RSKTV Player Pro is a media player. It does not provide, host, resell or suggest any content: no channels, no films, no content subscription. Playlists and access credentials are added by the user, who is solely and entirely responsible for them.
This policy describes the data we process, why we process it, and the rights available to you. It describes how the service actually works, not a general intention.
1. Controller
RSK DIGITAL SOLUTION S.E.N.C., Québec, Canada.
Person in charge of the protection of personal information
As required by Québec law, one person within the enterprise is in charge of the protection of personal information. Their contact details:
- Title: Associé responsable de la protection des renseignements personnels
- Email: [email protected]
2. Applicable framework
Several sets of rules apply at the same time, and where they differ we apply the more protective one:
- the Québec Act respecting the protection of personal information in the private sector, as amended by Law 25 — supervisory authority: the Commission d'accès à l'information du Québec;
- the Personal Information Protection and Electronic Documents Act (PIPEDA), the Canadian federal statute applicable to commercial activities — authority: the Office of the Privacy Commissioner of Canada;
- the General Data Protection Regulation (GDPR), which applies to a controller established outside the Union where it offers its services to persons located in the Union — which is our situation;
- the UK GDPR, for persons located in the United Kingdom.
Representative in the European Union
Article 27 of the GDPR requires a controller established outside the Union to designate a representative established in the Union, whom data subjects may contact instead of us.
The designation of a representative in the European Union is under way. Their contact details will be published here as soon as it takes effect. In the meantime, data subjects may contact the publisher directly, using the details given above.
3. Data we process
| Data | Why | Legal basis |
|---|---|---|
| Device identifier (MAC address) | Attach the licence to a device, start the trial only once per device, apply activation after payment | Performance of the contract |
| Device key | Authenticate access to the playlist configuration area | Performance of the contract |
| Playlist settings: server address, username, password, or direct link | Send the configuration to your device so that you do not have to type it in with the remote control | Performance of the contract |
| Name of the programme being watched — only during a diagnostic window that you have requested, sixty minutes at most | Understand a playback failure you have reported to us. A single value, overwritten on each send and erased when the window closes: no history is kept | Performance of the contract — support at your request |
| Answer to the verification test (captcha) | Prevent automated attempts on the form | Legitimate interest — security |
| IP address and server logs | Security, abuse prevention, diagnostics | Legitimate interest — security |
| Email, name, country and amount of the order | Issue the invoice, apply the licence, handle a refund request | Performance of the contract and legal obligation — accounting |
| Country inferred from the IP address at the time of purchase | Determine the applicable sales tax and keep evidence of it, as tax law requires | Legal obligation — taxation |
| Transaction reference | Match a payment to the device to be activated | Performance of the contract |
We never see your banking details: payment takes place on our payment providers' platforms.
Your playlist credentials, and your list of titles
When you save a server-type playlist, the address, username and password are sent to our server; the password is stored there encrypted. Depending on the playlist, one of two things happens. Either our server connects to your source with those credentials to retrieve the list of categories and titles and keeps a copy of it — that copy lets your device show the playlist without delay rather than reloading it at every start. Or your device queries the source directly, and our server keeps nothing of it. It is partitioned per device — no query cross-references it with another user's — it serves no ranking, no recommendation and no directory, and it is disclosed to no one. If you would rather entrust us with nothing, enter your settings directly on the device: the site is only a convenience shortcut.
4. What we do not collect
- No viewing history. What you watch does not leave your device, with one strictly framed exception: if you request our support, the support team may open a diagnostic window of sixty minutes at most on your device. During that window only, the name of the programme being watched is sent to us, so that we can understand the failure. That information is overwritten on each send — no history is built from it — and it is erased as soon as the window is closed or expires. Outside that window your device sends nothing: the refusal is enforced by our server, not by the application.
- No data sold or passed to data brokers.
- No advertising, and therefore no advertising profiling.
- No automated decision producing legal effects concerning you.
- No audience measurement: this site loads no Google Analytics, no social network pixel, and no third-party tracker.
