GDPR Compliance

Overview

SongSearchers is committed to complying with the General Data Protection Regulation (GDPR). This page explains your rights under GDPR and how we handle your personal data.

Your Rights Under GDPR

As a data subject in the European Economic Area (EEA), you have the following rights:

Right to Access (Article 15)

You have the right to request a copy of the personal data we hold about you. We will provide this information free of charge within one month of your request.

Right to Rectification (Article 16)

You have the right to request that we correct any inaccurate personal data we hold about you without undue delay.

Right to Erasure (Article 17)

Also known as the "right to be forgotten," you can request that we delete your personal data when:

• The data is no longer necessary for the purpose it was collected
• You withdraw consent (where consent was the legal basis)
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed
• The data must be erased to comply with a legal obligation

Right to Restriction (Article 18)

You can request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of your data.

Right to Data Portability (Article 20)

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.

Right to Object (Article 21)

You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision Making (Article 22)

You have the right not to be subject to decisions based solely on automated processing that significantly affect you. Our AI song matching provides suggestions only and does not make binding decisions about you.

Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: For optional cookies and marketing communications (where applicable)
• Contract: To provide our Service when you create an account
• Legitimate Interests: For security, fraud prevention, and service improvement
• Legal Obligation: To comply with applicable laws and regulations

Data We Collect

We collect the following categories of personal data:

• Identity Data: Name, email address
• Technical Data: IP address, browser type, device information
• Usage Data: How you interact with our Service
• Search Data: Song search queries you submit

Data Transfers

Your data may be transferred to and processed in countries outside the EEA, including the United States (for Google services). We ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

Data Retention

We retain your personal data only for as long as necessary:

• Account Data: Until you delete your account
• Session Data: Until you log out or session expires
• Search Queries: Processed in real-time, not permanently stored
• Log Data: Up to 30 days for security purposes

How to Exercise Your Rights

To exercise any of your GDPR rights, please contact us:

• Email: gdpr@songsearchers.com

We will respond to your request within one month. If your request is complex, we may extend this by two months, but we will inform you of this within the first month.

You will not have to pay a fee to access your personal data or to exercise any of your other rights. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive.

Data Protection Officer

For questions about GDPR compliance or to exercise your rights, please contact our Data Protection team at: gdpr@songsearchers.com

Right to Lodge a Complaint

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. In the UK, this is the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Phone: 0303 123 1113