The purpose of this Data Protection and Cookie Policy is to explain how Sony Music Entertainment Germany GmbH, Balanstr. 73, Building 31, 81541 Munich, Germany (hereinafter referred to as “SONY MUSIC”, “Us”, or “We”) processes your personal data in connection to your use of this website.
Compliance with the statutory provisions on data protection is a matter of course for us. Furthermore, we are committed to protecting and respecting your privacy to the best of our ability. To that end, the following information outlines the manner in which and the extent to which we use and process our users’ personal data. In order to ensure that you understand our position and approach with regard to your personal data and how we handle it, please read the text carefully. Please contact us via the contact details provided at the end of this Data Protection Policy if you have any questions.
Our websites and apps (websites and apps shall be collectively referred to as “Website”) are primarily informational. We rarely process personal data on the website. There are only a few instances in which we require your personal data in order to provide you with certain services, such as newsletter subscriptions and application submissions. The website can also be used without the provision of any personal data, in particular, through the deactivation of cookies.

SONY MUSIC is responsible for the processing of your personal data on the website.

Special Note to Minors under 16 Years of Age

If you are younger than 16 and would like to subscribe to a newsletter, a parent’s email address must be provided in order for us to obtain consent for newsletter registration. We also reserve the right to make the use of other Internet services on the website dependent on a higher minimum age requirement.

Special Note to Parents

SONY MUSIC encourages all parents and guardians to educate their children on the safe and responsible use of personal information on the Internet and, where appropriate, to use parental control software that ensures child-friendly Internet use. Such software can also prevent children from disclosing their names, addresses, or other personal information without parental permission. Children under the age of 16 are prohibited from submitting personal information to SONY MUSIC’s website without the consent of their parents or guardians. SONY MUSIC guarantees that it will not knowingly collect personal data from children under the age of 16, use it in any way, or disclose it to third parties without authorization.

“Personal Data” or “Data” refers to any information that relates to the personal or factual circumstances of an individual and that makes it possible to identify that individual. Such information includes, for example, your name, your email address, your IP address, as well as the content of any message that you send to us. Your Personal Data is processed for the purposes specified below:

(a) Visiting our Website

You can browse the website and view all areas without any Personal Data being collected, provided that you have objected to the use of cookies.
The weblogs of our web server are also processed using information relating to your use of the website in order to operate the website and to ensure IT security. Such data, which is processed pursuant to Art. 6 (1) lit. f GDPR, helps to satisfy our interest in making the website available in a functional and secure manner while, correspondingly, allowing you to be able to use the site in an optimal manner; therefore, your interests are not at odds with the processing of such data.
Your usage data will be deleted immediately following your use of the site or when it is no longer required for IT security purposes. Beyond that, your usage data will only be stored for the fulfillment of any legal retention periods.

(b) Newsletter Subscription

If you sign up to receive our email newsletter, your email address and, should you choose to provide it, your name, gender, and country of residence will be processed. If you provide us with your first name and last name, that information will also be processed in order to enable us to personally address the newsletter to you.
Such Personal Data shall be processed on the basis of your consent (Art. 6 (1) lit. a GDPR) in order for the newsletter you have ordered to be sent to you. You can unsubscribe from our email newsletter at any time, effective immediately with future effect.
In addition, upon your registration, the IP address of your computer and the date and time of registration, as well as your confirmation of registration, shall be processed to enable us to document your consent.
Subject to your consent (Art. 6 (1) lit. a GDPR), your use of our email newsletter will also be evaluated in order to allow us to further optimize our email newsletter and our marketing and to better adapt it to your needs. To that end, whether or not you have opened our newsletter and the specific content you have clicked on shall be processed.
Your data will be stored for as long as you desire to receive our newsletter. The data provided for the newsletter mailing will be deleted immediately upon receipt of your subscription cancellation. Beyond that, such data will only be stored for the purpose of fulfilling any legal retention obligations.

(c) Contacting Us

When you contact us, e.g., via email, the data you provide (e.g., name, contact details, and content of the request) will be processed by us in order to enable us to respond to your request.
The data that we receive from you shall be processed pursuant to Art. 6 (1) lit. f GDPR, thereby allowing us to respond to your request while, correspondingly, satisfying your need to receive a response; therefore, your interests are not at odds with the processing of your data.
The data that we receive shall only be stored for the purpose of contacting you and only until we have conclusively answered your inquiry. Beyond that, such data will only be stored for the purpose of fulfilling any legal retention obligations.

