Spotify Privacy Policy changes — 20190305_rev01

52

- the right to object to your personal data being processed for direct marketing purposes;

53

- Right to Data Portability - the right to request a copy of your personal data in electronic format and the right to transmit that personal data for use in another party's service; and

54

- Right not to be subject to Automated Decision-making - the right to not be subject to a decision based solely on automated decision making, including profiling, where the decision would have a legal effect on you or produce a similarly significant effect.

55

56

In order to enable you to exercise these rights with ease and to record your preferences in relation to how Spotify uses your personal data, we provide you with access to the following settings via your Account Settings page:

57

58

- **_Privacy Settings_** - allows you to control some of the categories of personal data we process about you, enables you to access your personal data via a 'Download my Data' button, and includes a link to the [Privacy Center](https://www.spotify.com/privacy/) on spotify.com where you can find out more information about how Spotify uses your personal data and what your rights are; and,

58

- **_Privacy Settings_** - allows you to control some of the categories of personal data we process about you, enables you to access your personal data via a 'Download my Data' button, and includes a link to the [Privacy Center](https://www.spotify.com/privacy/plain) on spotify.com where you can find out more information about how Spotify uses your personal data and what your rights are; and,

59

- **_Notification Settings_** - allows you to choose which communications you receive from Spotify, manage your publicly available personal data, and set your sharing preferences.

60

61

The Privacy Center puts you in control of how Spotify processes your personal data. It provides you with information about what happens if you adjust your settings on your Account Settings page and how to opt out of receiving certain messages from Spotify. If we send you electronic marketing messages based on your consent or as otherwise permitted by applicable law, you may, at any time, respectively withdraw such consent or declare your objection ("opt-out") at no cost. The electronic marketing messages you receive from Spotify (e.g. those sent via email) also will include an opt-out mechanism within the message itself (e.g. an unsubscribe link in the emails we send to you).

62

63

You can find out more about the GDPR rights described above and the controls we provide to all Spotify users with respect to these rights in the 'Your Rights' section contained in the Privacy Center. If you have any questions about your privacy, your rights, or how to exercise them, please contact our Data Protection Officer using the 'Contact Us' form on the Privacy Center. We will respond to your request within a reasonable period of time upon verification of your identity. If you are unhappy with the way we are using your personal data you can also contact and are free to lodge a complaint with the Swedish Data Protection Authority (Datainspektionen) or your local Data Protection Authority.

