Privacy Notice for influencers in Cision's media database
This Privacy Notice is for the individual influencers included in Cision's media database. We at Cision are committed to letting you know how we deal with your personal data, to giving you control over how it is used, and to protecting it. Here you will find information about what sort of information we hold about you, how and why we collect it, how we use it, and how we keep it secure. This Privacy Notice also tells you about your rights, how you can exercise those rights, and how the law protects you. Finally, it tells you how you can exercise your preferences to manage the information we have about you, and, if for any reason you do not want to be in our media database, how to ask us to take you out.
Cision is a global communications group of companies that enables our customers to identify and connect with influencers; distribute meaningful communications to those influencers; and measure the impact of those communications. Our customers do this using a number of our different products that allow them access to our media database. Our products and services are operated in many countries under a number of different brands, including Cision, Gorkana, PR Newswire, Hors Antenne, Data Presse, Cision SA, CEDROM, Profnet, HARO, TrendKite and Prime. More detail about the products and services we offer can be found on our website at www.cision.com.
Cision is the data controller and is responsible for your personal data (collectively referred to as Cision, "we", "us", or "our" in this Privacy Notice). Our full contact details are as follows:
12051 Indian Creek Court
Beltsville, MD 20705
5 Churchill Place
Journalist and Influencer hotline: +44 (0)20 7074 2556
If at any time you have any questions about this Privacy Notice or the way we use your personal data please contact our Data Protection Officer by email at Privacy@cision.com
The Media Database
Our media database is a repository of information (and in particular contact information) relating to influencers like you. We call you an "influencer" because you have the ability to influence the behaviour and opinions of others. This term includes traditional journalists working for news publications (print and online), freelance journalists, and other influencers including social media influencers on Twitter, Facebook, Instagram and other platforms. The media database is accessed by our subscription customers via one of our customer-facing platforms (including but not limited to Cision Communications Cloud, MyGorkana, CPRE, CisionPoint, or TrendKite).
What personal information we collect
We limit the information that we collect for use in the media database to that which we think is likely to enable our customers to engage with you in a meaningful and targeted way. The information includes basic information such as your name and contact details, your job title, public social media profiles, areas of interest to you, and possibly some brief biographical information about your career history.
The types of personal data we collect:
We only collect data that is necessary to conduct our business. We collect, use, store and transfer different kinds of data about you which may include some or all of the following:
- Prefix and name
- Job title
- Educational history
- Employment history
- Work address
- Telephone number
- Fax number
- Work email address
- Personal email address (if provided to us by you)
- Twitter handle
- Profile Picture
- Link to LinkedIn profile
- Other social media handles/channels such as Instagram
- Number of social media followers
- Social media profile picture
- Pitch preference (ie. how you wish to be contacted)
- Topics: “Beat” (ie. subject matters you wish to write above)
- Target groups
We do not hold any sensitive personal data about you (such as data about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union memberships, data about your health, genetic and, biometric data) unless you have clearly put such data into the public domain yourself (e.g. you have made such information available to the public by writing about it or by posting it on your social media profile).
How we collect your personal data
The vast majority of the information we hold about you is obtained from publicly available sources or directly from you. This includes your publicly available social media profiles and websites, information about you that is published by your employer (e.g. on your publication's own website) and information from articles you may have written. This information is gathered by our experienced research teams.
We collect your data either directly from you, or from publicly available sources such as:
- Articles or blogs you may have written
- Vlogs you may have created
- Your own website
- Your employer's websites
- Your publisher's website
- Your publicly available social media profiles (including, for example, Facebook, Instagram, Twitter, and LinkedIn)
- Telephone conversations which may be recorded by us to help us improve our training and quality
- Other publicly available online sources
We also collect data from other sources including:
- Other influencers (who may, for example, tell us if you have changed jobs, but we will not publish that information until we have independently verified it)
- Our customers
- Third parties, such as Brandwatch, Talkwalker, IHS Markit and Capestart
- Your employer (if you are employed)
- Your line manager or press team tell us
Depending on the circumstances, once your profile is made live in the media database, we will usually verify that your contact details are correct via either contacting you or your employer directly or checking against your social media profile or websites you appear on.
Cision runs a verification schedule to contact Influencers to ensure that their profile information is up to date and correct. Updates are also provided by Influencers themselves, either by emailing global research teams or visiting:
The purposes for which we will use your personal data
Using this information we then create an influencer profile for you and include it in our media database.
We allow our customers access to our media database via one of our online platforms so that they can view your profile and send you information that they think you might be interested in. This is also beneficial for you as it means you receive targeted news and other information that may be helpful for you. Our primary role is to facilitate the efficient communication between our customer and influencers.
As well as using our media database to simply send communications to influencers, our customers can also use our media database functionality to create their own lists of influencers, add their own data about influencers (which only they can access), and monitor your interaction with the communications that they send you (for example, whether you have opened an email sent via one of our customer facing platforms or clicked on any links contained in that email).
