1. Scope

This Privacy Policy applies to all personal data about you that is collected and used by MMP when you visit and use our website, including registering for an account. Personal data is data that allow us to identify you as an individual, as set out below under “Personal data processed by us”.

2. Personal data processed by us

Depending on the type of Services you use, the personal data we collect and process about you can include:

• Your contact details, such as name, email address, geographical region and country of residence.
• Your account details and (electronic) identification data, such as your account on the website, electronic identification data such as your IP or MAC address, as well as the data you have added to your account yourself (such as your user name and password).
• Information related to the use of our online Services or applications, such as the web pages you visit.
• The content of your communications with us, for example, when you contact us by email, phone or otherwise.

3. The purposes and legal basis for processing your personal data

MMP collects and uses your personal data for the purposes set out below, based on the law. Insofar as BSIP already holds your personal data, this personal data will be used for the same purposes and on the same legal basis.

• Required for the execution of an agreement
  Your personal data are collected and processed to handle your  request to provide Services. In addition, we process your personal data to handle any requests, complaints or questions from you.
• Required to represent the legitimate interests of MMP
  We may use the aforementioned personal data to improve our Services and to better understand and approach our visitors and relations, both on an aggregate and an individual level. This means that we analyse your use of our Services and that we use this information to improve our Services in order to provide you with an improved user experience.
• Based on consent
  To the extent necessary, we will ask for your consent to keep you informed about news related to our Services. 
  You can withdraw your consent at any time. How you can do this is described below.
• Required to comply with a legal obligation
  We may use your personal data to comply with applicable laws, to comply with requests from public bodies and authorities, or to cooperate with law enforcement.

4. Use of cookies

Our website and applications use cookies to improve usability, effectiveness and security. For more information about the use of cookies by MMP, please refer to our Cookie Policy.

5. Who receives your personal data?

Only authorised personnel of MMP have access to your personal data to the extent necessary for the performance of their work as part of the Music Metadata Project.

We will not disclose the personal data you have provided to us to third parties without your express prior consent, unless we are required to do so for the purposes set out under section 3. In addition, we may disclose your personal data to public authorities to comply with applicable legal obligations.

6. Transfer of your personal data

Unless otherwise stated, we process and store your personal data within the United Kingdom. It may be that our service providers transfer your personal data to a country outside the European Economic Area (“EEA”) that does not offer the same level of protection under European law as the country where you normally use our services. In that case, we will take the necessary steps to ensure that your personal data are adequately protected, such as drafting standard EU contracts with parties outside the EEA.

7. Security

We take appropriate and reasonable security measures to protect your personal data against unauthorised access, modifications, disclosure, loss or improper use, and to protect the accuracy and integrity of your personal data. In order to ensure a risk-adapted level of security, we implement technical and organisational measures, including security with regard to access to our systems.

8. How long do we keep your personal data?

We keep your personal data as long as necessary or permitted with respect to the objectives for which they were obtained, and as set out in this Privacy Policy. The criteria used to determine our retention periods include: (i) the period during which we have an ongoing relationship with you; (ii) whether there is a legal obligation we are subject to; and (iii) whether retention is desirable in light of our legal position (for example, in relation to the enforcement of general terms and conditions, lawsuits or legal investigations).

9. What rights do you have with regard to your personal data and how can you exercise these rights?

Under the applicable laws and regulations, you have a number of rights with regard to your personal data, including:

• Right of access. At your request we will provide you, free of charge, with information regarding the personal data we process about you.
• Right to rectification. At your request we will correct, supplement, block or delete your personal data in the event that these are factually incorrect, incomplete or irrelevant for the objective or objectives of the processing, or when these are processed in any other way that infringes a legal provision.
• Withdrawal of consent. You can withdraw your consent at any time for future processing by us of your personal data.
• Right to object. You have the right to object to the processing of your personal data for marketing purposes.
• Right to restriction of processing. If applicable, you have the right to request a restriction on the processing of your personal data by the Music Metadata Project. This means that your personal data may (temporarily) not be processed and changed.
• Right to erasure. If applicable, we will delete your personal data without unreasonable delay (right to be forgotten).
• Right of opposition. If applicable, you have the right to object to the processing of your personal data based on, among other things, the basis of the “legitimate interest” of the Music Metadata Project.
• Right to transfer data. If applicable, we will provide you with an overview of the personal data you have provided to us, so that these data can be transferred to another data controller, to the extent that this (data portability) is technically possible.
• Right to file a complaint. Finally, you have the right to file a complaint with the supervisory authority if you believe that your personal data are being processed in violation of this privacy statement.

If you wish to exercise one of your rights, you can do so by using the contact information set out below.