Privacy Policy

v.October 23rd, 2024

This privacy policy (the “Privacy Policy”) applies to your use of our websites, including kosignmusic.com, the Kosign desktop and mobile application portals (“Portal”), and all related websites, mobile apps, and web-based services (together, the “Websites”). Please read this Privacy Policy carefully and in conjunction with our Portal Terms and Conditions and ensure that you understand them before you start to use the Websites.

By accessing and using the Websites, you acknowledge that you have read and understood the content of this Privacy Policy. We reserve the right to update this Privacy Policy from time to time.

The Websites are owned and operated by, or on behalf of, Kosign Services Limited (“we” or “us”). We are registered in England and Wales under company number 16007137 and our registered office is at Goldings House, Hays Galleria, London, United Kingdom, SE1 2HB. Our VAT registration number is 774 1503 34.

This Privacy Policy does not apply to third-party websites, products or services, even if they may link to our Websites or our Websites may link to them through advertisements that we display on our Websites and on the Portal. We recommend you review the privacy practices of those third parties before connecting, accessing third party websites and sharing any personal information.

For most data collection on our Websites, we are the data controller responsible for the collection and use of your personal information as set out in this Privacy Policy.

This Privacy Policy is provided in a layered format.

1. Information we collect from you
We collect certain personal information about you when you sign up for an account or otherwise use our Websites.We also automatically collect information regarding your use of our sites as you use them.

2. How we use your information
We use your personal information for various purposes connected with your interest in our Websites, products, and services, and to allow us to maintain and improve them.

3. Sharing of personal information
We may share your personal information with certain third parties, such as with our service providers and to provide you with opportunities that we believe may be of interest to you.

4. Children’s privacy
Our Websites are not directed towards children and we do not knowingly collect personal information from them.

5. Data security and retention
The security of your personal information is of utmost importance to us and we maintain appropriate safeguards to protect it.

6. Your choices and rights
You have certain choices and rights over how we use your personal information.

7. California Privacy Notice
We provide additional disclosures and rights to residents of California.

8. European Privacy Notice
We provide additional disclosures and rights to individuals located in Europe.

9. Australia Privacy Notice
You may obtain further information about our Australian subsidiaries.

10. Cookies
You may learn more about our use of cookies by visiting our Cookie Policy.

11. Changes to this Privacy Policy
We may change this Privacy Policy from time to time to reflect new services or changes in our data practices or relevant laws.

12. Contact us
You may contact us for comments or questions in various ways.

1. Information we collect from you

For purposes of this Privacy Policy, “personal information” means any information that relates to an identified or identifiable individual. The personal information we collect through our Websites will be apparent by the context of the page, and may include but is not limited to the types of information described below.

a. Personal information you provide to us

We may collect the following personal information about you to you choose to provide us through our Websites:

Account information.When you apply for an account on our Websites, including the Portal, you may be asked to provide basic contact information such as your title/role, name, email address, and password, government-issued identification numbers, and additional information that you may specify such as personal marketing preferences.We may also collect certain additional information for authentication purposes, such as your phone number.
Correspondence information.When you report a problem with the Websites to us or otherwise contact us, you may provide us with certain of your contact information and other personal information.
Payment information.If you purchase products or services from us, you may be required to provide your payment card or bank account information, or your account information for one of our third party payment platforms, as well as your shipping and billing addresses.To receive payments from us as part of our Kosign program, you will need submit electronic banking information and submit tax forms to our third-party partner Stripe.Stripe collects this information and transaction and personally identifying information which it analyses and uses to operate and improve the service it provides (including for fraud detection) in accordance with Stripe’s Privacy Policy, available here and Stripe’s Terms of Service, available here.
Spotify information.If you apply to our Kosign program, you may be required to provide your Spotify artist profile and/or a selection of your Spotify track URLs in your application submission.
Identity verification information. Your participation in our Kosign program requires us to be able to verify your identity.We have partnered with Stripe, to support our identity verification efforts.At account creation, you may be asked to provide directly to Stripe on its owned and operated platform:a government-issued photo ID (e.g., your driver’s license, state identification card, or passport); photograph of yourself; and related information.Stripe will use the information captured from these images to collect, retain, and use biometric information (for example, your facial geometry) to verify your identity, and as further described in Stripe’s Privacy Policy, available here and Stripe’s Terms of Service, available here.