(d) Job Application Submission

The personal data that you provide to us in an application shall be processed in order to evaluate your application, that is, to determine whether you are suitable for a position at our company and whether an interview invitation should be extended.
The data, which is processed pursuant to Art. 6 (1) lit. b GDPR, shall be used for verification purposes in connection with a potential contractual employment relationship between SONY MUSIC and you. When submitting your application, please refrain from providing any sensitive data, such as information concerning your health or religion, unless such data is absolutely pertinent to your application. Such sensitive data shall otherwise only be processed on the basis of your consent.
In the event of employment, your application data will be stored in your personnel file – to the extent necessary. In the event that we are unable to hire you, your Personal Data will be deleted six (6) months after you have been notified of our decision. Beyond that, in both cases, your application data will only be stored for the purpose of fulfilling any statutory retention obligations. In the case of an unsuccessful application, your application data will only be stored beyond the six months upon the granting of your specific consent in order to enable us to consider and contact you for other vacant positions. Your consent can be revoked at any time with future effect.

(e) Demos

The personal data that you send us with demos (e.g., name, address, contact details, images, recordings, time of submission, etc.) shall be processed in order to evaluate the suitability of your demo work and, if applicable, to contact you in this regard.
The data that we receive from you shall be processed pursuant to Art. 6 (1) lit. b GDPR, and shall be used for verification purposes in connection with a possible contractual relationship between SONY MUSIC and you. Personal Data received as part of a demo shall be stored for 10 (ten) weeks and shall be deleted if no cooperation is deemed feasible. In the event that cooperation is sought, any data necessary for such collaboration shall be stored for the duration of the contractual relationship. Beyond that, in either case, such data will only be stored for the purpose of fulfilling any legal retention obligations.
Additional information on demos can be found at: https://sonymusic.de/unternehmen/demos.

(f) App-specific Data Processing

With respect to our apps, any data that is necessary for the provision of each app’s services shall also be processed. In order to use our “Ooigo Kids Player” app, for example, information regarding the age of the respective child is required in order to provide age-appropriate services. Additional details, such as those on gender and radio play preferences, are provided on a voluntary basis and help us to make our offers even more personalized. The uploading of a profile picture is also done voluntarily in an effort to personalize the respective app account.
The necessary data that we receive from you is processed pursuant to Art. 6 (1) lit. b GDPR, and is required to ensure the provision of age-appropriate content. Other voluntarily submitted information is processed on the basis of your consent (Art. 6 (1) lit. a GDPR), which you grant when you enter such data. Your consent can be revoked at any time with future effect.
Your data will only be stored for the duration of your use of our app services. The data collected for the use of the app shall be deleted when you delete the app from your device.
In order to use our apps, it may be necessary to log in to the apps via your own Spotify account. Where the services are provided by Spotify (e.g., searching for tracks), additional information can be found in Spotify’s data protection policy at: https://www.spotify.com/de/legal/privacy-policy/.

(g) Participation in Raffles, Prize-based Competitions, and Similar Activities

For the implementation of promotion campaigns, such as raffles and prize-based competitions, the provision of Personal Data, such as name, date of birth, address and/or email address, and/or telephone number shall be required on a regular basis. Such data shall be processed in order to allow you to participate in the respective promotion and to enable us to contact you in the event that you win a prize.
The data that we receive from you is processed pursuant to Art. 6 (1) lit. b GDPR in order to fulfill our obligations with regard to the implementation of a raffle contest.
To that end, the data is stored for as long as is necessary for the implementation of the promotion, that is, until all winners have been definitively determined and notified. Beyond that, such data will only be stored for the purpose of fulfilling any legal retention obligations.
For additional information, please refer to the specific terms and conditions of participation and any further data protection details contained therein for each promotion.

(h) Use of Cookies and Other Tracking Technologies

We also use technologies that assist us in the collection of information regarding the use of SONY MUSIC’s website. Our aim is to improve your online use of our site, to evaluate usage behavior, and to provide you with suitable advertising on our website as well as on the websites of our partners. A list of our cooperation partners (if any) as well as an explanation of what data we share with them and when can be found at the end of this subsection (h).
All technologies that we use are referred to as “cookies” in this policy, which is also intended to include similar technologies, such as web beacons, log files, floodlight tags, pixels, and GIFs. Our own as well as third-party cookies are used to collect the data that we need. An overview of the cookies can be found in the Cookie Box on the website. You can change or revoke your cookie settings at any time via the Cookie Box in the footer of the website under “Cookie Settings”.

