Legal

GDPR

We're a Dutch company, so the GDPR is simply how we operate. Here's what that means for you in practice.

Last updated 25 September 2026 · LingaCast B.V. is the controller for its own site and accounts, and your processor for event content.

Controller or processor?

Both, in different roles. For your account and anything you send us through this website, we are the controller. For the audio, video, captions and transcripts you put through the platform, you are the controller and we are your processor — we only do what you've asked us to do with it.

Why we're allowed to hold it

  • Contract — running your account and delivering the events you ask for.
  • Legitimate interest — replying to a sales or support message you sent us, and showing this website in the language of the country you visit from, or of your browser's settings.
  • Consent — page statistics through Google Analytics, only after you accept them. You can withdraw it at any time with Change cookie settings in the Privacy Policy.
  • Legal obligation — the records Dutch tax and company law require us to keep.

Page statistics are the only thing we ask your consent for. Accept and Reject are each one click in the banner, and saying no changes nothing else about the site.

Your rights.

Access

Get a copy of everything we hold about you.

Rectification

Have anything wrong about you corrected.

Erasure

Have it deleted, where we're not required to keep it.

Portability

Take your data elsewhere in a machine-readable form.

Objection

Tell us to stop processing based on legitimate interest.

Complaint

Go to the Dutch DPA (Autoriteit Persoonsgegevens) at any time.

Making a request

Email privacy@lingacast.com from the address we hold for you. We answer within 30 days, free of charge. There's no form to fill in — a sentence is enough.

Where your data goes

Our own servers are in the EU. Three suppliers help us run the service — Google for speech and translation (and, if you accept them, page statistics through Google Analytics), Cloudflare for storage and delivery, Microsoft for email — and where any of them processes data outside the EU it is covered by the European Commission's Standard Contractual Clauses. Google is also certified under the EU-US Data Privacy Framework. The current list is in the Privacy Policy, and we'll tell account holders before it changes.

Data Processing Agreement

If you're putting your own audience's data through the platform you'll want a DPA with us. Ask sales and we'll send ours, or work from yours.

If something goes wrong

In the event of a personal data breach affecting you, we notify the Dutch DPA within 72 hours and tell affected customers directly.