b. Information that we automatically collect

Our Websites use cookies and other tracking technologies such as web beacons, embedded scripts, and tags (“Cookies”), which collect information from you automatically as your use our Websites, including:

Browser and device data, such as IP address, device identifier, device type, operating system and Internet browser type, screen resolution, operating system name and version, device manufacturer and model, language, plug-ins, add-ons, and the language version of the Websites you are visiting; and
Usage data, such as geolocation data, browsing history, time spent on the Websites, pages visited, links clicked, language preferences, patterns of use, and the pages that led or referred you to our Websites.

We also collect information about your online activities on websites and connected devices over time and across third-party websites, devices, apps, and other online features and services. Please review our Cookie Policy below for more information about our use of these technologies.

2. How we use your information

We may use any information about you:

to provide you with any products and services that we may offer, including through our Portal (our “Products and Services”)
to enable you to have full access to the Websites;
to contact you when you have requested us to do so, including where required to respond to any reported problems concerning the Websites or the Products and Services;
to produce anonymous reports, statistics and analysis of the types of users who access the Websites;
to create your Kosign account and identify you when you sign-in to your account in accordance with your agreement with us;
to enable you to participate in our Kosign program;
to provide payments through your participation in our Kosign program;
for marketing purposes (see Marketing section below), consistent with your communication preferences;
to contact you for your opinions on the Websites;
to allow you to participate in interactive features of the Portal, when you choose to do so
to notify you about important changes to the Websites, including changes or updates to our Privacy Policy;
to administer and, for our legitimate interests, to improve the Websites, our services, and your account with us;
for our internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
to ensure that content on the Websites and Portal is presented in the most effective manner for you and your device;
to protect ourselves, you, and others; prevent fraud and other unlawful or unauthorized activity; and create and maintain a trusted, secure, and reliable online environment; and to comply with our legal obligations; respond to subpoenas, court orders, or legal process; and to establish or exercise our legal rights or defense against legal claims.

3. Sharing of personal information

We may share your personal information with the following categories of third parties:

Among our brands and affiliates.We may share personal information among our various brands and affiliates to provide our Websites, provide the Products and Services, and for internal administrative purposes.
Our service providers.We share personal information with our service providers to provide services on our behalf, such as payment processing, analytics, advertising (excluding targeted advertising), hosting, notification services, identity verification services, marketing, customer and technical support, and other services.These third parties have access to your personal information only to perform these tasks on our behalf and are obligated not to disclose or use the information for any other purpose.
Other business partners.We may share personal information with third-party business partners in connection with our Websites, Products and Services.
Affiliate and business transfer.If Kosign, including any of its brands or affiliates, is involved in a merger, acquisition, asset sale, or other corporate combination, your personal information may be transferred to the acquiring or surviving entity. If such transfer results in a material change to the use of your personal information, we will provide notice before your personal information is transferred and/or becomes subject to a different privacy policy.
Compliance and harm prevention.We may share personal information as we believe necessary (i) to comply with applicable law, rules and regulations; (ii) to enforce our contractual rights; (iii) to investigate possible wrongdoing in connection with the Sites, Products, and Services; (iv) to protect and defend the rights, privacy, safety and property of us, you, and others; and (v) to respond to requests from courts, law enforcement agencies, regulatory agencies, and other public and government authorities.

4. Children’s Privacy

Our Websites are not directed toward children (as defined by local law) nor does Kosign knowingly collect information from children (as defined by local law).

If you are a parent or guardian and you are aware that a child has provided us with personal information without parental consent, please contact us using the information in the Contact Us section. If we become aware that we have collected personal information from children without verification of parental consent, we will take steps to remove that information from our servers.

