Privacy policy for the YouTube channel of the Cayman Islands Department of Tourism
Dear visitors of our YouTube channel,
The following information explains the data processing on our channel at https://www.youtube.com/channel/UC0xmkHiq-tiIxwO341fjFqg (that you can visit via browser or the YouTube app; ("YouTube Channel") by
- us, the Cayman Islands Department of Tourism, Government Administration Building, Box 134, 133 Elgin Avenue, Grand Cayman, KY1-9000, Cayman Islands ("CIDOT" or "We"), as the operator of the YouTube Channel, and
- Google (located in Ireland at: Google Ireland Limited, Gordon House Barrow Street Dublin 4, D04E5W5, Ireland; located in the USA at: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).
The technical operation of the YouTube platform must be distinguished from the responsibility under data protection law. YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA ("YouTube"), which belongs to the Google Group, operates the platform. Google – as defined above – is responsible for the data processing (Google Ireland or Google LLC depending on the region of the YouTube Channel user).
Both we and Google are responsible for certain portions of the processing of your data when you use the YouTube Channel. However, Google primarily processes the data. Below we explain how this works and what your rights are:
I.Statistical evaluations
When you visit our YouTube Channel, we do not receive any personally identifiable information about you unless you actively like, post, share, comment, or take other active steps to use it.
However, we do receive statistical evaluations of the use of our YouTube Channel, which are made available to us in anonymized by Google via the “YouTube Analytics” function. These evaluations include the following data in particular:
- Number of subscribers
- Number of total video views
- Total play time and average play time of our videos
- Number of views of our YouTube Channel
- Number of representations and views of thumbnails of our videos
- Demographic information about people who have viewed our videos (region, country, age, gender, language preferences)
This information transmitted to us by Google is aggregated, i.e. summarised in such a way that we cannot associate it with your person. However, this does not necessarily mean that the data collection and data processing at Google itself is also anonymous. Please read the information on data processing by Google: https://policies.google.com/privacy?gl=de&hl=en.
II.Collection and use of personal data
1.Data processing by CIDOT
The manner and extent to which personal data is collected when you visit YouTube depends largely on the behaviour of the user, i.e. you. Therefore, you can partly influence the collection of data.
a)User actions and action data
We only receive personal data from you when you like, dislike, comment on a video or otherwise actively use it. In these cases, however, we will only process the information you have made public on YouTube for us and other users ("Action Data").
The Action Data includes your (user) name, your profile picture and the content published via your profile, if you have set your privacy settings on the YouTube platform accordingly. We do not receive background usage data (such as your IP address or device number or information you have not made public) or other "hidden" data from you, YouTube or Google.
b)Processing purposes - Presentation of our YouTube Channel and answering inquiries
We process Action Data solely for the purposes that you and we pursue with the use of YouTube, namely
- Presentation and operation of our YouTube Channel, as well as
- Reply to your public messages addressed to us as well as your comments or videos on the YouTube platform or our YouTube Channel.
In particular, we do not create profiles of you or mix the Action Data with other data we might have about you.
c)Legal basis
We process the Action Data on the basis of our legitimate interest in providing our visitors and subscribers on YouTube with relevant content so they can use our YouTube Channel and its functionalities. We respond to your messages, comments on our videos or posts in order to answer your requests, so for fulfilling contract-like obligations towards you, or based on our legitimate interest to interact with visitors of our YouTube Channel (e.g. thanking you for contributions).
In individual cases, we may need your consent to process your Action Data, e.g. if we want to publish a video in which you appear on our YouTube Channel. If so, we will explain further details about this data processing in connection with obtaining your consent.
d)Data retention
We process your Action Data for the described purposes only as long as necessary, i.e. usually as long as we operate our YouTube Channel or as long as your user action on our YouTube Channel is online. Beyond that, we only store the Action Data for the fulfilment of any legal retention obligations.
e)Data recipients
- Processors. In connection with the purposes described here, we may transfer your Action Data to external service providers, such as IT service providers. We have carefully selected these service providers and have concluded data processing agreements as required by applicable law with them.
- Partners. In individual cases, we will pass on your Action Data to other controllers who process the personal data for their own purposes, as far as this is necessary for contract fulfilment or the provision of services, e.g. in the context of competitions. Our contractual partners may use the data transmitted in this way exclusively for the purpose for which we have transmitted it. The transmission of your Action Data for these purposes is carried out in order to fulfil a contract or due to our legitimate interest in making our operations efficient.
- Other recipients. We will otherwise only transfer your Action Data to other recipients in individual cases if and to the extent required or permitted by law, or to enforce legal claims or to investigate or prevent suspected or actual illegal activity. In these cases, we will inform you separately about the respective transfer if and to the extent that this is legally required.