(i) Use of our  Discord server

For our Discord-Servers, we use the user engagement tool “LEVELLR” (Levellr Ltd. with a place of business at 2, Television Centre Soho Works, Wood Lane, London, England, W12 7FR, hereinafter: “LEVELLR”), in a way that LEVELLR is provided data of your name, discord account, email-address, country as well as public messages on the specific Discord Server and reactions within at the specific server. The legal basis for the use of “LEVELLR” is Art. 6 (1) 1 lit. f) GDPR. Our legitimate interests in the use of “LEVELLR” are offering a user-friendly experience on our Discord server. This data processed in this context will be deleted as soon as it is no longer necessary for the processing purpose. Further information on the purpose, scope of processing by “LEVELLR” can be found at https://www.levellr.com/pages/privacy-policy 

What Cookies Do We Use?

Cookies help us to improve our site and to provide you with a better and more personalized service, for example, by saving your browsing behavior or by making it possible for us to recognize you when you return to our site. The use of cookies can be prevented by making the appropriate changes to the Cookie Box settings on our website or in your browser. However, please be advised that changing those settings may cause parts of our site to not function properly.
A description of the purposes for which we use cookies, the purposes of the respective cookies, as well as additional information regarding cookies can be found in our Cookie Box.
• Type 1: Essential
These cookies are necessary in order to navigate our website and make full use of its functions, in particular, secure areas. Without these cookies, a number of useful features would not be available to you. These cookies are not used for advertising purposes, nor to create a visitor or usage profile.
• Type 2: Statistics
These cookies collect pseudonymous statistical data about how visitors use the website, e.g., which subpages they visit frequently or whether they receive error messages. The processing of such data serves to improve the functioning of the website.
• Type 3: Preferences
Preference cookies allow a website to remember information that affects the way a website behaves or looks, such as your preferred language or the region you are in. This allows us to tailor our site to your needs and make your visit as pleasant as possible. The data collected by this type of cookie is generally anonymous and does not allow any conclusions to be drawn about your activities on other websites.
• Type 4: Marketing
This type of cookie collects data about your visiting habits in order to provide you with more interesting and personalized advertising about services and products on our website as well as the websites of third parties (e.g., in the context of advertising networks). It also helps to prevent the same ad from being shown to you too often. It can also be used to improve the effectiveness of advertising campaigns. To that end, we use third-party cookies that may track you across various websites operated by different providers.
YouTube Video Embedding
The videos on our website are embedded by the YouTube platform (belonging to Google Inc., based in San Bruno, California, USA), which means the video is played directly on YouTube.com, but displayed on our site. YouTube processes your usage behavior or the video played to save the video in your “watch later” playlist for viewing at a later time and to personalize video recommendations and advertising on the YouTube platform. You can prevent such data transfer by logging out of YouTube beforehand or by objecting via the Cookie Box (“Marketing” category).
Additional information on how YouTube processes your data can be found in YouTube’s data protection policy:
https://policies.google.com/privacy?hl=de&gl=de

Use of Google Analytics
Subject to your consent (Art 6 (1) lit. a GDPR), which we obtain via the Cookie Box, Google Analytics, a web analytics service provided by Google, Inc. (“Google”), is used. Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. IP anonymization is activated on this page, which means that your IP address is shortened by Google. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity, and providing other services relating to website activity and Internet usage to the website operator. The IP address transmitted by your browser within the scope of Google Analytics will not be merged with other Google data.
In addition to web analysis, Google Analytics Remarketing is used to assign you to a target group and then play targeted advertising to you, for example, via the search network, YouTube, display network, or Gmail. The basis of the creation of the target groups is the data collected via Google Analytics. Therefore, no additional usage data is collected from you for Google Analytics Remarketing.
You may object to the storage of cookies by selecting the appropriate settings on your browser or in the Cookie Box (“Marketing” category); however, please note that doing so may prevent you from being able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of such data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

Google Ads Pixel
Subject to your consent (Art 6 (1) lit. a GDPR), which we obtain via the Cookie Box, cookies for Google Ads are used to generate groups of visitors to our site. Doing so allows us to improve our ads in the Google search results, Google Display Ads, and YouTube Ads and to increasingly target returning visitors. User data is stored in the groups for up to two years.
You can revoke your consent to the use of the Google Ads Pixel, as described herein, at any time with future effect in the Cookie Box (“Marketing” category).