5. Data security and retention

We take reasonable steps, including physical, technical and organizational measures, to protect your personal information from unauthorized access and against unlawful processing, accidental loss, destruction and damage. Unfortunately, transmission of information via the internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information submitted to us and any transmission is at your own risk.

This includes use of multi-factor authentication to use the Portal. This is designed to ensure that the person accessing your account is, in fact, you. You may choose to provide us with a telephone number so that we can text you a one-time use code. You may alternatively use a third party authentication app ("Authentication App"). When you download the Authentication App, the applicable third party's privacy notice and/or the relevant app store privacy notice will apply to the collection and use of your information by the Authentication App and relevant app store (as applicable). The Authentication App is not provided by Kosign and Kosign is not responsible for the processing of your information by the Authentication App. In particular, you may use the Google Authenticator app. Please see more information here.

Your personal information will be retained by Kosign for a period of time as necessary and relevant to our legitimate operations, our terms of agreement (if any) with you and in accordance with applicable legal obligations. This may include retention necessary to meet our tax reporting requirements as well as time required to enforce the relevant terms of agreement or to identify, issue or resolve legal proceedings.

We may retain a record of your stated objection to the processing of your data, including in respect of an objection to receiving marketing communications, for the sole legitimate purpose of ensuring that we can continue to respect your wishes and not contact you further, during the term of your objection.

6. Your choices and rights

You have options and choices over how we use your personal information. You may have the right under applicable laws to ask for details of the personal information we hold about you, or to amend, limit or delete your personal information. You may also have the right to object to further processing under certain circumstances.

We also respect the rights you may have under applicable laws to receive that information in a commonly used electronic format (or ask for this information to be provided in that format to a third party where feasible).

If you wish to exercise any of the above rights in relation to the personal information we hold about you consistent with applicable law, wish to change your preferences at any time or have any questions about this privacy policy, please contact us:

By email at: privacy@kosignmusic.com
By writing to us, for the attention of our Data Protection Officer at: Kobalt Music Group,5th Floor, Goldings House Hay's Galleria, United Kingdom, SE1 2HB

Please note that we may require you to verify your identity before allowing you to access your personal information.

In addition to the above, we may offer the following additional ways to exercise your privacy rights and preferences:

Opting out of receiving electronic communications from us.If you no longer wish to receive promotional email communications from us, you may opt out via the unsubscribe link included in such emails or by submitting a request using the information in the Contact Us section. We will comply with your request as soon as reasonably practicable. Please note that if you opt out of receiving promotional emails from us, we may still send you important administrative messages that are required in order to provide you with our Websites, Products and Services or for other reasons disclosed in this Privacy Policy.
Your California privacy rights.California residents have certain rights with respect to our collection, use, and sharing of their personal information under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), and other state laws. Please review our California Privacy Notice below for more information about those rights.
Your Nevada privacy rights.Nevada residents have the right to request to opt out of any “sale” of their personal information. Kosign does not sell your personal information. However, you may nonetheless request to opt out of the future sale of your personal information. If you are a Nevada resident and would like to make such a request, please contact us using the information in the Contact Us section at the end of this Policy, and provide “Nevada Privacy Rights” in the subject line. You must include your full name, email address and postal address in your request so that we can verify your Nevada residence and respond. In the event we sell your personal information after the receipt of your request, we will make reasonable efforts to comply with such request.
Your European privacy rights.Individuals located in the European Economic Area, United Kingdom, and Switzerland have certain rights with respect to our collection, use, and sharing of their personal information.Please review our European Privacy Notice for more information about those rights.

7. California Privacy Notice

This California Privacy Notice supplements information contained in our Privacy Policy and applies to any California residents about whom we have collected personal information from any source, including offline, and through your use of the Websites.This primarily includes personal information about California residents who are employed by or otherwise represent businesses and other legal entities with which Kosign does business and engages on a business-to-business basis as an artist or creator, or other business contact, representative, or prospective customer.

We provide this California Privacy Notice to comply with applicable privacy laws in the state of California, including the California Consumer Privacy Act of 2018, and its amendment, the California Privacy Rights Act of 2020 (together, the “CCPA”). Any capitalized term used and not otherwise defined below has the meaning assigned to it in our Privacy Policy.

