Substream HB - Privacy Policy
LATEST UPDATE: 27 May 2018
Substream Privacy Policy
Substream is committed to protecting and respecting your privacy. This privacy policy describes how Substream collects and uses personal data about employees and other representatives of our former, current and prospective artists, suppliers, customers and other business partners. It also describes the choices available to you regarding our use of your personal data.
The following outlines our privacy policy.
We are Substream HB, incorporated in Sweden under reg. no. 969705-9799 on the address Smedjegatan 5B, Gothenburg, Sweden.
What type of data we collect
Depending on the project the information we collect may include full name, email, phone number, country of residence or full address, citizenship, photo, date of birth, identification numbers and banking details. Information can also include details about your artistic career and your compositions or music.
How the personal information is collected and how we use it
We collect information in different ways:
Through contact form and mailing list sign up form: to let people stay up to date with the company activities and to reply to question or other requests. Users can easily withdraw from our mailing list anytime through a simple online procedure.
Through competitions, events and projects application forms: this data is required to offer the competition or project and used to check the validity of the application (like if it follows application and competition rules). It is also used to communicate with participants the results of selection and keep winners informed about the various stages of the project or production. Users have to actively tick the box to accept the privacy policy and T&C.
When we sign contracts to publish music and offer other services we collect information. This is required to legally produce, release, publish and distribute music album or release services. Users agree by signing the contract.
When you – by email, social media or otherwise – send us music (such as “demos” or “promos”) for consideration to distribute by, or otherwise collaborate with our company.
Shared and/or transferred personal information
If you are among our artists some of your information (Name, Title of tracks) is shared with our distribution partners and
Your Artist biography will be publicly available on our pages, as per agreement between us and you, to promote your activities and music release(s).
If we are required by law to do so we will share your information with other recipients like regulators and government authorities.
As we use outsourced datacenters to store email, databases, websites and other details which contains your personal information, your information will be transferred to such services which are located both inside and outside of the EU.
As part of conducting our business as a recording company, artists’ and songwriters’ information will be shared with digital music aggregators (such as Sony Music and The Orchard), digital music services (such as Spotify and Apple) and 3rd party record labels, publishers and Performance Rights Organizations.
Sensitive personal information, such as home address, date of birth, banking or identification numbers are treated with extra care and only shared as required in connection with accounting and payment.
Where your personal information is stored
We operate from our office in Sweden and your information is processed and stored within the EU, except for that information shared with other outsourced service providers as explained above, that may be located outside of the EU like in the US.
We will protect personal information by reasonable security safeguards against loss or theft, as well as unauthorized access, disclosure, copying, use or modification. To do this we store personal information on secure servers that are managed by our service providers. When personal information is transmitted is protected by security and access controls, including username and password authentication and data encryption where appropriate.
Marketing Choices and how to access your information
We have no control over the personal information you made available to the public and we can’t accept responsibility for the way it is used and managed. An example is artists’ biography. These can also be accessed on Substream HB official website pages and are used to promote the artist.
You have the right to make a request to access any other non-public personal information we hold about you and to request corrections or updates, like if you changed phone number, email address, and so on.
You can request us to completely delete/erase the information we hold about you at any time, but only if we don’t have any other agreement in place. We can’t erase your information if we are releasing your music or offering other services and until those services or release are active.
If you have subscribed to one of our e-mail lists, we send you communications by email about new projects, event, new music releases and services that we feel may be of interest to you. You can ‘opt-out’ from such mailing list at any time and in the future by using the “unsubscribe” link provided in the email itself.
When we need to update this policy
From time to time in order to make sure it stays up to date with the latest legal requirements we will update this privacy policy. We will promptly notify you every time we change it and the latest version of this policy will always be available on this page.
We are committed to conducting our business in accordance with these principles in order to ensure that the confidentiality of personal information is protected and maintained.
You can contact us at any time via email by using the contact form that can be found on our Contact page.
European Economic Area - General Data Protection Regulation (EEA GDPR)
For the purposes of the latest updated in the EEA GDPR data protection law we are a ‘data controller’.
In case any data breach is suspected, within 72 hours of becoming aware of the breach (where feasible), action will be immediately taken and suspect of breach promptly reported to local authorities and to the people involved.
