Entrustment, Transfers to 3rd Party and Overseas Transfers
Spotify takes necessary measures for your data transferred to third parties and overseas to be safely protected in accordance with the laws of the Republic of Korea and internal policies of Spotify AB and Spotify group companies.
For the purposes stated in the Privacy Policy we may entrust and transfer your data overseas to 3rd parties according to the following:
(The following list is subject to change. Users must check the website for an up-to-date list.)
(1) Entrustment and transfer of data
① Spotify Service Providers
| Entrusted Company and Contact | Personal Information transferred | Services provided / Purpose of transfer | Country to which data will be transferred | Date of the transfer and methods | Personal Information Retention & Usage Period |
|---|---|---|---|---|---|
| 24-7 Intouch, Inc. Contact |
Items listed in Section 4 of the Privacy Policy |
Customer Support |
United States of America |
Transmission over the network at the time of service |
Corresponds to the storage period described in the Privacy Policy |
| Adaptavist, Inc. Contact |
Items listed in Section 4 of the Privacy Policy |
Customer Support |
United Kingdom |
Transmission over the network at the time of service |
Corresponds to the storage period described in the Privacy Policy |
| Adjust GmbH Contact |
Items listed in Section 4 of the Privacy Policy |
Advertising and marketing assistance |
Germany, United States of America, Netherlands |
Transmission over the network at the time of service |
Corresponds to the storage period described in the Privacy Policy |
| Adyen N.V Contact |
Items listed in Section 4 of the Privacy Policy |
Payment processing | Netherlands | Transmission over the network at the time of service | Corresponds to the storage period described in the Privacy Policy |
| Airtable Contact |
Items listed in Section 4 of the Privacy Policy | Database and analytics tooling | United States of America | Transmission over the network at the time of service | Corresponds to the storage period described in the Privacy Policy |
| Akamai Technologies AB Contact |
Items listed in Section 4 of the Privacy Policy | Data storage and file-sharing | Sweden, United States of America | Transmission over the network at the time of service | Corresponds to the storage period described in the Privacy Policy |
| Amazon Web Services, Inc. Contact |
Items listed in Section 4 of the Privacy Policy | Data storage and file-sharing | United States of America, Australia, Germany, Japan, Ireland | Transmission over the network at the time of service | Corresponds to the storage period described in the Privacy Policy |
| Atlassian Corporation PLC Contact |
Items listed in Section 4 of the Privacy Policy |
Customer Support |
Australia |
Transmission over the network at the time of service |
Corresponds to the storage period described in the Privacy Policy |
| Backtrace I/O, Inc. Contact |
Items listed in Section 4 of the Privacy Policy |
Platform error monitoring |
United States of America |
Transmission over the network at the time of service |
Corresponds to the storage period described in the Privacy Policy |
| Boku Contact |
Payment and purchase data as described in the Privacy Policy | Payment processing | N/A | N/A | Corresponds to the storage period described in the Privacy Policy |
| Box Contact |
Items listed in Section 4 of the Privacy Policy | Data storage and file-sharing | United States of America | Transmission over the network at the time of service | Corresponds to the storage period described in the Privacy Policy |
| Branch Metrics, Inc. Contact |
Items listed in Section 4 of the Privacy Policy | Advertising and marketing assistance, web analytics | United States of America | Transmission over the network at the time of service | Corresponds to the storage period described in the Privacy Policy |
| Braze, Inc. Contact |
Items listed in Section 4 of the Privacy Policy | Customer Support, Customer Engagement | United States of America, Germany | Transmission over the network at the time of service | Corresponds to the storage period described in the Privacy Policy |
| Catalytic Inc. Contact |
Items listed in Section 4 of the Privacy Policy | Customer Engagement | United States of America | Transmission over the network at the time of service | Corresponds to the storage period described in the Privacy Policy |
| Celtra, Inc. Contact |
Items listed in Section 4 of the Privacy Policy | Advertising and marketing assistance | United States of America, Slovenia, Singapore | Transmission over the network at the time of service | Corresponds to the storage period described in the Privacy Policy |