The CCPA provides California residents with rights to receive certain disclosures regarding the collection, use, and sharing of personal information, as well as rights to access, delete, correct, limit, and opt-out of the sales of certain personal information we collect about them, as well as to opt-out of the selling of personal information and sharing of personal information for purposes of cross-context behavioral advertising (called “sharing” under California law). California residents also have the right not to receive discriminatory treatment by us for the exercise of your privacy rights under the CCPA. If you are a California resident, you may submit a request to exercise these rights by emailing us using the information provided in the Your Privacy Rights section below.

For the purposes of this California Privacy Notice, except where a different definition is noted, “personal information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California resident or household. Personal information does not include publicly available information; lawfully obtained, truthful information that is a matter of public concern; information that has been de-identified; or information that has been aggregated. For purposes of this section, “publicly available information” includes: information that is made available from federal, state, or local government records; information that a business has a reasonable basis to believe is lawfully available to the general public, either through widely distributed media, or by the consumer; and information that is made available by a person to whom the consumer has disclosed the information if the consumer has not restricted the information to a specific audience.

For our CCPA disclosures with respect to Kosign’s collection, use and disclosure of personal information for employment-related purposes, as well as what privacy rights may be exercised as to such information, please review our California Employee Privacy Policy.

a. Personal information we collect

Kosign may collect, or has collected, the following categories of personal information over the past twelve (12) months:

Identifiers, which includes first and last name; legal names, common names, and pseudonyms/personas; business entity names; email address; phone number; shipping address; billing address; account name; tax and other government-issued identification numbers (including Social Security Numbers, National Insurance Numbers, and passport numbers); proof of address (e.g., utility bills); online identifiers; and/or other similar identifiers.
Personal information described in California Civil Code § 1798.80(e), which includes first and last name; signatures; phone number; shipping address; billing address; tax and other government-issued identification number (including Social Security number, National Insurance number, and passport number); and/or payment card or bank account information or other financial information.
Characteristics protected under California or federal law, which includes your date of birth, age, or age range; gender or gender identity; marital status; and nationality or national origin.
Commercial information, which includes records of personal property; products or services purchased, obtained, or considered; or other purchasing histories or tendencies.
Internet or other electronic network activity information, which includes cookie identifiers; tracking pixels containing an ID number; online tracking technology; browser software; your computer’s operating system; the website that referred you to our site and/or the search terms you entered into a search engine to reach our site; internet service provider (“ISP”); date/time stamp; clickstream data; keylogging and computer mouse movement tracking; and device platform, version, and other device characteristics which may include settings such as Wi-Fi, Bluetooth, and Global Positioning System (“GPS”).
Geolocation data, which includes Global Positioning System (“GPS”) data based on your IP address.
Audio, electronic, visual, thermal, olfactory, or similar information, which includes photographic images; and audio recordings.
Professional or employment-related information, which includes employer name; employment history; job title or role; manager/supervisor; and office location.
Inferences drawn from the personal information listed above.

Please note that because of the overlapping nature of certain of the categories of personal information identified above, which are required by state law, some of the personal information we collect may be reasonably classified under multiple categories.

Sensitive personal information.Certain of the personal information that we collect, as described above, may constitute “sensitive personal information” under California law, including:

Social security, driver’s license, state identification card, or passport number; and
Account log-in combined with any required security or access codes, passwords, or other credentials allowing access to an account;

Kosign will not retain any information we collect from you for longer than is reasonably necessary for the disclosed purpose of using such information. Our determination of precise retention periods will be based on (i) the length of time we have an ongoing relationship with you; (ii) whether there is a legal obligation to which we are subject; and (iii) whether retention is advisable in light of our legal position (such as in regard to applicable statutes of limitations, litigation or regulatory investigations).

b. Sources of personal information

We may collect personal information about you from the following categories of sources:

From you, including through our Websites, in-person, or via email, telephone, electronic messaging, postal mail, social media, or other means.
From other individuals and partners, including creators you may be associated with, other creators, our partners and their employees and representatives.
From and through our service providers, including communications and analytics providers; internet service providers; identity verification provider (Stripe); operating systems and platforms.