- No cookies. See article 8.
5. Recipients
Your data is disclosed only to the providers strictly necessary for the service:
- Payment providers — PayPal and Stripe. Payment takes place on their platforms: we neither see nor store your banking details. We pass them a transaction reference containing your device identifier, so that activation can be applied.
- Host — Hostinger International Limited.
- Application stores — when you install the application from a store (television or mobile), that store applies its own privacy policy, over which we have no control.
No other disclosure to third parties takes place, except where required by law or requested by a competent authority.
6. Retention periods
- Licence and device data: for the duration of the licence, then three years, the general limitation period in Québec.
- Playlist settings, including the password: kept for as long as the playlist is registered on the device, then deleted when you replace it or when the device is deleted.
- Server logs: twelve months.
- Accounting records and evidence of the place of taxation: six years from the end of the last financial year to which they relate, as Canadian tax law requires. That period is binding on us: a request for erasure cannot shorten it.
7. Location and transfers
Location of our servers: France (Paris).
If you reside in Québec
Before any communication of personal information outside Québec, Québec law requires us to carry out a privacy impact assessment and to satisfy ourselves that the information will receive adequate protection there. That assessment is documented and can be provided on request.
If you reside in the European Union
Our servers are located in France, therefore within the European Union: hosting your data does not constitute a transfer outside the European Economic Area. As the publisher is established in Canada, access to that data from Canada relies on the European Commission's adequacy decision for private organisations subject to PIPEDA, which is our situation. No additional safeguard within the meaning of article 46 of the GDPR is therefore required.
As an additional contractual safeguard, our hosting agreement incorporates the European Commission's standard contractual clauses. Should hosting be moved outside the Union, this policy would be updated accordingly.
PayPal and Stripe may also process data outside the Union, under the safeguards provided for in their own policies.
8. Local storage, cookies
This site sets no cookies. It uses only your browser's local storage, for three strictly functional items:
rsktv_lang— the language you have chosen;rsktv_legal_ok— the fact that you have read the notice on the home page;rsktv_waiver— the date and time at which you requested, where applicable, immediate performance of the service and waived your right of withdrawal.
These values stay in your browser, are never transmitted, and disappear when you clear the site's data. They do not require prior consent.
As payment takes place on our providers' platforms, those providers may set their own cookies on their own domains, for security and fraud prevention purposes. Those cookies are governed by their respective policies.
9. Security and incidents
Exchanges with the site and with the activation server are encrypted (HTTPS). Access to the configuration area requires the device identifier, its key, and passing a verification test.
We keep a register of confidentiality incidents, as Québec law requires. Where an incident presents a risk of serious injury, we notify the Commission d'accès à l'information and the persons concerned without delay.
As no system is infallible, we invite you to report any anomaly to us without delay.
10. Your rights
You have the following rights over your personal information:
- Access and rectification;
- Withdrawal of consent, where processing is based on it;
- Erasure, subject to our legal retention obligations;
- Portability — obtaining your computerised information in a structured, commonly used technological format;
- De-indexing or cessation of dissemination, where dissemination causes serious injury to your reputation or privacy;
- Restriction and objection, for persons covered by the GDPR;
- the right to give directions as to what becomes of your data after your death.
To exercise them, write to [email protected] stating the identifier of the device concerned. We reply within thirty days.
You may also lodge a complaint with the competent authority:
- in Québec, the Commission d'accès à l'information du Québec;
- elsewhere in Canada, the Office of the Privacy Commissioner of Canada;
- in the European Union, the supervisory authority of your country of residence (for example the CNIL in France) or that of the place where our representative is established;
- in the United Kingdom, the Information Commissioner's Office.
11. Minors
The service is not intended for minors and we do not knowingly collect information concerning them. In Québec, processing the personal information of a person under fourteen years of age requires the consent of the person having parental authority, except where it is manifestly done for that person's benefit.
12. Changes
This policy may be updated. The date of the last change appears at the top of this page. Any substantial change will be announced on the site.