Labelcamp Privacy Policy

IDOL (Independent Distribution Online), a simplified joint-stock company with a capital of 85,000 euros, registered in the Paris Trade and Companies Register under number 488 556 523, with its registered office at 100 rue de la Folie Méricourt, 75011 PARIS, represented by Mr Pascal Bittard in his capacity as Chairman.

This Privacy Policy concerns IDOL (Independent Distribution Online), a simplified joint stock company with a capital of 85,000 euros, registered with the Paris Trade and Companies Register under number 488 556 523, having its registered office at 100 rue de la Folie Méricourt, 75011 PARIS, represented by Mr. Pascal Bittard in his capacity as President.

This Privacy Policy describes IDOL’s personal data processing practices in the context of digital music distribution.

We give a particular importance to data security, confidentiality, privacy protection and related rights. Please take the time to read this document.

By visiting LabelCamp, providing IDOL with your personal data or other information, or entering into a contract with IDOL, you expressly acknowledge that you have read and agree to be bound by this Privacy Policy.

The purpose of this policy is to clearly inform Labelcamp users (“Users”, “you” and “your”) about the use of their personal data. These personal data only concern users who are natural persons (contact details, identity), and not the labels on behalf of which they operate.

The purpose of this charter is also to define the rights of users concerning this data, as well as the potential recipients of this data.

IDOL collects, stores and uses your personal data when you use the Website https://labelcamp.idol.io/ (hereinafter “Labelcamp”).

a) Objectives pursued by IDOL

IDOL collects your personal data for the following purposes:
1. To contact you about the contractual obligations between the label you represent and IDOL.
   • Carry out various payment transactions
   • Sending calls for billing
   • Technical support
   • Sending IDOL information and newsletters
2. Create and administer your personal account
3. Collect the names and surnames of the songwriters, authors, composers, artists, sound engineers… and all the people who have collaborated to the Recordings for the purpose of good distribution on the different platforms;
4. Allow you to sign in to your Google Account and manage the upload of videos directly to your label’s YouTube channel from Labelcamp via Google API integration
   • Storage of the authentication code sent by Google the first time you connect via the Google API integrated on Labelcamp
   • Sharing this access to the YouTube channel with other users of the user group attached to your label.
5. Updating of IDOL’s label partners contact database.
6. Respond to your questions, requests for information or manage and improve customer service
7. To manage and administer your personal data in compliance with the RGPD.

 
b) Data collected by IDOL
The term “personal data” means any information that allows us to identify you directly (surname, first name and e-mail address) or indirectly (Google authentication token).
We collect personal data directly from you (e.g. when you register a Labelcamp account) or when you log in to your Google Account via the Google API within Labelcamp.

For the purposes specified above, IDOL collects and uses the following types of personal data:
• On Labelcamp: Identification and contact data: e.g. your first name, last name, email address, last login date, your crypted labelcamp username and password on our application.
• Cookie collection for automatic authentication / reconnection of users in Labelcamp.
• Authentication token issued by Google in order to be able to use and manage the upload of videos on the Youtube channel associated with your Label directly from Labelcamp;
• the surnames and first names of all persons who have collaborated on the Recordings distributed by IDOL.

 
c) Storage of personal data

Personal data is stored by IDOL:
• Throughout the duration of the contract linking IDOL to the Label for which you use Labelcamp.
• The duration of any legal proceedings when this personal data is necessary for the defence of IDOL’s rights and interests.

Personal data will subsequently be permanently deleted from our databases, except for the login username for the purpose of technical archiving of activities carried out on a page.
The Google authentication tokens collected via the Google API on Labelcamp are not stored and are intended to be used only for the purpose of authorizing YouTube login within Labelcamp the first time you log in.
The collected personal data can be viewed, changed or deleted by you at any time or by IDOL employees as a result of changes in your marital status or contact details.
 
d) Recipients of your personal data
The Data that you transmit to us directly or indirectly is accessible only by duly authorised persons when this is necessary for the sole purpose referred to in point 2.a above. We ensure that this access complies with the security measures that we put in place.

Your personal data is intended to be used only by employees of IDOL and its subsidiaries IDOL Media and IDOL Tech, with the exception of Google authentication tokens which are not stored or accessible by employees.

The personal data collected from you will not be transmitted to any third party other than the bulk mail services (in particular MailChimp), which are used for purely technical purposes and, in the event of a restructuring of our company (in particular a total or partial sale of our assets, a merger, acquisition, takeover of our structure) in order to guarantee the smooth running of Labelcamp.

Finally, IDOL reserves the right to communicate your personal data to a State body (in particular the Tax Administration) or a judicial body when required by law or by a court decision or a provisional enforcement measure in the context of legal proceedings.

e) Duration of data retention
We retain data only for as long as is necessary to fulfil the contract, achieve the purpose of the processing, or to meet your needs or our legal obligations.