DoubleClick Floodlight
Subject to your consent (Art 6 (1) lit. a GDPR), which we obtain via the Cookie Box, DoubleClick’s tags are used to measure the effectiveness of our advertising campaigns, to limit the frequency with which you are shown a particular ad, and to display ads that are relevant to you and your interests. Information regarding the time of your visit, the advertising you clicked on, and your previous user behavior on third-party websites is specifically processed. Such information is solely used by our company for campaign management and campaign control and is not shared with third parties. In addition, user profiles are created, which are used for our own market research purposes – in particular, on the basis of identified interests. Additional information can be found at: https://www.google.com/policies/privacy/ads/ or at https://www.google.com/settings/u/0/ads/authenticated

Use of The Adex
Subject to your consent (Art 6 (1) lit. a GDPR), which we obtain via the Cookie Box, The Adex, a data management platform operated by The Adex GmbH, Berlin, Germany (“The Adex Tool”), is used on our website. Subject to your consent, the The Adex Tool places cookies on your device that process the following categories of data: IP address, Adex ID, the website from which you visited our website, URLs accessed on our website, time of access, data relating to the context and environment of the content viewed on our website (e.g., interest in a particular artist), details regarding the operating system, and the browser used.
With The Adex, we can create audiences (e.g., users who like to listen to pop music) to display personalized ads that match your interests. The The Adex Tool matches our groups with segments belonging to our partners by means of the Adex ID, so, in the event of a match, for example, our partners can deliver personalized advertising when you view their websites. However, our partners do not receive the data that we have processed on you from our website. The Adex does not store the Personal Data of an SME user in the event that a match is made with the Personal Data that a partner has processed relating to that user.

You can revoke your consent to the use of the The Adex Tool, as described herein, at any time with future effect in the Cookie Box (“Marketing” category) or at: https://www.theadex.com/datenschutz-opt-out. However, please note that doing so may prevent you from being able to use all the functions of this website to their full extent.
In addition, subject to your consent, which can be granted on the websites of our partners, a SONY Adex pixel can also be placed on the website by our partners. The data collected by the SONY Adex pixel is processed in the SONY account using The Adex Tool. This data is used to show you personalized advertising about our products and services on the websites of The Adex’s partners. You can revoke your consent at any time by notifying our partners.
Use of Facebook Custom Audience (Email Lists)
Subject to your express consent (Art 6 (1) lit. a GDPR), Facebook Custom Audience (email lists) is used. Facebook Custom Audience enables us to show you targeted advertising content via Facebook whenever you use Facebook or spend time on the platform. Your email address is encrypted (as a “hash value”) and compared with Facebook Ireland Limited. If you access Facebook using the same email address, we may display SONY MUSIC advertisements to you on Facebook in order to provide you with the optimal user experience. Facebook Ireland Limited transmits your hashed email address to Facebook, Inc. in the USA. Facebook stores your email address for a maximum of 180 days. If you do not have a Facebook account or access Facebook via a different email address, your email address will not be used by Facebook and will be deleted. In that scenario, you will not receive any personalized SONY MUSIC ads on Facebook. Facebook also compares your Facebook usage behavior with the usage behavior of similar customers (so-called “lookalike customers”) in order to also display SONY MUSIC advertising on Facebook to those lookalike customers.
Additional information on the sharing of Custom Audiences with cooperation partners can be found in Clause 6.
Additional information can be found at: https://www.facebook.com/about/privacy/ and https://en-gb.facebook.com/business/a/custom-audiences.
You can revoke your consent at any time with future effect at: https://www.facebook.com/settings/?tab=ads#_= or via email using the “Revocation of FB Custom Audience” subject line.