One of the main purpose for using your personal data is to create a repository of data regarding influencers (the media database), and make that media database available to our customers on a paying basis. Depending on which service our customers are signed up for, your personal data may also be processed in one or more of the following ways:
- Browsing the media database: our customers can browse the media database via one of our online platforms (Cison Communications Cloud, MyGorkana, CPRE, CisionPoint, PR Newswire or TrendKite).
- Sending out press releases: our customers can send you press releases, emails or other communications (e.g. direct messages on social media) about things they think you might be interested in.
- Creating lists: Our customers can create lists of influencers. For example, a customer may want to send out a press release to influencers with special knowledge of the construction industry in South West England. Using one of our customer-facing platforms our customers can search for influencers with that particular interest, create and save a list of those influencers, and then send a press release to those influencers on the list.
- Exporting influencer data: our customers can export influencer data from our media database provided they use that data in accordance with all applicable laws.
- Wholesale access to data: some of our customers can purchase wholesale access to the data stored in our media database to re-sell via their own platforms and products.
- Media Monitoring: our customers can browse, by keyword search, publications and social media platforms via one of our online platforms. A customer might search a keyword such as “sunglasses”. Our platform will then automatically return a list of all social media posts, articles, etc. containing the keyword "sunglasses" or words related to that subject. It may also return the contact details of the journalist or influencer who wrote that content, if the journalist included those details in the content. This functionality is not limited to content written by contacts on the media database
- Profiling and Tracking: see how we use your personal data for profiling and tracking for more information.
- Maintaining the administration of our media database.
- Maintaining contact, handling enquiries, complaints and disputes.
- Compliance with all applicable laws and regulations.
Legal basis for processing your personal data
We process your personal data in order to provide our services to our customers. We believe that it is in our legitimate business interests to do so. Processing your data in this way also benefits you as an influencer and also our customers. You will receive focused information from our customers, often ahead of general release, giving you material to write about that is relevant to you and your audience. Our customers are able to communicate more efficiently to influencers who are likely to want to hear what they have to say. We consider and balance any potential negative impact on you and your rights before we process your personal data for our legitimate interests. We do not use your personal data for activities where we believe that our interests are overridden by any unwarranted adverse impact on you. If at any time you want us to remove you from our media database please email us at Privacy@cision.com and process this request as soon as possible.
We may also use your personal data in the following ways:
Media requests: Influencers are free to use our systems and ask for help sourcing upcoming stories or customers who can speak to a specific topic. For example, an influencer writing about EU electric car developments might request to hear from motor industry experts in Europe. The request will be sent to our customers who have signed up to receive them. Customers will email the influencer directly if they can help. Generally, our media request service is used by journalists who want to be connected to our customers.
Alerts: Influencers in the media database can also request to receive updates on changes to other contacts within the media database, typically changes to roles or moves within the industry. These alerts are then distributed to influencers via an "alerts newsletter" by our research team.
Jobs: Influencers can also receive the latest media jobs information.
- Marketing: Influencers can also receive surveys or invitations to events from Cision.
How to have your profile amended or removed
We want you to be in control, so if at any time you want to see or amend your influencer profile, please email us at Privacy@cision.com Similarly, if at any time you want us to take you out of our media database altogether please email us at Privacy@cision.com and we will process your request as soon as possible.
Our media database is not intended for children and we do not knowingly collect personal data relating to children. If you are under the age of 16, please let us know and we will take you out of our media database.
We may use your personal data for automated profiling purposes. The profiling we conduct and how it is used is limited. We use profiling to evaluate (amongst other things) your personal preferences, interests, behavior and audience and make this available to our customers in response to particular inquiries that they may make through one of our platforms. We may, for example, use profiling to help our customers understand what subjects you like to talk about (which is apparent from the nature of the content you produce) and the extent of your audience (apparent from the number of social media followers you have). This in turn helps our customers direct their communications to you more efficiently and effectively. The results of this profiling are available in your own profile on the media database.
You have the right to object to us profiling with your personal data. If you would like us to stop profiling with your personal data, then please contact us at Privacy@cision.com and we will remove you from the media database
In common with many of our competitors and other online service providers, we also carry out some monitoring of your engagement with the email content that you are sent by us and by our customers using the Cision email platform. This may include placing a cookie on email content that you are sent.
We combine the personal data from your influencer profile with the publicly available content that you have produced and then present this information to our customers through one of our customer facing platforms. Using profiling, our customers are then able to search these two publicly available data sets and:
- Understand what subjects you are interested in: A customer might search a keyword such as "tractors". Our platform will then automatically return a list of all influencers in the media database who are talking about tractors in their social media posts, articles, etc.
- View and evaluate your content: A customer might search our platform for your name (or the name of any other influencer) and view the actual content you have produced. (If the content is a print article, then a copy will be displayed to the customer within the Cision platform they are using. If the content is online, then the customer is provided with a hyperlink to the online location of the content). Your content may then be given an automatically generated 'favorability score', which is calculated by analyzing the words you have used in the content against an agreed list of words that the customer considers to be 'favorable' or 'unfavorable' according to their preferences/industry focus. We may also give an automated 'tone' score to any given piece of your content which, depending on the words you have used in the content, will tell the reader whether you view the topic or subject matter in a positive, negative or neutral light. This is derived by looking at groupings of words such as "good", "great", "brilliant", "awful", "dangerous", "sad", etc.
