Alibi Music Privacy Notice for Residents of the European Economic Area

ALIBI MUSIC

Privacy Notice for Residents of the European Economic Area, United Kingdom and Switzerland

Last Updated: September 15, 2023

This Privacy Notice For Residents of the European Economic Area (“EEA Privacy Notice”) United Kingdom, and Switzerland supplements, and is made a part of, Alibi Music, LP’s (“Alibi,” “we,” “us,” or “our”) Website Use Agreement (https://alibimusic.com/terms) and Privacy Policy (https://alibimusic.com/privacy-policy)and applies solely to visitors, purchasers, users, and others who reside in the European Economic Area, United Kingdom and Switzerland (“EEA Consumers” or “you”), and who use our website (

) (the “Site”), products and services.

I. Information We Collect About EEA, United Kingdom and Swiss Residents

A. Collection of Personal Data

In the following we inform you about the collection of personal data when using our website. Personal data are all data that can be related to you personally, for example name, address, e-mail addresses, user behavior.

The entity responsible for data processing on this website in accordance with Art. 4 Para. 7 of the European Data Protection Regulation (GDPR) is

Alibi Music, LP

1874 Catasauqua Road #215

Allentown, PA 18109

USA

Our Representative in the European Union, the European Economic Area, Switzerland and/or the UK, in either the role of ‘data controller’ or ‘data processor’ is DataRep in accordance with Art. 27 GDPR.

If you want to raise a question to Alibi Music, LP or otherwise exercise your rights in respect of your personal data, you may do so by:

PLEASE NOTE: When mailing inquiries, it is ESSENTIAL that you mark your letters for ‘DataRep’, not ‘Alibi Music, LP’, or your inquiry may not reach our representative. Please refer clearly to Alibi Music, LP in your correspondence. On receiving your correspondence, Alibi is likely to request evidence of your identity to ensure your personal data nad information connectded with it Is not provided to anyon other than you.

If you have any concerns over how DataRep will handle the personal data we will require to undertake their services, please refer to DataRep’s privacy policy notice at

.

When you contact our Represantative by email or via a contact form, the data you provide (your email address, your name and your phone number, if applicable) will be stored by us or our Represantative in order to answer your questions. Data arising in this connection will be deleted after storage is no longer necessary or its processing will be restricted if there are legal storage obligations.

If we use contracted service providers for individual functions of our offer or if we want to use your data for commercial purposes, we will inform you in detail about the respective processes below. We will also state the specified criteria for the storage period.

B. Types of Personal Data We Collect

We may have collected the following types of personal data:

  1. Identifiers and Account information.
    1. Category and Sources of Data: Identifiers such as name, email address, street address, mobile, home and work phone numbers, payment information and account information, such as user ID, password, product and service preferences, contact preferences, IP address and MAC address.
    2. How We Collect this Data: We collect this information from users that voluntarily provide such information through the Site, such as when signing up for an account, using our products or services, or otherwise interacting with us. We may collect such information automatically and passively.
    3. Purposes of Data Processing: We use this information to provide our products and services to you
    4. How We share this Data: We share this information with our services providers and as otherwise set forth in our Privacy Policy.
    5. Legal Basis for Data Processing under GDPR or similar regulations: Art. 6 Para. 1 sentence 1 lit. b GDPR
  2. Personal Information
    1. Category and Sources of Data: Personal information, including your name and payment information.
    2. How We Collect this Data: We collect this information from users that voluntarily provide us such information when signing up for an account, making a purchase, participating in a giveaway, or participating in research.
    3. Purposes of Data Processing: We use this information to provide our products and services to you.
    4. How We share this Data: We do not share this information, except to process and complete the transactions, including our products and services, that you have requested from us. Please note that third parties process payments that you make to purchase on our website.
    5. Legal Basis for Data Processing under GDPR or similar regulations: Art. 6 Para. 1 sentence 1 lit. b GDPR.
  3. Protected Classifications
    1. Category and Sources of Data: Protected classifications, such as age or sex.
    2. How We Collect this Data: We collect this information from users that voluntarily provide us such information.
    3. Purposes of Data Processing: We use this information for data analysis and market research.
    4. How We share this Data: We do not share this data directly with third parties.

We may share anonymized results for internal marketing use.

