UGC monitoring — information notice

Who is processing your data

SMTA Socials (Y-tunnus 3612172-8, Hernetie 4 c 87, 01300 Vantaa, Finland — "we", "Someta") is the controller for this processing. For any data-protection matter, including the rights below, contact our data protection contact at privacy@someta.fi.

What we collect and from where

On behalf of our business customers, we query the Instagram Graph API for public posts tagged with that customer's brand hashtags. For each matching post we may store: the author's public username, the post permalink, the caption text, and the image URL. We do not collect private posts, and we do not contact you.

Why (legal basis)

Our legal basis is legitimate interest (GDPR Art. 6(1)(f)): surfacing user-generated content that a brand may wish to ask you for permission to repost. We have balanced this against your rights (EDPB Guidelines 01/2024) and limited the processing accordingly — public data only, minimal fields, short retention, and the opt-out below. We do not use this data to build profiles, to advertise to you, or to train AI models.

How long we keep it

A candidate that a brand does not act on is deleted within 7 days. In all cases candidates are deleted within 90 days. If you opt out below, we remove you immediately.

Your rights

You have the right to object to this processing and to request access or erasure. The quickest way to stop being monitored is to opt out here — enter your Instagram handle and we will add it to our suppression list and delete the un-actioned content we have collected (for anything a brand has already acted on, email privacy@someta.fi):

You can also email privacy@someta.fi to exercise any GDPR right, and you have the right to lodge a complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutettu, tietosuoja.fi).