Please note that since YouTube is a public platform, potentially anyone can see your contributions on YouTube.
2.Data processing by Google
a)Usage data and user content
When you visit our YouTube Channel, Google also collects and processes your personal data, including your Action Data. We have no influence on what data Google processes, to what extent and how, or whether and how Google passes this data on to third parties, especially in countries outside the European Union. It is your responsibility to familiarise yourself with this information and to decide whether you agree to it.
In essence, to the best of our knowledge, Google essentially processes the following personal data about you when you visit our YouTube Channel or the YouTube platform - please note that Google processes many of these data even if you are not logged in or do not have a Google user account:
- Registration and profile data, e.g. name, user name, password, date of birth, e-mail address, telephone number, gender, ID number of your terminal or browser, payment data, information you provide in your user profile, profile photo;
- Uploaded content, including specified settings (e.g. language selection) and metadata (e.g. upload date and time)
- Sent comments
- Usage information, such as videos and advertisements viewed, problems playing videos, likes, dislikes, and storage of videos in "Watch Later" and channels you have subscribed to, subscriber data, search terms, likes, dislikes, and comments on your videos, voice and audio data, IP address, referrer URL, purchase activity, Chrome browsing history, mobile operator, time zone settings, app version, device information, manufacturer, device system, operating system, network type, screen resolution, and apps used
- Location data
- Preferences regarding personalized advertising and interactions with advertising
Google uses this personal data to provide you with the YouTube platform and other Google services, to improve, develop and manage the YouTube platform, to ensure your security on the YouTube platform, but also to analyse your usage behaviour, to derive your preferences and interests from your usage and to offer you personalised content.
Google offers you the ability to restrict the processing of your personal data by Google in the privacy settings of your Google profile (which is also used for the YouTube platform).
b)Data processed via Google cookies
When you visit our YouTube Channel (through the YouTube website or the YouTube app), Google may use cookies and similar technologies such as pixels to optimize our YouTube Channel and the YouTube platform to provide faster and safer access, collect data about user behaviour on the YouTube platform for analytical purposes, and serve ads to you on partner sites.
In addition, advertisers or other partners of YouTube or Google may place cookies or similar technologies on your device. We have no influence on these data processing activities.
For more information about cookies on the YouTube platform can be found here: https://policies.google.com/technologies/cookies?hl=en
III.Your data protection rights (particularly if you are in the EU – might not apply / fully apply in other jurisdictions)
1.With us
You have the following legal rights against CIDOT with regard to the Action Data, provided the respective requirements are met. You can find more information about your rights and the relevant requirements on the website of the EU Commission at https://ec.europa.eu/info/law/law-topic/data-protection/reform/rights-citizens_en.
a)Right of access to data
You have the right to request confirmation as to whether we process personal data concerning you. If this is the case, you have the right to be informed about this personal data and to receive further information, e.g. the purposes of processing, the recipients and the planned duration of storage or the criteria for determining the duration.
b)Right to rectification and completion
You have the right to request that your incorrect personal data be corrected immediately. Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data.
c)Right to erasure ("right to be forgotten")
You may have the right to have your personal data erased. This is the case, for example, if your personal data are no longer necessary for the original purposes, if you have revoked your consent under data protection law or if the personal data have been processed unlawfully.
d)Right to limit processing
You have the right to limit the processing of your personal data in the cases prescribed by law.
e)Right to data portability
You have the right, in the cases required by law, to receive personal data concerning you in a structured, common and machine-readable format.
f)Right to object
You have the right to object at any time, for reasons arising from your specific situation, to the processing of certain personal data concerning you.
In the case of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing, including any profiling, insofar as it is connected with such direct marketing.
g)Right to revoke your consent
You can revoke your consent to the processing of your personal data at any time with effect for the future. However, the legality of the processing carried out up to the time of revocation is not affected by this.
h)Right to complain to a data protection authority
You have the right to complain to a supervisory authority, in particular in the EU Member State in which you are resident, in which your place of work or the place of the suspected infringement are located, if you believe that the processing of personal data concerning you is in breach of applicable data protection laws, particularly the GDPR.
2.At Google
For information on data processing and your data protection rights, please refer to Google's privacy policy: https://policies.google.com/privacy?gl=de&hl=en.
IV.Further Information and Contact
If you have any further questions that this privacy policy could not answer, you are welcome to send us an e-mail to the following address: dpcm@caymanislands.ky.
If you would like to learn more about the Cayman Islands, please visit our website at https://www.visitcaymanislands.com/en-gb/. We inform you about data processing in connection with the Visit Cayman Islands website in our website privacy policy, available at https://www.visitcaymanislands.com/privacy-policy.
Version December 2020