  1. Legal Basis for Data Processing under GDPR or similar regulations
  1. Electronic Network Activity Information
    1. Category and Sources of Data: Electronic network activity information, including internet activities, such as website activities and browsing history.
    2. How We Collect this Data: We collect this information from your browser using cookies, tags, pixels, and other similar technologies.
    3. Purposes of Data Processing: We use this information to improve user experience, and for data analysis and market research.
    4. How We share this Data:We do not share this data directly with third parties. We may share anonymized results for internal marketing use. To the extent that certain vendors of ours can access our products and services, please see the Opting Out of “Sales” Section below.
    5. Legal Basis for Data Processing under GDPR or similar regulations: Art. 6 Para. 1 sentence 1 lit. a GDPR
  2. Geolocation Data
    1. Category and Sources of Data: Geolocation data, which includes state/country information by IP address.
    2. How We Collect this Data: We collect this information by IP address.
    3. Purposes of Data Processing: We use this information for data analysis and market research.
    4. How We share this Data: We do not share this data directly with third parties.

We may share anonymized results for internal review of product or service and internal marketing.

  1. Legal Basis for Data Processing under GDPR or similar regulations: Art. 6 Para. 1 sentence 1 lit. a GDPR
  1. Sensory Data
    1. Category and Sources of Data: Sensory data such as your voice inputs through a third-party voice assistant.
    2. How We Collect this Data:We do not collect this information, but if you use a third-party application, such as Amazon Alexa, in connection with our Site, products, or Services, your sensory data may be collected to facilitate the third-party services.
    3. Purposes of Data Processing: You and third-parties may use this information on or with our Site, products, and services.
    4. How We share this Data: This information is collected by third parties, using their software and tools. We do not directly collect any of this information ourselves
  2. Additional Information You Upload onto the Site
    1. Category and Sources of Data: We only collect this information because you send it to us or are using our Site, products, and services.
    2. How We Collect this Data: We only collect this information because you send it to us or are using our Site, products, and services.
    3. Purposes of Data Processing: We use this information to provide access to features on our Site or our products and services to you.
    4. How We share this Data: We do not share this information, except to process and complete the transactions, including our products and services, that you have requested from us.
    5. Legal Basis for Data Processing under GDPR or similar regulations: Art. 6 Para. 1 sentence 1 lit. b GDPR

C. Duration of Data Storage

In the case of a purchase via our website, your data will be stored by us after the contract has been completely processed, initially for the duration of the statutory warranty period, then taking into account legal storage periods, particularly with regard to tax and commercial law, and then deleted after the period has expired, unless you have consented to further processing and use. Regarding the duration of data storage by third parties, we refer to the above-mentioned links to the information provided by third parties.

D. Data Processing and Transfer

a. When you access our website an/or interact with us your data will be processed according to this privacy policy. Regardless of your country of residence in order to provide our services your data can be processed outside of your country, in particular also in the United States. Some of these countries may not have the same data protection guarantees as the country where you reside.

b. Alibi Music processes information related to individuals in the EU/EEA/UK and transfers that information from the EU/EEA/UK through various compliance mechanisms according to Art.44 et sequ. GDPR, including derogations according to Art. 49 GDPR. By using our Services, you consent to us transferring information about you to these countries.

c. The United States and other non-EU/EEA/UK countries have different laws on data protection and rules also in particular in relation to government access to information. If you are based in the EU/EEA/UK, when your data is moved from your home country to a third country outside the EU/EEA/UK, some of these countries may not have the same data protection safeguards as your home country.

E. Third Party Services

a. Stripe

Your payment will be processed by Stripe, who collect, use and process your information, including payment information, in accordance with their privacy policies. The entity responsible for the collection and processing of Personal Data for residents of the EEA, the UK and Switzerland is Stripe Payments Europe, Ltd. (1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland). For more information on the purpose and scope of data collection and processing by Stripe, please see the privacy policy (

). The legal basis is Art. 6 para. 1 sentence 1 (b) GDPR

b.Doubleclick

We use on our website "DoubleClick", an online marketing tool provided by Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (hereinafter referred to as "Google"). DoubleClick uses, among other things, cookies, which are small text files stored locally in the cache of your web browser on your end device. Google uses a cookie ID to record which ads are shown in which web browser. This can be used to prevent ads from being shown more than once. DoubleClick may also use cookie IDs to track conversions related to ad requests. By using DoubleClick, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google through the use of DoubleClick. We use DoubleClick for marketing and optimisation purposes, in particular to display ads that are relevant and interesting to you, to improve campaign performance reports or to prevent you from seeing the same ads more than once. This is also our legitimate interest in the processing of the above data by the third party provider. The legal basis is Art. 6 para. 1 sentence 1 (a) GDPR.