We may supplement the information described above with information we obtain from other sources, including from both online and offline data providers.

c. How we use your personal information

We may use the personal information we collect about you for the following purposes:

to provide you with any products and services that we may offer, including through our Portal (our “Products and Services”)
to enable you to have full access to the Websites;
to contact you when you have requested us to do so, including where required to respond to any reported problems concerning the Websites or the Products and Services;
to produce anonymous reports, statistics and analysis of the types of users who access the Websites;
to create your Kosign account and identify you when you sign-in to your account in accordance with your agreement with us;
to enable you to participate in our Kosign program;
to provide payments through your participation in our Kosign program;
for marketing purposes (see Marketing section below), consistent with your communication preferences;
to contact you for your opinions on the Websites;
to allow you to participate in interactive features of the Portal, when you choose to do so
to notify you about important changes to the Websites, including changes or updates to our Privacy Policy;
to administer and, for our legitimate interests, to improve the Websites, our services, and your account with us;
for our internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
to ensure that content on the Websites and Portal is presented in the most effective manner for you and your device;
to protect ourselves, you, and others; prevent fraud and other unlawful or unauthorized activity; and create and maintain a trusted, secure, and reliable online environment; and

to comply with our legal obligations; respond to subpoenas, court orders, or legal process; and to establish or exercise our legal rights or defense against legal claims.The sensitive personal information that we collect as described in Section 7(a) above may be used for any of these purposes.

d. Who we disclose your personal information to

We may disclose your personal information to the categories of service providers and third parties identified in Section 3 as detailed in the chart below.This includes disclosure of your personal information to service providers for one or more business purposes.When we disclose personal information for a business purpose, we enter a contract that describes the purpose and requires the recipient to both keep that personal information confidential and not to use it for any purpose except performing the contract. In the preceding twelve (12) months, we have disclosed each categories of personal information listed in Section 7(a), including the listed sensitive personal information, for a business purpose. Kosign does not “sell”/”share” personal information, including for purposes of cross-context behavioral advertising, as those terms are defined by the CCPA.

e. Retention

f. Your privacy rights

If you are a California resident, you have the right to make the following requests under applicable California law in relation to your personal information, subject to certain exceptions:

Right to Know.You have the right to, up to twice in a 12-month period, request what personal information we collect, use, disclose, and/or sell, and to whom, as applicable.
Right to Delete.You have the right to request, under certain circumstances, the deletion of your personal information that we collect.
Right to Opt-Out of Sale or Sharing.You have the right to opt-out of the sale or sharing of your personal information as those terms are defined under California law. However, as noted above, we do not sell/share your personal information.
Right to Limit Use and Disclosure.You have the right to limit the use or disclosure of your sensitive personal information to only the uses necessary for us to provide our products and services to you, or for certain other purposes authorized by California law.
Right to Correct.You have the right to request the correction of your inaccurate personal information.
Right to Non-Discrimination.You have the right not to receive discriminatory treatment for the exercise of the privacy rights described above.

How to submit a request.You may exercise any of the rights described in this section by emailing us at privacy@kosignmusic.com or mailing us at Data Protection Officer, Kobalt Music Group, 5th Floor, Goldings House Hay's Galleria, United Kingdom, SE1 2HB.

Any request you submit to us is subject to an identification and residency verification process (“Verifiable Consumer Request”) as permitted by the CCPA. We will not fulfill your request unless you have provided sufficient information that enables us to reasonably verify that you are the consumer about whom we collected the personal information on. To verify you, you must provide us with your first name, last name, and email address. We may request additional information for verification purposes, such as your royalty statement. These rights are also subject to various exclusions and exceptions under applicable laws.