Facebook Website Custom Audience (Pixel):
Subject to your express consent (Art 6 (1) lit. a GDPR), Facebook Custom Audience Website (Pixel) is used. A pixel from Facebook Ireland Limited is integrated into this website (website custom audience pixel). Through this pixel, information about your use of this website (your shortened IP address, cookie ID, pixel ID, usage data, information about your browsing session, the URL of the website you visited, your other browsing behavior (i.e., websites you visit after SONY MUSIC websites), (“FB Website Custom Data”) is collected by Facebook Ireland Limited. Such information can be personally associated with you with the help of additional information that Facebook Ireland Limited has stored about you, e.g., as a result of your ownership of an account on the “Facebook” social network. Based on the information collected via the pixel, you can be shown interest-related advertisements about our offers in your Facebook account (retargeting). The information collected via the pixel may also be aggregated by Facebook Ireland Limited, and the aggregated information may be used by Facebook Ireland Limited for its own web purposes and for third -party advertising purposes. For example, Facebook Ireland Limited may infer certain interests from your browsing behavior on this website and may also use this information to promote third party offers. Facebook Ireland Limited may also combine the information collected via the pixel with other information that Facebook Ireland Limited has collected about you via other websites and/or in connection with your use of the “Facebook” social network “Facebook”, thereby allowing Facebook Ireland Limited to store a profile on you. Such a profile may be used for advertising purposes. Additional information can be found at: https://www.facebook.com/about/privacy/ and at https://en-gb.facebook.com/business/a/online-sales/custom-audiences-website.
Your FB website custom data is processed by Facebook for a maximum of 180 days.
You can revoke your consent to the processing of FB website custom data at any time with future effect via the Cookie Box (“Marketing” category).

Use of Google Customer Match
Subject to your express consent (Art 6 (1) lit. a GDPR), the Google Customer analysis tool is used. Google Customer Match enables us to show you targeted advertising content through the Google Display Network when you are on a partner site within the Google Display Network. To that end, your email address is encrypted and compared as a hash value with Google Inc. (USA). If there is a match – that is, if you use a Google Account with the same email address – we may display SONY MUSIC ads to you on the Google Display Network to provide you with the optimal user experience. If there is no match – that is, if you do not have a Google email address – Google will stop using your email address and delete it. In such an instance, you will not receive any personalized SONY MUSIC advertising on the Google Display Network. Google also compares your usage behavior with the usage behavior of similar customers (so-called “lookalike customers”) in order to display SONY MUSIC advertising in the Google Display Network to those lookalike customers. Additional information can be found at: http://www.google.com/intl/en/policies/privacy/ and https://support.google.com/adwords/answer/6379332?hl=de
You can revoke your consent to the use of Google Customer Match, as described herein, at any time with future effect in the Cookie Box (“Marketing” category) or at: https://www.google.com/settings/ads/anonymous?sig=ACi0TCgUMvH0fNQifQawXEb17FlZOxYKwUD5OR8Ov0qXvgE6iz2sl1TuHIAgqY62GgsZi3WBRETaC3LYQQp9KQfLKBvXVLi_y1lGydYCqyWlb.

Use of Amazon Advertising Audiences
Subject to your express consent (Art 6 (1) lit. a GDPR), the Amazon Advertising Audiences analysis tool is used. Amazon Advertising Audiences enable us to show you targeted advertising content via Amazon when you use or spend time on Amazon. To that end, your email address is encrypted (as a “hash value”) and compared with Amazon.com, Inc. (USA). In the event of a match – that is, if you access Amazon via the same email address – we may display SONY MUSIC ads to you on Amazon or websites on which Amazon markets ads to provide you with the optimal user experience. If there is no match – that is, if you do not have an Amazon account or access Amazon via a different email address – your email address will no longer be used by Amazon and will be deleted. In such an instance, you will not receive personalized SONY MUSIC advertising on Amazon.
Additional information can be found at: https://advertising.amazon.com/blog/advertiser-audiences.
You can revoke your consent to the use of Amazon Advertising Audiences, as described herein, at any time with future effect in the Cookie Box (“Marketing” category) or at: https://www.amazon.de/adprefs .

