Deezer Privacy Policy

As updated on July 1st, 2020.

At Deezer, we care about your privacy and we want you to know how we process your personal data. Please take the time to read this Privacy Policy carefully, it is very important to us that you fully understand:

• What personal data of yours we collect
• Why we use your personal data
• How we share your personal data
• How long we keep your personal data
• How we protect your personal data
• How you can exercise your rights

If you have any questions regarding this Privacy Policy, settings, or our use of your personal data, you can contact our Customer Service and/or our Data Protection Officer via this form.

What personal data of yours we collect

“Personal data” refers to any information that enables Deezer to directly or indirectly identify you.

Your personal data can be either directly provided by you, indirectly provided by third parties, or automatically collected by us when you use Analytics by Deezer App. Where we ask you to provide your personal data, we specify those for which collection is mandatory. We thank you for providing us with complete and accurate data. If you do not provide us with complete and accurate data, we may not be able to provide you with the Analytics by Deezer App. You will find the categories of personal data below that we collect in the context of Analytics by Deezer App, for each of them, an indicative list of personal data which may be concerned. Personal data we collect when you sign up for Analytics by Deezer App

Account data

• Your login details (user ID, email address and password)
• Your profile information (username, profile picture)
• Your settings

Please note that during sign-up, you may be required to complete a Google reCAPTCHA, which helps us to secure Analytics by Deezer App. The use of Google reCAPTCHA is subject to Google Privacy Policy and Google Terms of Service.

Personal data we collect when you use the Analytics by Deezer App

Technical data

• Information on your device (type of device you are using, unique device identifier, hardware model, version of the operating system, hardware and software settings, browser type, cookie or similar technology, system language)
• Information on your navigation on the Analytics by Deezer App (IP address, date and time of connection, pages that you accessed, the date and time you accessed these pages)
• Information on your internet connection (internet service provider, type of connection: 3G, 4G, 5G, Wi-Fi, xDSL, cable, optical fiber etc.)

Personal data we collect when you contact our Customer Service

Request data

• Details on your claim or request (including date, time, subject and petition)
• Content of your exchanges with the Customer Service
• All data deemed as necessary for handling your claim or request

Why we use your personal data

Why we use your personal data

We use your personal data to enable you to use Analytics by Deezer App, and also to meet our legal and regulatory obligations. In any case, we do not make any automated decisions based solely on automatic processing which produce legal effects on you, or similarly significantly affect you.

Further information on how we use cookies and similar technologies can be found in your cookies settings.

Providing Analytics by Deezer App

We use your account data and technical data for the purpose of enabling you to use Analytics by Deezer App.

This use of your personal data is necessary for us to provide Analytics by Deezer App to you, in accordance with the contract which binds us to you.

Improving, securing and monitoring Analytics by Deezer App

We use your account data and technical data for the purpose of:

• Improving existing features and overall performance of Analytics by Deezer App;
• Developing new features and new services for Analytics by Deezer App;
• Ensuring the ongoing security, confidentiality, integrity, availability and resilience of Analytics by Deezer App;
• Measuring and analyzing audience and usage of Analytics by Deezer App.

This use of your personal data is necessary for us to meet our legitimate interest of offering the best service possible to our Analytics by Deezer App users.

Handling your requests to Customer Service

We use your account data, technical data and request data for the purpose of managing your request to our Customer Service, for instance:

• When you contact our Customer Service and submit a technical or functional query;
• When you want to exercise the statutory rights that you hold over your personal data.

This use of your personal data is necessary for us to comply with our obligations deriving from the contract which binds us to you, or when it comes to your statutory rights over your data, with the data protection laws and regulations which Deezer is subject to.

How we share your personal data

We share your personal data with the following categories of recipient:

Technical providers

Deezer group

Authorities Purchasers

• Hosting and storage platform providers
• Telecommunication network and service providers
• Maintenance service providers
• Security solution and service providers
• Data analytics and computing solution providers
• Parent company
• Subsidiaries and affiliates
• Administrative and judicial authorities
• Purchasers or prospective purchasers of our business which we would enter into negotiations with

Please note that some of these recipients are located in countries that are outside the European Union / European Economic Area, and do not ensure a level of personal data protection which is deemed as equivalent as the level of personal data protection which is ensured by the Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (GDPR).

Most of these recipients outside the European Union / European Economic Area are located in the United States of America, and have certified their compliance with the EU-U.S. Privacy Shield Framework, which were designed by the U.S. Department of Commerce and the European Commission to provide companies on both sides of the Atlantic with a mechanism to comply with data protection requirements when transferring personal data from the European Union and Switzerland to the United States in support of transatlantic commerce.

For recipients who would not be located in the European Union / European Economic Area, or would not be located in a country with an adequate level of personal data protection (Article 45 of the GDPR), or would not be not compliant with the EU-U.S. Privacy Shield Framework, we shall take all necessary measures to check that they provide appropriate safeguards, such as the implementation of standard data protection clauses adopted by the European Commission (Article 46.2 of the GDPR).

For more information on cross-border data transfers, please reach out to our Data Protection Officer.

How long we keep your personal data

We keep your personal data for no longer than is strictly necessary for the purposes for which we collect and use them.

The specific periods of time for which we retain your personal data are specified below:

Purpose

• Providing Analytics by Deezer App
• Improving, securing and monitoring Analytics by Deezer App
• Handling your requests to Customer Service

Data

• Account data Technical data
• Account data Technical data
• Account data Technical data Request data

Retention

Duration of your registration to the Deezer service, then archived for up to 5 years (except for cookies which are retained for up to 25 months)

Duration of your registration to the Deezer service, then archived for up to 5 years (except for cookies which are retained for up to 25 months)

Duration of the handling of your request, then archived for up to 5 years

How we protect your personal data

We have measures in place to protect your personal data against unauthorized access, use, or disclosure including, without limitation, the following measures:

• We implement and maintain sophisticated technical measures to ensure that your personal data is confidentially and securely recorded and used;
• We restrict and limit access to your personal data, and monitor who accesses, uses, and transfers your personal data;
• Employees who have access to your personal data are required to comply with our data privacy and confidentiality requirements;
• Business partners and third-party service providers with whom we share your personal data are required to comply with any applicable data privacy and confidentiality requirements.

How you can exercise your rights

Under applicable data protection laws and regulations, you have the right to:

• Access, rectify or erase your personal data;
• Restrict or object to its processing;
• Tell us that you do not wish to receive marketing information;
• In some circumstances, require the transfer of your personal data to you or a third party;
• To the extent our processing of your personal data is based upon your consent, withdraw your consent, without affecting the lawfulness of our processing based on your consent before its withdrawal;
• In some countries, set guidelines for the retention, erasure and communication of personal data for after your death.

We are fully committed to enable you to exercise the rights you hold over your data:

• Some of these rights can be exercised directly in your settings, such as the rights to rectification and erasure of your personal data, or the right to set your communication preferences;
• As for the exercise of your other rights (access to and portability of your personal data, restriction or objection to the processing of your personal data, set of guidelines for the retention, erasure and communication of your personal data after death), please contact us via this form.

Please note that we reserve the right to check your identity before we respond to your request.

If you are not fully satisfied with our response, you can also complain about our processing of your personal data to the relevant data protection authority.

Changes to our Privacy Policy

We regularly review our compliance with our Privacy Policy (at least once per year), in particular to ensure that it complies with new laws and regulations regarding data protection.