You may also designate an authorized agent, in writing or through a power of attorney, to request to exercise the above rights on your behalf.If you should use an authorized agent to exercise your various rights under the CCPA, we may require that you provide your authorized agent with written permission to exercise your various rights and to verify your own identity with us. If your authorized agent does not submit proof that they have been authorized by you to submit verified requests for disclosure and deletion, we reserve the right to deny such a request that we have received and will explain to your authorized agent why we have denied such request. The authorized agent may submit a request to exercise these rights by emailing the letter of authorization or power of attorney to privacy@kosignmusic.com.

We currently do not collect household data. If we receive a request submitted by all members of a household, we will individually respond to each request. We will not be able to comply with any request by a member of a household under the age of 13, as we do not collect personal information from any person under the age of 13.

We will respond to your request within forty-five (45) days after receipt of a Verifiable Consumer Request for a period covering twelve (12) months and for no more than twice in a twelve-month period. We reserve the right to extend the response time by an additional forty-five (45) days when reasonably necessary and provided consumer notification of the extension is made within the first forty-five (45) days.

Direct marketing by third parties.Kosign does not disclose personal information to third parties for their own direct marketing purposes. However, California residents additionally have the right to request information regarding such practices under California’s “Shine the Light” law.If you are a California resident and would like to inquire further, please email privacy@kosignmusic.com.

We will continue to update our business practices as direct regulatory guidance becomes available.

8. European Privacy Notice

This European Privacy Notice applies to any individuals located within the European Economic Area (EEA), United Kingdom (UK), or Switzerland from whom we may have collected personal data from any source, including through your use of our Websites, Products, and Services.We provide this European Privacy Notice to comply with applicable privacy laws, including the General Data Protection Act (“GDPR”), the UK GDPR, and related laws, regulations, and guidance from the European Union and/or its member states.Any capitalized term used and not otherwise defined below has the meaning assigned to it in our Privacy Policy.

European law provides individuals located in Europe with rights to receive certain disclosures regarding the collection, use, and sharing of personal data, as well as rights to be informed, access, rectification, erasure, restrict processing, data portability and to object with respect to collected personal data.For the purposes of this European Privacy Notice, “personal data” means any information relating to an identified or identifiable natural person.

For most data collection on our Websites, we are the data controller responsible for the collection and use of your personal information as set out in this Privacy Policy.

a. Basis for processing your personal data

Kosign relies on one or more legal bases to process your personal data under applicable law.We may process personal data (i) as necessary to perform our contractual obligations to you, including, but not limited to, those obligations in our terms of use; (ii) as necessary to pursue our legitimate interests as further detailed below; (iii) as necessary for our compliance with our legal obligations such as a request or order from courts, law enforcement or other government authorities; and/or (iv) with your consent, including to send you marketing email messages and other information that may be of interest to you, which you may withdraw at any time.

We will retain your personal data for as long as required for the purpose for which we originally processed your information, or as long as the law permits.

Legitimate business interests.We may collect, process, and maintain personal data to pursue the legitimate business interests outlined below.To determine these legitimate interests, we balance our legitimate interests against the legitimate interests and rights of you and others and only process personal data in accordance with those interests where they are not overridden by your data-protection interests or fundamental rights and freedoms.

While our legitimate interests are detailed in Section 2 of our Privacy Policy, they generally include:

Provide, improve, and develop our Websites, Products, and Services, including to deliver the Websites including our Portal, send you messages and provide user support, customize the Websites to better fit your needs as a user, develop new Products and Services, and perform internal analytics and research and development.This also includes sharing personal data with our trusted service providers that provide services on our behalf.
Protect you and others and to create and maintain a trusted environment, such as to comply with our legal obligations, to ensure compliance our agreements with you and other third parties, to ensure safe, secure, and reliable Websites, Products, and Services, and to detect and prevent wrongdoing and crime, assure compliance with our policies, and protect and defend our rights, interests, and property.In connection with the activities above, we may conduct internal research and profiling based on your interactions on various Websites, content you submit to the Websites, and information obtained from third parties.
Provide, personalize, measure and improve our marketing, including to send you promotional messages and other information that may be of interest to you with your consent.We may also use personal data to understand our user base and the effectiveness of our marketing.This processing is done pursuant to our legitimate interest in undertaking marketing activities to offer products or services that may be of interest to you.