64

34	34	The aim of this Policy is to:
35	35
36	36	> 1. Ensure that you understand what personal data we collect about you, the reasons why we collect and use it, and who we share it with;
37	37	> 2. Explain the way we use the personal data that you share with us in order to give you a great experience when you are using the Spotify Service; and
38	38	> 3. Explain your rights and choices in relation to the personal data we collect and process about you and how we will protect your privacy.
39	39
40		We hope this helps you to understand our privacy commitments to you. For further clarification of the terms used in this Policy please visit our [Privacy Center](https://www.spotify.com/privacy/) on spotify.com. For information on how to contact us if you ever have any questions or concerns, please see the ['How to Contact Us' Section 14]() below. Alternatively, if you do not agree with the content of this Policy, then please remember it is your choice whether you want to use the Spotify Service.
	40	We hope this helps you to understand our privacy commitments to you. For further clarification of the terms used in this Policy please visit our [Privacy Center](https://www.spotify.com/privacy/plain) on spotify.com. For information on how to contact us if you ever have any questions or concerns, please see the ['How to Contact Us' Section 14]() below. Alternatively, if you do not agree with the content of this Policy, then please remember it is your choice whether you want to use the Spotify Service.
41	41
42	42	## 3\. Your rights and your preferences: Giving you choice and control
43	43
44	44	You may be aware that a new European Union law, called the General Data Protection Regulation or "GDPR" gives certain rights to individuals in relation to their personal data. Accordingly, we have implemented additional transparency and access controls in our Privacy Center and Privacy Settings to help users take advantage of those rights. As available and except as limited under applicable law, the rights afforded to individuals are:
45	45
46	46	- Right of Access - the right to be informed of and request access to the personal data we process about you;
52	52	- the right to object to your personal data being processed for direct marketing purposes;
53	53	- Right to Data Portability - the right to request a copy of your personal data in electronic format and the right to transmit that personal data for use in another party's service; and
54	54	- Right not to be subject to Automated Decision-making - the right to not be subject to a decision based solely on automated decision making, including profiling, where the decision would have a legal effect on you or produce a similarly significant effect.
55	55
56	56	In order to enable you to exercise these rights with ease and to record your preferences in relation to how Spotify uses your personal data, we provide you with access to the following settings via your Account Settings page:
57	57
58		- _Privacy Settings_ - allows you to control some of the categories of personal data we process about you, enables you to access your personal data via a 'Download my Data' button, and includes a link to the [Privacy Center](https://www.spotify.com/privacy/) on spotify.com where you can find out more information about how Spotify uses your personal data and what your rights are; and,
	58	- _Privacy Settings_ - allows you to control some of the categories of personal data we process about you, enables you to access your personal data via a 'Download my Data' button, and includes a link to the [Privacy Center](https://www.spotify.com/privacy/plain) on spotify.com where you can find out more information about how Spotify uses your personal data and what your rights are; and,
59	59	- _Notification Settings_ - allows you to choose which communications you receive from Spotify, manage your publicly available personal data, and set your sharing preferences.
60	60
61	61	The Privacy Center puts you in control of how Spotify processes your personal data. It provides you with information about what happens if you adjust your settings on your Account Settings page and how to opt out of receiving certain messages from Spotify. If we send you electronic marketing messages based on your consent or as otherwise permitted by applicable law, you may, at any time, respectively withdraw such consent or declare your objection ("opt-out") at no cost. The electronic marketing messages you receive from Spotify (e.g. those sent via email) also will include an opt-out mechanism within the message itself (e.g. an unsubscribe link in the emails we send to you).
62	62
63	63	You can find out more about the GDPR rights described above and the controls we provide to all Spotify users with respect to these rights in the 'Your Rights' section contained in the Privacy Center. If you have any questions about your privacy, your rights, or how to exercise them, please contact our Data Protection Officer using the 'Contact Us' form on the Privacy Center. We will respond to your request within a reasonable period of time upon verification of your identity. If you are unhappy with the way we are using your personal data you can also contact and are free to lodge a complaint with the Swedish Data Protection Authority (Datainspektionen) or your local Data Protection Authority.
64	64
128	128	\| Marketing Data \| This personal data is used to enable Spotify and our partners / service providers to send you marketing communications either:
129	129
130	130	> - Via email;
131	131	> - Whilst using the Spotify Service; and/or
132	132	> - Direct from the third party.
133	133
134		You can find out more about the personal data collected and the controls you have in relation to the marketing communications you receive via the [Privacy Center](https://www.spotify.com/privacy/) \|