- Understand your audience and its location: Our customers are able to see your publicly available social media feeds via our customer-facing platforms, together with data from those feeds including for example how many Twitter followers you have and (using data provided to us directly by Twitter) roughly where they are based geographically.
We do not make any automated decisions based on profiling. The profiling we do enables our customers to better identify influencers that are interested in the communications our customers want to send.
Cision emails may contain a small, invisible, one pixel image which can be used to let the sender (our customer) know when the email is opened. If the email recipient has images enabled on their device, when the email is opened, a message (an automatic request) is sent to Cision’s server requesting the image. That request is logged by Cision and tells us, or our customer, that the email has been opened. A similar process may be used in relation to links or attachments in the email, with a request being sent to Cision for the content that is accessible via the links or attachments, thus telling Cision that the link or attachment has been accessed. This helps our customers understand what content interests you, and tailor future communications accordingly.
You benefit from receiving targeted and focused information from Cision’s customers on issues which are of interest to you, as specifically identified by you or through the content of your published materials. Additionally, if you so wish, you can take advantage of related products and services (for example Media Requests and Alerts) offered by Cision.
However, if you do not wish this to happen then you can opt-out at any timeby emailing email@example.com.
How we share your personal data and who we share it with
We may share your personal data with our customers, companies within the Cision Group, and other parties detailed below. We may also transfer your personal data outside of the European Economic Area (EEA), but only when specific safeguards have been put in place in order to protect your personal data.
We may share your personal data with one or all of the following:
- Customers: our customers are typically communications and marketing departments within businesses or other institutions, or PR agencies. Our customers come from all sectors.
- We share your data by allowing them access to the media database through our various online platforms.
- Internal Third Parties: these include other companies within the Cision group of companies such as Cision, Gorkana, PR Newswire, Cision SA, CEDROM, TrendKite and Prime. Cision Legal Entities
- External Third Parties:
- Service providers who work on behalf of the Cision group of companies for the performance of any contract we enter into with them, for example: IT support in each country.
- Professional advisors including lawyers, accountants and insurers where we need to do so in order to comply with our legal obligations or for other business reasons.
- Authorities who require reporting of processing activities in certain circumstances.
- Other Third Parties:
- Customers who purchase wholesale access to the data in our media database to re-sell via their own platforms and products.
- External Third Parties list
We may also share your personal data with third parties to whom we may choose to sell, transfer, or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this privacy notice.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with binding contractual obligations which satisfy the requirements of the data protection legislation.
We may share your personal data with entities within the Cision group of companies. This may involve transferring your personal data outside of the European Economic Area (EEA). Some of the third parties to whom we may transfer your personal data (including some of our customers) are also based outside of the EEA, so their processing of your personal data will likewise involve a transfer outside the EEA. Where your personal data is transferred outside of the EEA we do so in accordance with model contracts approved by the European Commission to ensure that there is an adequate level of protection for your personal data.
Our security measures
We are committed to protecting your personal data. We put in place safeguards including robust and appropriate technologies, processes, and contractual arrangements, so that the data we have about you is protected from unauthorized access and improper use, and we will also not keep your personal data for longer than is necessary.
The safeguards we have put in place to protect your personal data include:
How long will we use your personal data?
We will keep your personal data only for as long as is necessary for the purposes set out in this privacy notice and to fulfill our legal obligations, but not longer than seven years after you ask to stop receiving communications. We will not keep more data than we need.
Under certain circumstances, if you reside in the EU or if your data is processed in connection with one of our European businesses, you have rights under data protection laws in relation to your personal data, including the right of access; the right to rectification; the right to erasure; the right to restrict processing; the right to data portability; and the right to object. If you wish to exercise your rights please contact firstname.lastname@example.org
We respect and honor these rights and will help you to exercise them insofar as we are able. These rights are not absolute – in some cases they will not apply to you, or to the particular use that we are making of your data, and there are exceptions (for example if we have to process the data to comply with our own legal obligations) but if that is the case we will let you know.
Your rights include the right to:
- Access your personal information (via what is commonly known as a "data subject access request").
- Require us to correct any mistakes in your information which we hold.
- Require the erasure of personal information concerning you in certain situations.
- Receive the personal information concerning you which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to a third party in certain situations.
- Object at any time to processing of personal information concerning you for direct marketing.
- Object to decisions being taken by automated means (including profiling) which produce legal effects concerning you or similarly significantly affect you.
- Object in certain other situations to our continued processing of your personal information.
- Otherwise restrict our processing of your personal information in certain circumstances.
For further information on each of these rights, including the circumstances in which they apply, see the Guidance from the UK Information Commissioner’s Office (ICO) on individual rights under the General Data Protection Regulation.
You also have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues. We hope that we would be able to resolve any concerns that you may have before you approach the ICO so please do contact us in the first instance.