We may transfer your personal data to (i) to any third party to whom disclosure is necessary to enable us to provide you with any services which you have requested, including but not limited to data processors such as web hosting companies and email marketing service companies; (ii) where required to do so by law or court order; (iii) to any person to whom disclosure is necessary to enable us to enforce our rights under this Privacy Policy or under the Terms of Use; and (iv) to any group company or prospective buyer of all or substantially all of Kobalt Music Group’s assets in connection with the sale or transfer of those assets to any prospective buyer.

b. Data sharing and transfers to third countries

Where we transfer personal information data we will seek to take account of any applicable statutory obligations relevant to personal information data transfers. In the case of transfers out of the EEA, we will, in the absence of an EC adequacy decision relevant to the destination country, seek to rely on appropriate safeguards such as a valid Privacy Shield certified US recipient or enter into appropriate EC approved standard contractual clauses (see http://ec.europa.eu/justice/data-protection/international-transfers/transfer/index_en.htm).

This may include the transfer of your personal data to one or more countries outside the UK and the EEA, where we (or other companies within the Kobalt Group), or our service providers maintain operations. You understand and accept that if your personal data is disclosed to third parties outside the UK and EEA those parties may be based in territories that may not have data protection provisions in law. In the case of transfers out of the UK and EEA, we will, in the absence of an EC adequacy decision relevant to the destination country, seek to rely on appropriate safeguards provided under law.

c. Your privacy rights

In certain circumstances, individuals located within the EEA, UK, and Switzerland are entitled to the following data protection rights regarding their personal data:

Right to access.You have the right to request confirmation of whether Kosign processes personal data relating to you, and if so, to request a copy of that personal data.
Right to rectification.You have the right to request that Kosign correct or update your personal data that is inaccurate, incomplete or outdated.
Right to erasure.You have the right to request that Kosign erase your personal data in certain circumstances provided by law.
Right to restrict processing.You have the right to request that Kosign restrict the use of your personal data in certain circumstances.
Right to object to processing.You have the right to object to Kosign’s processing of your personal data, under certain conditions.
Right to data portability.You have the right to request that Kosign export the data that we have collected to you or another company, under certain conditions.

Where the processing of your personal data is based on your previously provided consent, you have the right to withdraw your consent at any time.If you would like to exercise any of these rights, please submit a written request using the information in the Contact Us section below.We will respond to these requests in accordance with applicable data protection laws.We may ask you to verify your identity in order to help us respond efficiently to your request.

You may also have the right to lodge a complaint about our data collection and processing actions with the appropriate supervisory authority.In the UK, the appropriate authority is the Information Commissioner’s Office (ICO), accessible here.In the EEA, you can view the contact information for your data protection authority here.

9. Australia Privacy Notice

If you would like a copy of the privacy policy for the Australian subsidiaries please contact the Australian Kobalt office via privacy.policy.au@kobaltmusic.com.

10. Cookies

“Cookies” are small pieces of information which are issued to your computer or mobile device when you visit a website and which store and sometimes track information about your use of the website. When you visit our website, our web server sends a cookie to your device which allows us to recognise your device.

You can find out more about how we use cookies and other similar tracking technologies, including information on how you can manage your cookie preferences, in our Cookie Policy.

11. Changes to this Privacy Policy

We may change this Privacy Policy from time to time to reflect new services or changes in our data practices or relevant laws. The “effective date” legend at the top of this Privacy Policy indicates when it was last revised. Any changes are effective when we post the revised Privacy Policy on the Websites. If we make any material changes to this Privacy Policy, we will take reasonable measures to notify you via email and/or a prominent notice on our Websites prior to the change becoming effective, and will update the effective date at the top of this Privacy Policy.You are advised to review this Privacy Policy periodically for any changes.

12. Contact Us

If you have any questions about this Privacy Policy or wish to exercise one of your privacy rights, please contact us using the following information:

Email: privacy@kosignmusic.com

Address:

Data Protection Officer
Kobalt Music Group
5th Floor, Goldings House Hay's Galleria,
London, United Kingdom, SE1 2HB