Privacy and the GDPR in streaming services
What data does an IPTV or streaming provider process, what rights do you have under the GDPR, and how can you protect your account and your devices?
In short
- A streaming provider processes the data needed to perform the contract: identification and billing data, device data and logs related to use of the service.
- Under the GDPR you can request information, access, rectification, erasure and data portability, and lodge a complaint with the supervisory authority (in Hungary, the NAIH).
- A strong, unique password and removing unused devices go a long way towards keeping your account secure.
What data does a streaming provider process?
| Data category | Example | Purpose |
|---|---|---|
| Identification and contact data | Name, e-mail address, phone number | Account, communication, administration |
| Billing data | Billing address, payment details | Invoicing, meeting legal obligations |
| Device data | Device type, device identifier | Device activation, device limit, security |
| Usage data | Channel, time, picture quality, error logs | Operating the service, troubleshooting |
| Customer service data | Correspondence, tickets, call recordings | Complaint handling, quality assurance |
Exactly what data a provider processes, for what purpose and for how long must be described in its privacy notice. The notice of Streamy's provider is available here: privacy notice.
Your rights under the GDPR
- Information and access – find out what data is processed about you and request a copy.
- Rectification – correction of inaccurate data.
- Erasure – if the legal basis for processing has ended and no law requires retention.
- Restriction of processing and objection – in certain cases.
- Data portability – receiving your data in a machine-readable format.
- Withdrawing consent – for example consent to marketing contact, at any time.
If you feel your data protection rights have been violated, you can lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH) or go to court. The text of the GDPR is available on EUR-Lex.
Cookies, analytics and personalisation
Besides cookies needed for operation, websites and apps may use analytics and marketing cookies. The latter require your consent, which you can change at any time in the cookie settings. Personalised recommendations are also based on data processing; the privacy notice tells you more.
Account security tips
- Use a strong, unique passwordAt least 12 characters, and do not reuse it elsewhere. A password manager helps a lot.
- Do not share your login detailsA shared password may not only breach the contract but is also a security risk.
- Review connected devicesRegularly check which devices have access to your account and remove those you no longer use.
- Beware of phishingDo not click "account update" links in suspicious e-mails or text messages; sign in directly on the provider's website instead.
- Keep your devices updatedSystem and app updates include security fixes too.
Privacy risks with infringing services
Please note: this article is general information and does not constitute legal advice. Laws and regulatory practice may change; for a specific case, consult a legal professional or the competent authority.
Frequently asked questions
Does the provider know what I watch?
To operate the service, the system technically processes which channel you are watching. What the provider uses this data for and for how long must be described in its privacy notice.
Can I ask for all my data to be deleted?
Yes, but some data – such as billing records – must be kept for a period set by law. The provider cannot delete these until the retention period ends.
Where can I complain if my data request goes unanswered?
You can turn to the data protection authority – in Hungary, the National Authority for Data Protection and Freedom of Information (NAIH) – or go to court.
Related articles
Try Streamy
Legal live TV with an electronic programme guide on Smart TV, phone and tablet – one account across all your devices.