| Comscore Contact |
Items listed in Section 4 of the Privacy Policy | Advertising analytics | Chile, India, United States of America | Transmission over the network at the time of service | Corresponds to the storage period described in the Privacy Policy |
| Concentrix Corporation Contact |
Items listed in Section 4 of the Privacy Policy |
Customer Support |
United States of America |
Transmission over the network at the time of service |
Corresponds to the storage period described in the Privacy Policy |
| Conductrics Contact |
Items listed in Section 4 of the Privacy Policy |
Platform error monitoring, user research |
United Kingdom |
Transmission over the network at the time of service |
Corresponds to the storage period described in the Privacy Policy |
| Congruity360, LLC Contact |
Items listed in Section 4 of the Privacy Policy |
Assistance with legal claims |
United States of America |
Transmission over the network at the time of service |
Corresponds to the storage period described in the Privacy Policy |
| Content Square, Inc. Contact |
Items listed in Section 4 of the Privacy Policy |
Advertising and marketing assistance, web analytics | United Kingdom |
Transmission over the network at the time of service |
Corresponds to the storage period described in the Privacy Policy |
| Digitalist Finland Oy Contact |
Items listed in Section 4 of the Privacy Policy |
Advertising and marketing assistance, web analytics | Ireland, United States of America, Germany | Transmission over the network at the time of service |
Corresponds to the storage period described in the Privacy Policy |
| EventRegist Co., Ltd. Contact |
Items listed in Section 4 of the Privacy Policy | Customer Engagement | Japan | Transmission over the network at the time of service | Corresponds to the storage period described in the Privacy Policy |
| Feedzai – Consultadoria e Inovação Tecnológica, S.A. Contact |
Items listed in Section 4 of the Privacy Policy | Fraud Analytics | Portugal, Belgium | Transmission over the network at the time of service | Corresponds to the storage period described in the Privacy Policy |
| Five9.com Contact |
Items listed in Section 4 of the Privacy Policy | Customer Engagement | United States of America | Transmission over the network at the time of service | Corresponds to the storage period described in the Privacy Policy |
| Formagrid, Inc. Contact |
Items listed in Section 4 of the Privacy Policy |
User Research |
United States of America |
Transmission over the network at the time of service |
Corresponds to the storage period described in the Privacy Policy |
| Foursquare Labs, Inc. Contact |
Items listed in Section 4 of the Privacy Policy | Customer Engagement, Advertising and marketing assistance | United States of America | Transmission over the network at the time of service | Corresponds to the storage period described in the Privacy Policy |
| FUNCTIONAL SOFTWARE, INC. Contact |
Items listed in Section 4 of the Privacy Policy |
Platform error monitoring |
United States of America |
Transmission over the network at the time of service |
Corresponds to the storage period described in the Privacy Policy |
| Google Cloud EMEA Ltd Contact |
Items listed in Section 4 of the Privacy Policy | Data storage and file-sharing, web analytics, fraud prevention |
Belgium, United States of America, Taiwan | Transmission over the network at the time of service |
Corresponds to the storage period described in the Privacy Policy |
| Google, Inc Contact |
Items listed in Section 4 of the Privacy Policy |
Advertising analytics |
United States of America, Ireland, Singapore, Netherlands, Finland, Chile, Denmark, Taiwan, Belgium |
Transmission over the network at the time of service |
Corresponds to the storage period described in the Privacy Policy |
| Google Ireland Limited Contact |
Items listed in Section 4 of the Privacy Policy |
Advertising and marketing assistance, web analytics |
United States of America, Belgium, Taiwan, Chile, Denmark, Ireland, Singapore, Finland, Netherlands |
Transmission over the network at the time of service |
Corresponds to the storage period described in the Privacy Policy |
| Google LLC - Google Cloud Platform, Google Cloud Services, and Google Suite Contact |
Items listed in Section 4 of the Privacy Policy | Data backup (storage) between countries, management of data and provision of service, provision of Google Suite tools. |
