every month. It does not follow visitors across other sites, and no profiles are built from that data.
The measurement is provided by Umami Software, Inc., a United States company, through its Umami Cloud service. The measurement data of this site is stored in the European Union, and Umami keeps it for six months. It processes it on behalf of the station, under a data processing agreement that provides for the standard contractual clauses for whatever reaches the United States.
The live stream and who serves the signal
The station’s live stream is shown on the home page itself, with a player that is part of the site: the page loads no player and no library from any other domain. Until the visitor presses “Watch the live stream”, the page does not request the signal.
When the button is pressed, the visitor’s browser requests the live stream signal, which consists of video and audio files, from a subdomain of marivent.live, and plays it. The signal arrives without cookies.
This site is hosted by Cloudflare, Inc., a United States company with servers around the world, and the live stream signal is also served by Cloudflare. Like any web server, Cloudflare receives with each request the visitor’s IP address and what their browser sends, such as which browser it is and which page the request comes from. It uses that data to serve the pages and the signal, to protect its network and to improve its services. It stores it mainly in the United States and the European Economic Area, and relies on the EU-U.S. Data Privacy Framework to transfer it from the European Economic Area to the United States and, should that cease to apply, on the standard contractual clauses. Its privacy policy explains this.
The station does not store that data, and it is processed only because without it neither the site nor the live stream can be served: that is its legitimate interest. From Cloudflare it sees aggregate figures for its domain, such as how many requests arrive and from which countries, and a sample of the requests that Cloudflare rejects for security reasons, such as those that do not say they come from this site, with the IP address of each one. It does not know who watches the live stream from this site.
The YouTube API
Marivent Live also broadcasts on its YouTube channel, and uses YouTube API Services from that channel’s account. The station uses the YouTube API only to create and manage the live streams on its own channel, and it does not access any visitor’s account. This site embeds nothing from YouTube: watching the live stream here requests nothing from YouTube or Google.
By using the API, the station agrees to be bound by the YouTube Terms of Service, and the data of its channel is processed by Google in accordance with its Privacy Policy. The only account that grants it permission for that use is the station’s own channel account, which can withdraw it in the security settings of its Google account.
Data sharing and rights
The station does not share the data it processes with anyone, unless the law requires it to, and makes no automated decisions based on it. What Cloudflare receives for serving the site and the signal is explained in the section on the live stream, and what Umami receives for measuring visits, in the section on measurement.
Anyone may ask the owner for access to their data, its rectification, its erasure, its portability or the restriction of its processing, object to its processing and withdraw any consent they have given. To do so, write to admin@tmtmtm.org. They may also lodge a complaint with the Spanish Data Protection Agency.