1. Data Controller
1.1. The data controller responsible for processing personal data is 2side Music.
2. Personal Data We Collect
2.1. We may collect the following types of personal data:
- Personal Identification Information: Name, email address, phone number, etc.
- Account Information: Username, password, and other related account details.
- Payment Information: Payment methods, billing information, etc.
- Usage Data: Information on how you interact with and access our services.
3. Legal Basis for Data Processing
3.1. We process personal data based on the following legal grounds:
- Consent: When the data subject has given consent to the processing of their data.
- Contractual Necessity: When it is necessary for the performance of a contract with the data subject.
- Legitimate Interests: When processing is necessary for our legitimate business interests.
- Legal Obligation: When processing is required to comply with legal obligations.
4. Data Retention Period
4.1. We retain personal data only as long as necessary to fulfill the purposes for which it was collected or as required by law.
4.2. When personal data is no longer needed, we will securely delete or anonymize it.
5. Your Rights as a Data Subject
5.1. Under GDPR, you have the following rights:
- Right of Access: The right to access your personal data.
- Right to Rectification: The right to request correction of inaccurate or incomplete data.
- Right to Erasure: The right to request the deletion of your personal data, under certain conditions.
- Right to Restriction of Processing: The right to request the restriction of processing of your personal data.
- Right to Data Portability: The right to receive your data in a structured, commonly used, and machine-readable format.
- Right to Object: The right to object to the processing of your personal data under certain circumstances.
5.2. To exercise these rights, please contact us using the information provided above.
6. Data Security
6.1. We take appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction.
6.2. These measures include encryption, firewalls, secure data storage, and access controls.
7. Sharing of Personal Data
7.1. We may share personal data with third-party service providers only as necessary to provide our services (e.g., payment processors, distribution platforms).
7.2. We ensure that all third-party service providers comply with GDPR and implement adequate measures to protect your personal data.
8. International Data Transfers
8.1. As a global company, we may transfer personal data to countries outside the European Union and European Economic Area.
8.2. We ensure that such transfers comply with GDPR by using standard contractual clauses or other mechanisms to ensure adequate protection of personal data.
9. Policy Updates
9.1. This GDPR Compliance policy may be updated from time to time. Any changes will be communicated through appropriate channels, and the updated policy will be published on our website.
10. Complaints
10.1. If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority in an EU member state.
This GDPR Compliance policy ensures that 2side Music is in compliance with GDPR regulations and remains transparent regarding how personal data is processed. If you have any questions or concerns, please feel free to contact us directly.