You can prevent the installation of cookies by deleting existing cookies and deactivating the storage of cookies in the settings of your web browser. Please note that in this case you may not be able to use all the functions of our website to their full extent. You can also prevent the storage of cookies by setting your web browser to block cookies from the domain "www.googleadservices.com" (https://adssettings.google.de). We would like to point out that this setting is deleted when you delete your cookies. You can also deactivate interest-related advertisements by clicking on the link https://optout.aboutads.info. We would like to point out that this setting will also be deleted if you delete your cookies.

For more information about Google's use of data, setting and opt-out options and data protection, please visit the following Google website:

c. HubSpot

We use on our website HubSpot. HubSpot is an U.S. software company with a subsidiary in Ireland (HubSpot Ireland Limited,Ground Floor, Two Dockland Central, Guild Street, Dublin 1, Ireland)

We use HubSpot for our online marketing activities. This is an integrated software solution with which we cover various aspects of our online marketing.

These include among others:

- Content management (website)

- E-mail marketing (newsletters and automated mailings, e.g. to provide downloads)

- Reporting (e.g. traffic sources, accesses, etc. ...)

- Contact management (e.g. user segmentation & CRM)

- Landing pages and contact forms

This information and the content of our website is stored on HubSpot servers. We may use this information to contact visitors to our website and to determine which services of our company are of interest to them. The legal basis is Art. 6 para. 1 sentence 1 (a) GDPR.

For more information about HubSpot's use of data, setting and opt-out options and data protection, please visit the following HubSpot website:

II. Your Rights as Resident of the EEA, Switzerland or the United Kingdom.

As a resident of the EEA, the United Kingdom or Switzerland, you have certain rights regarding your personal information.

A. Your Access Right, Art. 15 GDPR

You have the right to obtain from us the confirmation as to whether or not personal data concerning you are being processed, and, when that is the case, access to the personal data and the following information: (1) the purposes of the processing; (2) the categories of personal data concerned; (3) the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations; (4) where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period; (5) where the personal data are not collected from you, any available information as to their source; (6) where personal data are transferred to a third country orto an international organisation, the appropriate safeguards relating to the transfer.

B. Your Rectification Right, Art. 16 GDPR

You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

C. Your Erasure Right (‘Right to Be Forgotten’), Art. 17 GDPR

You have the right to obtain from us the erasure of personal data concerning you without undue delay.

D. Your Restriciton Right, Art. 18 GDPR

You have the right to obtain from us restriction of processing the personal data concerning you under certain circumstances.

E. Your Data Portability Right, Art. 20 GDPR

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from us or to have us transmit the personal data directly to another controller, where technically feasible.

F. Your Right to Object or Withdraw the Processing of Your Personal Data

1. If you have given your consent to process your personal data, you can withdraw it at any time. Such withdrawal will affect the permissibility of processing your personal data after you have declared it to us. The lawfulness of the data processing that took place up to the revocation remains unaffected by the revocation.

2. Insofar as we base the processing of your personal data on the weighing of interests, here in particular on Art. 6 para. 1 sentence 1 lit. f GDPR, you may object to the processing. This is the case if the processing is in particular not necessary for the performance of a contract with you, which is described by us in the following description of the functions. If you exercise such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. We will examine the situation and will either stop or adapt the data processing or show you our compelling reasons for continuing the processing, which are worthy of protection.

3. You can object to the processing of your personal data for advertising and data analysis purposes at any time.

4. Revocation or objection must be sent to the contact details listed under I.A.

III. Dispute Resolution

If a privacy complaint or dispute relating to Personal Data received by Alibi Music, LP in reliance on the Data Privacy Framework (or any of its predecessors) cannot be resolved through our internal processes, we have agreed to participate in the

. Subject to the terms of the VeraSafe Data Privacy Framework Dispute Resolution Procedure, VeraSafe will provide appropriate recourse free of charge to you. To file a complaint with VeraSafe and participate in the VeraSafe Data Privacy Framework Dispute Resolution Procedure, please submit the required information here:

IV. Changes to Our Privacy Notice for EEA Residents

This EEA, Switzerland and United Kingdom Privacy Notice was last updated on September 15, 2023. Changes to EEA, Switzerland or United Kingdom Privacy Notice may result from the further development of our website and the implementation of new technologies to improve our service, or as a result of changes in legal or regulatory requirements. We therefore recommend that you read this EEA, Switzerland and United Kingdome Privacy Notice over from time to time. The current version can be accessed and printed at any time on this website.

decorative visualization bars