	134	You can find out more about the personal data collected and the controls you have in relation to the marketing communications you receive via the [Privacy Center](https://www.spotify.com/privacy/plain) \|
135	135
136	136	## 6\. What do we use your personal data for?
137	137
138	138	When you use or interact with the Spotify Service, we use a variety of technologies to process the personal data we collect about you for various reasons. We have set out in the table below the reasons why we process your personal data, the associated legal bases we rely upon to legally permit us to process your personal data, and the categories of personal data (identified in [Section 5 'What personal data do we collect from you?']()) used for these purposes:
139	139
140	140	\| Description of why Spotify processes your personal data ('processing purpose') \| Legal Basis for the processing purpose \| Categories of personal data used by Spotify for the processing purpose \|
240	240
241	241	For example, when you make playlists, you might want those playlists to be visible to others on the Spotify Service, but you can also make your playlists private at any time.
242	242
243	243	\|
244	244	\| Artists and Record Labels \| You can ask us to share personal data (like your email address) with artists or record labels, or other partners who may want to directly send you news or promotional offers, but you can also revoke that consent at any time. \|
245	245
246		Learn more about how to manage notifications, your publicly available information, and what you share with others in the ['Your rights and your preferences: Giving you choice and control' Section 3]() of this Policy and on the [Privacy Center](https://www.spotify.com/privacy/).
	246	Learn more about how to manage notifications, your publicly available information, and what you share with others in the ['Your rights and your preferences: Giving you choice and control' Section 3]() of this Policy and on the [Privacy Center](https://www.spotify.com/privacy/plain).
247	247
248	248	_Information we may share_
249	249
250	250	\| Categories of Recipients \| Reason for sharing \|
251	251	\| --- \| --- \|
252	252	\| Service Providers and Others \| We use technical service providers which may operate the technical infrastructure that we need to provide the Spotify Service, in particular providers which host, store, manage, and maintain the Spotify application, its content and the data we process.
295	295	## 12\. Children
296	296
297	297	The Spotify Service is not directed to children under the age of 13 years. However, in some countries, stricter age limits may apply under local law. Please see our [Terms and Conditions of Use](https://www.spotify.com/us/legal/end-user-agreement/) for further details.
298	298
299	299	We do not knowingly collect personal data from children under 13 years or under the applicable age limit (the "Age Limit"). If you are under the Age Limit, please do not use the Spotify Service, and do not provide any personal data to us.
300	300
301		If you are a parent of a child under the Age Limit and become aware that your child has provided personal data to Spotify, please contact us using the 'Contact Us' form on the [Privacy Center](https://www.spotify.com/privacy/), and you may request exercise of your applicable rights detailed in the ['Your rights and your preferences: Giving you choice and control' Section 3]() of this Policy.
	301	If you are a parent of a child under the Age Limit and become aware that your child has provided personal data to Spotify, please contact us using the 'Contact Us' form on the [Privacy Center](https://www.spotify.com/privacy/plain), and you may request exercise of your applicable rights detailed in the ['Your rights and your preferences: Giving you choice and control' Section 3]() of this Policy.
302	302
303	303	If we learn that we have collected the personal data of a child under the age of 13 years, we will take reasonable steps to delete the personal data. This may require us to delete the Spotify account for that child.
304	304
305	305	## 13\. Changes to this Privacy Policy
306	306
307	307	We may occasionally make changes to this Policy.
308	308
309	309	When we make material changes to this Policy, we'll provide you with prominent notice as appropriate under the circumstances, e.g., by displaying a prominent notice within the Spotify Service or by sending you an email. We may notify you in advance.
310	310
311	311	Please, therefore, make sure you read any such notice carefully.
312	312
313		If you want to find out more about this Policy and how Spotify uses your personal data, please visit the [Privacy Center](https://www.spotify.com/privacy/) on spotify.com to find out more.
	313	If you want to find out more about this Policy and how Spotify uses your personal data, please visit the [Privacy Center](https://www.spotify.com/privacy/plain) on spotify.com to find out more.
314	314
315	315	## 14\. How to contact us
316	316
317		Thank you for reading our Privacy Policy. If you have any questions about this Policy, please contact our Data Protection Officer by using the 'Contact Us' form on the [Privacy Center](https://www.spotify.com/privacy/) or by writing to us at the following address:
	317	Thank you for reading our Privacy Policy. If you have any questions about this Policy, please contact our Data Protection Officer by using the 'Contact Us' form on the [Privacy Center](https://www.spotify.com/privacy/plain) or by writing to us at the following address:
318	318
319	319	Spotify USA Inc.
320	320	45 W 18th Street, Floor 7
321	321	New York, NY 10011
322	322	USA
323	323

Privacy Policy

Full text changes — 20180629_rev01 to 20190305_rev01