GDPR Compliance
Effective Date: December 7, 2025
DistroVibe is committed to ensuring the security and protection of the personal information that we process, and to provide a compliant and consistent approach to data protection. We have always had a robust and effective data protection program in place which complies with existing law and abides by the data protection principles.
1. Your Rights Under GDPR
If you are a resident of the European Economic Area (EEA), you have the following data protection rights:
- The right to access: You have the right to request copies of your personal data.
- The right to rectification: You have the right to request that we correct any information you believe is inaccurate.
- The right to erasure: You have the right to request that we erase your personal data, under certain conditions.
- The right to restrict processing: You have the right to request that we restrict the processing of your personal data.
- The right to object to processing: You have the right to object to our processing of your personal data.
- The right to data portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you.
2. Data Processing
We process personal data only when we have a lawful basis to do so. The lawful bases we rely on include:
- Contractual Necessity: Processing is necessary for the performance of a contract with you (e.g., distributing your music).
- Legal Obligation: Processing is necessary for compliance with a legal obligation (e.g., tax reporting).
- Legitimate Interests: Processing is necessary for our legitimate interests (e.g., fraud prevention, security).
- Consent: You have given us consent to process your personal data for a specific purpose.
3. International Data Transfers
DistroVibe operates globally. If we transfer your personal data outside the EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:
- We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission.
- Where we use certain service providers, we may use specific contracts approved by the European Commission which give personal data the same protection it has in Europe.
4. Data Protection Officer
We have appointed a Data Protection Officer (DPO) who is responsible for overseeing questions in relation to this privacy policy. If you have any questions about this policy, including any requests to exercise your legal rights, please contact the DPO using the details set out below.