The data retention criteria we have in place include the following:
• The duration of the contract between you and us;
• The period of retention required by the regulations in force (accounting obligations, archiving obligations);
• The duration of your consent for certain uses;
• For a maximum period of 6 months for cookies or 13 months in very specific cases;

When we no longer need to use your data, we delete it from our systems and databases or anonymise it so that you are no longer identified.

f) Hosting, storage and transfer of data outside the European Union
Because of our presence in many countries around the world, some data may be collected, transferred, hosted and/or generally processed outside your country of residence.

Data protection and security requirements differ from place to place and may not offer the same level of protection as those in your country of residence or origin. Nevertheless, IDOL and its affiliates take appropriate measures to protect your data transfers. These measures include the use of data processing methods approved by the European Commission, and written agreements with our subcontractors to ensure that they process the data they receive on our behalf in accordance with applicable legislation.
 

Indeed, in accordance with Articles 45 and 46 of the GDPR, where we transfer your personal data outside the EEA, we ensure that a similar level of protection is applied to that data by ensuring, where required by law, that at least one of the following safeguards is implemented:
• transferring personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission;
• use of specific contracts approved by the European Commission that provide the same protections for personal data as those applied in Europe; or
• transferring personal data to the United States to an entity that is part of the Privacy Shield which requires it to provide similar protection to personal data shared between Europe and the United States.

 
g) Data security and confidentiality
In accordance with Article 32 of the GDPR, IDOL has taken all necessary technical and organisational measures to protect the confidentiality and security of the personal data collected from you, in order to prevent damage, modification, destruction or unauthorised access by third parties.

IDOL certifies the implementation of the following security measures:
• IDOL’s information systems are subject to physical and logical protection in accordance with the state-of-the-art, regularly assessed and improved. Backup procedures of IDOL’s information systems are regularly executed.
• Access to the data is limited to the sole employees of IDOL authorised because of their functions, with these employees being subject, furthermore, to contractual confidentiality obligations.
• IDOL’s service providers and sub-contractors are bound by written commitments to take security measures that are sufficient to ensure the protection of your personal data in accordance with the applicable legislation.
• IDOL’s Website is protected by a SSL encryption process making the data illegible during its transmission on the internet.

 
We remind you that IDOL does not control all the risks relating to the functioning of the Internet and we draw your attention to the existence of eventual risks inherent to its use and its functioning.

IDOL (Independent Distribution Online), a simplified joint stock company with a capital of 85,000 euros, registered in the Paris Trade and Companies Register under number 488 556 523, with its registered office at 100 rue de la Folie Méricourt, 75011 PARIS, represented by Mr Pascal Bittard in his capacity as Chairman, is responsible for processing the data of the electronic addresses of the persons working in the partner labels, which it collects in the context of your use of the service.

IDOL (Independent Distribution Online), a simplified joint stock company with a capital of 85,000 euros, registered in the Paris Trade and Companies Register under number 488 556 523, with its registered office at 100 rue de la Folie Méricourt, 75011 PARIS, represented by Mr Pascal Bittard in his capacity as Chairman, acts a subcontractor for processing the data of the songwriters and composers and all the people who have collaborated on the Recordings distributed by IDOL, which it collects as part of your use of the service.

We guarantee the exercise of your rights in accordance with the current legislation on the protection of personal data. You can thus exercise the following rights at your convenience:
• The right to information : You have the right to obtain clear, complete, transparent and intelligible information on how we use your personal data and on your rights. You can contact us at legal@idol.io for any information.
• Right of access: You have the right to obtain a copy of all personal data we hold about you.
• The right of rectification: you have the right to obtain rectification of your personal data in the event that it is incorrect, obsolete or incomplete.
• The right of deletion / right to forget: you have the right to have all or part of your personal data collected by us deleted.
• The right to object to personalised marketing: you have the right at any time to refuse the sending of emails or promotional information relating to our activity.
• The right to restrict the use of your personal data: under certain conditions, and within the limits imposed by the maintenance of the essential functions of the application, you may request that the use of your personal data be limited to certain operations only, or temporarily suspended.
• The right to data portability : you have the right to request that your personal data be transmitted to you in a format suitable for portability within another database.

You may exercise these rights by contacting us at legal@idol.io or by post at:

IDOL (Independent Distribution Online)
100 rue de la Folie Méricourt
75011 PARIS
France

If you are not satisfied with the way IDOL collects and processes your personal data, you can file a complaint about IDOL with the CNIL by visiting https://www.cnil.fr/or by writing to the following address: 3 Place de Fontenoy, TSA 80715, 75334 PARIS CEDEX 07, France.