Use of Twitter Custom Audiences
Subject to your express consent (Art 6 (1) lit. a GDPR), Twitter Custom Audiences are used. Twitter Custom Audiences allows us to show you targeted advertising content via Twitter when you use or spend time on Twitter. Your email address, mobile phone numbers, mobile device advertising IDs (iOS advertising IDs and Google advertising IDs or, if not available, Android IDs), and/or your Twitter @username or Twitter user IDs are compared in encrypted form (as a “hash value”) with Twitter International Company. If you access Twitter via the same email address, mobile phone number, or mobile device advertising ID, or there is a match with respect to your Twitter @username or Twitter user ID, we may display SONY MUSIC ads to you on Twitter to provide you with the optimal user experience. Twitter International Company transmits your hashed email address, mobile phone numbers, mobile device advertising IDs, and/or your Twitter @username or Twitter user IDs to Twitter, Inc. in the United States. If you do not have a Twitter account or there is no match for the data transmitted to Twitter, your transmitted data will not be used any further by Twitter and will be deleted. In such a case, you will not receive any personalized SONY MUSIC advertising on Twitter.

Additional information can be found at: https://twitter.com/en/privacy and https://business.twitter.com/de/help/campaign-setup/campaign-targeting/tailored-audiences/TA-from-lists.html.
You can revoke your consent to the use of Twitter Custom Audiences, as described herein, at any time with future effect in the Cookie Box (“Marketing” category) or at: https://twitter.com/settings/account .
Data Cooperation
Sharing of Target Groups with Partners
Subject to your express consent (Art 6 (1) lit. a GDPR), which you grant in each case via your consent to use the tool mentioned in this Clause 3 (h), the target groups that we have created using the respective tools are shared with our cooperation partners. As a result, our cooperation partners can access our target groups via their own tool accounts and can display advertisements for our target groups via the respective tools. Our cooperation partners only see the name of the target group (e.g., “under 35 years, likes classical music”) and the number of members within the target group, but no other data about you (e.g., your profile name or your email address) is revealed. Our target groups are transmitted to the following cooperation partners: No cooperation partners currently receive such data.
You can revoke your consent to the use of the aforementioned tool at any time via our Cookie Box.

Receipt of Target Groups from Partners
Conversely, target groups that are transmitted to us by our cooperation partners are used, subject to your consent (Art. 6 (1) lit. a GDPR), in order to provide you with SONY MUSIC advertising via the respective tools. The process allows us to see the name of the target group of our cooperation partners and the number of members within the target group, but none of your other data is revealed to us, in particular, no Personal Data. Target groups are shared with us by the following cooperation partners: No cooperation partners currently share such data.
If you have any questions regarding consent, please contact our respective cooperation partners.

Use of Web Beacons
Some of our pages may contain electronic images called web beacons as well as other features that allow us to count visitors to those pages. Web beacons store limited information, including a cookie number, time and date of page view, and a description of the page on which the website is located. Web beacons from third-party advertising providers may also be included. Those web beacons do not contain any personal data and are only used to evaluate the effectiveness of a particular campaign.

Cookie Settings
As indicated, your consent is required in order for some cookies to be set on your device. Our website will automatically ask for your consent via the Cookie Box before setting cookies that require your consent. Cookies can be set on our website at any time via our Cookie Box. Your browser settings can also be changed to notify you whenever you receive a cookie, or, if you do not wish to receive any cookies, you can refuse the receipt of all cookies.
You can revoke your consent to our use of cookies at any time. If you want to restrict or block cookies that have been set up on your device, you can:
• change your browser settings (the help function of your browser should include an explanation),
• delete cookies that have already been received via the browser settings at any time,
• set your preference to the use of certain cookies via http://www.youronlinechoices.com/uk/your-ad-choices, or
• change your settings via our Cookie Box.
Please be aware that the selection of such restrictive settings may render certain areas, content, or features of our website inaccessible.

Unfortunately, data transmission via the Internet is never completely secure. As a result, such transmissions are done at your own risk.
However, once your information has been received, we take stringent security precautions and follow strict procedures in order to prevent unauthorized access. Despite our high data security requirements, we cannot guarantee – given the fact that perfect or unassailable protection does not exist – the complete exclusion of access by third parties. If we have assigned you a password for certain use purposes on our site (or if you have set one), you are solely responsible for maintaining the confidentiality of that password. Please keep your password under lock and key, and do not share it with anyone.

In order to process your data, IT service providers are used. Some of those service providers may be located in and may process your data in the United States of America or another country outside the European Economic Area (“EEA”), for example, in cases in which a service provider’s servers are located outside the EEA. If such locations are countries that do not have data protection laws that are as strict as those to which we are bound, for example, the United States, we will ensure that your data is only transferred outside the EEA in a lawful manner, for example, in cases in which a non-EEA service provider is registered under the Privacy Shield, and that your data is only used in accordance with this Data Protection Policy.

