Privacy Policy
DATED 2021-09-01 · VERSION 20211101_rev01 · COMPARED WITH 20211001_rev01 · ARCHIVE SNAPSHOT
Full text changes — 20211001_rev01 to 20211101_rev01
COLOUR MARKS THE SEVERITY OF A FLAGGED CLAUSE · + AND − MARK ADDED AND REMOVED
| 13 | 13 | 7. [Transfer to other countries]() |
| 14 | 14 | 8. [Keeping your personal data safe]() |
| 15 | 15 | 9. [Children]() |
| 16 | 16 | 10. [Changes to this Policy]() |
| 17 | 17 | 11. [How to contact us]() |
| 18 | 18 | |
| 19 | To help you understand this Policy, our [privacy videos](https://www.spotify.com/us/privacy) bring privacy at Spotify to life. | |
| 20 | ||
| 19 | 21 | ## [1\. About this Policy]() |
| 20 | 22 | |
| 21 | 23 | This Policy describes how we process your personal data at Spotify USA Inc. |
| 22 | 24 | |
| 23 | 25 | It applies to your use of: |
| 24 | 26 | |
| 37 | 39 | We have included further information about rights and disclosures as required under the California Consumer Privacy Act (CCPA) in our [California Privacy Disclosures](http://spotify.com/us/legal/California-privacy-disclosure) supplement. |
| 38 | 40 | |
| 39 | 41 | ## [2\. Your personal data rights and controls]() |
| 40 | 42 | |
| 41 | 43 | Privacy laws, including the General Data Protection Regulation ("GDPR"), give rights to individuals over their personal data. |
| 42 | 44 | |
| 43 | See your rights and their descriptions in this table. | |
| 45 | See your rights and their descriptions in this table. You can also watch our video about [Your Privacy Controls](https://www.youtube.com/watch). | |
| 44 | 46 | |
| 45 | 47 | | |
| 46 | 48 | | **It's your right to...** | |
| 47 | 49 | | --- | --- | |
| 48 | 50 | | Access | Be informed of the personal data we process about you and to request access to it | |
| 49 | 51 | | Rectification | Request that we amend or update your personal data where it's inaccurate or incomplete | |
| 76 | 78 | - [Cookies Policy](https://www.spotify.com/legal/cookies-policy/) - information on how we use cookies and how to manage your cookie preferences. Cookies are files saved on your phone, tablet or computer when you visit a website. |
| 77 | 79 | |
| 78 | 80 | You also have the right to contact the [Swedish Authority for Privacy Protection](https://www.imy.se/) or your local data protection authority about any questions or concerns. |
| 79 | 81 | |
| 80 | 82 | ## [3\. Personal data we collect about you]() |
| 81 | 83 | |
| 82 | These tables set out the categories of personal data we collect and use. | |
| 84 | These tables set out the categories of personal data we collect and use. You can also watch our video about [Personal Data at Spotify](https://www.youtube.com/watch). | |
| 83 | 85 | |
| 84 | 86 | | **Collected when you sign up for the Spotify Service** **or when you update your account** | |
| 85 | 87 | | --- | |
| 86 | 88 | | **Category** | **Description** | |
| 87 | 89 | | User Data | Personal data that we need to create your Spotify account and enables you to use the Spotify Service. |
| 88 | 90 | The type of data collected depends on the type of Service Option you have, how you create your account, the country you are in, and if you use third party services to sign in. This may include your: |
| 122 | 124 | - account settings |
| 123 | 125 | - interactions with other Spotify users |
| 124 | 126 | - your use of third party services, devices and applications in connection with the Spotify Service |
| 125 | 127 | - Inferences (i.e., our understanding) of your interests and preferences based on your usage of the Spotify Service. |
| 126 | 128 | - Content you post to any part of the Spotify Service, such as images, text, playlist titles, communications, and other types of content. |
| 127 | 129 | |
| 128 | **Your technical data**Examples include: | |
| 130 | **Your technical data** | |
| 131 | Examples include: | |
| 129 | 132 | |
| 130 | 133 | - URL information |
| 131 | 134 | - Online identifiers such as [cookie data](https://www.spotify.com/legal/cookies-policy/) and IP addresses |
| 132 | 135 | - Information about the devices you use such as: |
| 133 | 136 | - device IDs |
| 134 | 137 | - network connection type (e.g. wifi, 4G, LTE, Bluetooth) |
| 145 | 148 | - Spotify partner applications to determine whether the application is installed on your device |
| 146 | 149 | |
| 147 | 150 | **Your general (non-precise) location** |
| 148 | 151 | This may be understood from technical data (e.g. your IP address, language setting of your device, or payment currency). |
| 149 | 152 | We need this to meet geographic requirements in our agreements with the owners of content on the Spotify Service, and to deliver content and advertising that's relevant to you. |
| 150 | 153 | **Your device sensor data** |
| 151 | Motion-generated or orientation-generated mobile sensor data (e.g. accelerometer or gyroscope) if needed to provide features of the Spotify Service that require this data. | |
| 152 | | | |
| 154 | Motion-generated or orientation-generated mobile sensor data (e.g. accelerometer or gyroscope) if needed to provide features of the Spotify Service that require this data. | | |
| 153 | 155 | |
| 154 | 156 | | **Additional data you may choose to give us** |
| 155 | 157 | | |
| 156 | 158 | | --- | |
| 157 | 159 | | **Categories** | **Description** | |
| 158 | 160 | | Voice Data |
| 213 | 215 | The table below sets out: |
| 214 | 216 | |
| 215 | 217 | - our purpose for processing your personal data |
| 216 | 218 | - our legal justifications (each called a "legal basis") under data protection law, for each purpose |
| 217 | 219 | - categories of personal data which we use for each purpose (see more about these categories in Section 3 'Personal data we collect about you') |
| 218 | 220 | |
| 221 | You can also watch our video about [Personal Data at Spotify](https://www.youtube.com/watch). | |
| 222 | ||
| 219 | 223 | Here is a general explanation of each "legal basis" to help you understand the table: |
| 220 | 224 | |
| 221 | 225 | - **Performance of a Contract:** When it's necessary for Spotify (or a third party) to process your personal data to: |
| 222 | 226 | - comply with obligations under a contract with you, e.g. Spotify's obligations under the Terms of Use to provide the Spotify Service to you |
| 223 | 227 | - or verify information before a new contract with you begins. |
| 224 | 228 | - **Legitimate Interest:** When Spotify (or a third party) has an interest in using your personal data in a certain way, which is necessary and justified considering any possible risks to you and other Spotify users. For example, using your Usage Data to improve the Spotify Service for all users. Contact us if you want to understand a specific justification. |
| 225 | 229 | - **Consent:** When Spotify asks you to actively indicate your agreement to Spotify's use of your personal data for a certain purpose(s). |
| 226 | 230 | - **Compliance with Legal Obligations:** When Spotify must process your personal data to comply with a law. |
| 227 | 231 | |
| 228 | 232 | | **Purpose for processing your data** | **Legal basis that permits the purpose** | **Categories of personal data used for the purpose** |
| 229 | 233 | | |
| 230 | 234 | | --- | --- | --- | |
| 231 | | To provide the personalized Spotify Service. | | |
| 235 | | To provide the personalized Spotify Service. (You can watch our video about [Personalization](https://youtu.be/B9iWpJfw4XY) to understand more.) | | |
| 232 | 236 | - Performance of a Contract |
| 233 | 237 | - Legitimate Interest |
| 234 | 238 | - Consent |
| 235 | 239 | |
| 236 | 240 | | |
| 237 | 241 |