Video privacy notice
Async Digital Ltd Cardiff, UK
This notice is for people who play a video or open a post on async-digital.com, or on cv.async-digital.com, the CV site that we also run. Our videos and posts are hosted by Vimeo, by YouTube or by LinkedIn, and the caption beside each one says which. Until you press play, the page shows a still image or a plain card from our own website, and nothing is sent to any of them. This notice explains what happens when you do press play. You do not have to: the rest of the page works the same either way.
Last updated
Who we are
Async Digital Ltd puts the videos and posts on the pages of async-digital.com and cv.async-digital.com. At the moment you press play or open a post, we and the provider (Vimeo, YouTube or LinkedIn) are joint controllers of your data. We decide that the player is on the page and that it loads only when you press it. The provider decides everything it does with your data after that, under its own privacy policy, and is responsible for it.
Async Digital Ltd is registered in England and Wales, company number 16950485. We are registered with the Information Commissioner’s Office, registration number ZC271795.
Videos hosted on Vimeo
When you press play, the video loads from Vimeo.com, Inc. Vimeo receives your IP address, the details any browser sends with a request, such as the browser type, and which video you played. It also learns which of our sites you came from, async-digital.com or cv.async-digital.com, but not from which page.
We load the player with Vimeo’s “do not track” setting, which stops Vimeo setting tracking cookies or collecting analytics about your viewing. Vimeo may still store on your device what its player needs to play the video safely, such as security cookies from Cloudflare, which protects Vimeo’s player.
In Google Chrome, Vimeo’s player also fetches Google’s casting software from Google’s servers, so Google LLC receives your IP address too.
Our lawful basis is our legitimate interest in showing you a video you chose to play (UK GDPR Article 6(1)(f)).
You have the right to object. The simplest way is not to press play. If you have already played a video, Your rights below explains what you can do.
Videos hosted on YouTube
When you press play, the video loads in YouTube’s embedded player, which Google LLC runs. We use YouTube’s privacy-enhanced mode. Google receives your IP address, the details any browser sends with a request, and which video you played. It also learns which of our sites you came from, async-digital.com or cv.async-digital.com, but not from which page. Google records how the video plays, such as how long you watch and at what quality, for its own purposes.
YouTube may store cookies or similar data on your device. It may also show ads on the video, which in this mode are not personalised. Some of this is not needed to play the video, so we ask for your consent first. The caption under the video says what pressing play does, and pressing play means you agree.
Our lawful basis is your consent (UK GDPR Article 6(1)(a)). You can withdraw your consent at any time. We do not remember your choice, so we ask again every time you press play, and if you do not press play, nothing new is stored. To remove what YouTube has already stored, clear the data for the site you played it on in your browser’s settings.
The player is provided through YouTube API Services. YouTube’s Terms of Service and the Google Privacy Policy apply to it.
Posts hosted on LinkedIn
Some pages on cv.async-digital.com show a post from LinkedIn, such as an award or a former employer’s post about a talk. Until you press it, the post is a plain card from our own website. When you press it, the post loads in LinkedIn’s embedded player, which LinkedIn Ireland Unlimited Company runs for people in the UK. LinkedIn receives your IP address, the details any browser sends with a request, and which post you opened. It also learns which of our sites you came from, but not from which page. If you are signed in to LinkedIn in the same browser, LinkedIn also learns that you opened the post.
LinkedIn’s player stores cookies on your device. They include bcookie and bscookie, which identify your browser for a year, and li_gc, lidc, JSESSIONID and __cf_bm, which LinkedIn uses to remember your cookie choices, route your requests and protect its service. A cookie that identifies your browser for a year is not needed to show you the post, so we ask for your consent first. The caption beside the card says what pressing it does, and pressing it means you agree.
Our lawful basis is your consent (UK GDPR Article 6(1)(a)). You can withdraw your consent at any time. We do not remember your choice, so we ask again every time you press a card, and if you do not press it, nothing new is stored. To remove what LinkedIn has already stored, clear the data for linkedin.com in your browser’s settings.
LinkedIn’s Privacy Policy and Cookie Policy explain what LinkedIn does with your data.
Where your data goes
Vimeo.com, Inc., Google LLC and LinkedIn Corporation are all based in the United States. LinkedIn Ireland Unlimited Company may send your data on to LinkedIn Corporation. All three are certified under the UK Extension to the EU-U.S. Data Privacy Framework, which UK law recognises as protecting data sent to certified US organisations. We checked all three on the Data Privacy Framework list at dataprivacyframework.gov on .
Vimeo’s privacy policy, the Google Privacy Policy and LinkedIn’s Privacy Policy explain how each of them handles your data.
What we receive
We receive nothing about you from Vimeo, YouTube or LinkedIn, so we keep nothing. The providers may show us totals, such as how many times a video was played, but never who played it.
Your rights
Because we hold nothing about you from a video, there is nothing for us to show you, correct or delete. You can use your rights, including the right to object and the right to have your data erased, with Vimeo, Google or LinkedIn directly, through the privacy policies linked above. If you email privacy@async-digital.com, we will tell you how to reach the right one.
You have the right to complain to the Information Commissioner’s Office (ICO), the UK regulator for data protection, at ico.org.uk.
Changes to this notice
If we change who hosts our videos or how the player loads, we will update this page and change the date at the top. The current version always lives at this address.
Contact
Async Digital Ltd
167-169 Great Portland Street, London, W1W 5PF
Registered in England & Wales, company number 16950485
ICO registration ZC271795
Director: Rob Nash
Privacy contact: privacy@async-digital.com