Your Personal Data is only disclosed to the following parties if and to the extent necessary to fulfill the purpose for which it was collected:

(a) Group Companies

Your data may be shared with our affiliated companies for the purposes set out in this Data Protection Policy.

(b) Artists

If you have expressed an interest in receiving information about specific artists and expressly wish to do so, we may transfer your data to the respective artists (or their management). They may then use the data, in accordance with this policy, to keep you updated with information about themselves.

(c) Other Third Parties

Certain statistical data about the purchase and use of our content may be shared with third parties for market research purposes. Such data may include, for example, demographic information about the age group and/or geographic location of groups of users. Statistics of this kind do not contain any Personal Data (such as names or email addresses).

(d) Cooperation Partners

Your data may be shared with our cooperation partners for the purposes stated in this Data Protection Policy.

(e) Special Circumstances

In certain cases, Personal Data may be shared if we have reason to believe that disclosing such data is necessary to identify, contact, and bring legal action against someone who may be causing damage or disruption (intentionally or negligently) to rights or property described in (a) and (b) above. Personal Data will also be disclosed if we have reason to believe that we are required to do so by law. You will be notified separately if and to the extent we are required to do so.

Other Websites

Our website may contain links to other sites that are not controlled by us and are not covered by this Data Protection Policy. If you choose to access other sites via the links made available, the operators of those sites may collect and process data about you that is different from the way we process data.

Where your Personal Data is processed, you are a data subject, as defined by the General Data Protection Regulation (GDPR). According to the GDPR, you are entitled to the following rights vis-à-vis SONY MUSIC:

(a) Right of Access
You have the right to request confirmation from us as to whether Personal Data relating to you is being processed. You also have the right to receive information from us regarding what data we process from you and for what purposes.

(b) Right to Rectification
If the processed Personal Data pertaining to you is incorrect or incomplete, you have a right of rectification and/or completion.

(c) Right to Restriction of Processing
You have the right, in accordance with the legal requirements, to request the restriction of the processing of your Personal Data.

(d) Right to Erasure
You have the right, in accordance with the legal requirements, to request that we delete your Personal Data without undue delay.

(e) Right to Notification
If you have asserted your right to rectification, erasure, or restriction of processing against SONY MUSIC, we are obliged to inform all recipients to whom your Personal Data has been disclosed of such rectification or erasure of the data or restriction of processing, unless it proves impossible or involves disproportionate effort.

(f) Right to Data Portability
You have the right to receive the Personal Data relating to you that you have provided in a structured, standard, and machine-readable format.

(g) Right to Object
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your Personal Data that is carried out pursuant to Art. 6(1) lit. (e) or (f) GDPR; this also applies to profiling based on such provisions.

(h) Right to Object to the Declaration of Consent under the Data Protection Law
You have the right to revoke your declaration of consent under data protection law at any time. Revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until it is revoked.

To that end, every email addressed to you will contain a note on how you can unsubscribe from the mailing list. If you no longer wish to receive communications, you can also send us an email to that effect. We will comply with your request to delete your Personal Data from the distribution list and will not send you any future email, without undue delay.

(i) Automated Decision-making in Individual Cases, Including Profiling
You have the right to not be subject to a decision based solely on automated processing, including profiling, which may have legal effect on you or significantly affect you in a similar manner.

(j) Right to Complain to a Supervisory Authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular, in the Member State of your residence, place of work, or the place of the alleged infringement, if you consider the processing of your Personal Data to be in breach of the GDPR.

(k) Additional Information Regarding Your Rights
Additional information regarding your rights in relation to your Personal Data can be found, for example, on the website of the European Commission at: https://ec.europa.eu/info/law/law-topic/data-protection/reform/rights-citizens_de.

All questions relating to data protection should be directed to our Data Protection Officer:
Werner Hülsmann, Münchener Str. 101 – Building 1 / 1, 85737 Ismaning, Germany
Email: [email protected]
or to
Sony Music Entertainment Germany GmbH, Balanstr. 73, Building 31, 81541 Munich, Germany [email protected] .

Changes to the Data Protection Policy
SONY MUSIC reserves the right to change this Data Protection Policy at any time, in compliance with the applicable data protection regulations. You will be informed of any such changes in good time in advance. This Data Protection Policy was last amended on 17 October 2019.