Belgium, United States of America, Taiwan | Transmission over the network at the time of service | Corresponds to the storage period described in the Privacy Policy |
| Google LLC - Google Adwords, Analytics Contact |
Items listed in Section 4 of the Privacy Policy | Advertising and marketing assistance, web analytics | Ireland | Transmission over the network at the time of service | Corresponds to the storage period described in the Privacy Policy |
| Hold360 Contact |
Items listed in Section 4 of the Privacy Policy | Assistance with legal claims | United States of America | Transmission over the network at the time of service | Corresponds to the storage period described in the Privacy Policy |
| Hopin Ltd. Contact |
Items listed in Section 4 of the Privacy Policy | Customer Engagement | United Kingdom, Ireland | Transmission over the network at the time of service | Corresponds to the storage period described in the Privacy Policy |
| Hotjar Ltd. Contact |
Items listed in Section 4 of the Privacy Policy | Advertising and marketing assistance, web analytics | Ireland, Malta | Transmission over the network at the time of service | Corresponds to the storage period described in the Privacy Policy |
| Indeemo Limited. Contact |
Items listed in Section 4 of the Privacy Policy | User Research | Ireland, Germany | Transmission over the network at the time of service | Corresponds to the storage period described in the Privacy Policy |
| Khoros, LLC Contact |
Items listed in Section 4 of the Privacy Policy |
Customer Support |
United States of America, Ireland, United Kingdom, India, Japan, Australia, Bulgaria, Italy |
Transmission over the network at the time of service |
Corresponds to the storage period described in the Privacy Policy |
| Korea Cyber Payment Limited (KCP) VP, Hyunchul Cho Contact |
Payment and purchase data as described in the Privacy Policy | Payment processing | N/A | N/A | Corresponds to the storage period described in the Privacy Policy |
| K.G Mobilians Ho-hwang Choi Office: IT SupportPhone No: 1800-0678 Contact |
Items listed in Section 4 of the Privacy Policy | Verification of services or content with an age limit | N/A | N/A | Corresponds to the storage period described in the Privacy Policy |
| KT Corporation |
Payment and purchase data as described in the Privacy Policy | Payment processing | N/A | N/A | Corresponds to the storage period described in the Privacy Policy |
| Liveperson Inc. Contact |
Items listed in Section 4 of the Privacy Policy | Customer Support | Bulgaria, Israel, Dominican Republic, United States of America | Transmission over the network at the time of service | Corresponds to the storage period described in the Privacy Policy |
| LivePerson Netherlands B.V. Contact |
Items listed in Section 4 of the Privacy Policy |
Customer Support |
United Kingdom, United States of America, Israel, Bulgaria, Dominican Republic, Netherlands |
Transmission over the network at the time of service |
Corresponds to the storage period described in the Privacy Policy |
| LiveRamp Contact |
Items listed in Section 4 of the Privacy Policy | User research and advertising and marketing assistance | United States of America | Transmission over the network at the time of service | Corresponds to the storage period described in the Privacy Policy |
| LG Uplus Corporation Contact |
Payment and purchase data as described in the Privacy Policy | Payment processing | N/A | N/A | Corresponds to the storage period described in the Privacy Policy |
| Lookback Group, Inc Contact |
Items listed in Section 4 of the Privacy Policy | User Research | United States of America, Ireland | Transmission over the network at the time of service | Corresponds to the storage period described in the Privacy Policy |
| The Rocket Science Group LLC (MailChimp) Contact |
Items listed in Section 4 of the Privacy Policy | Email marketing | United States of America | Transmission over the network at the time of service | Corresponds to the storage period described in the Privacy Policy |
| Magnite Inc. Contact |
Items listed in Section 4 of the Privacy Policy | Advertising and marketing assistance | United States of America | Transmission over the network at the time of service | Corresponds to the storage period described in the Privacy Policy |
| Microsoft Corporation Contact |
Items listed in Section 4 of the Privacy Policy | Data backup (storage), management of data | United States of America, Sweden, Germany. | Transmission over the network at the time of service | Corresponds to the storage period described in the Privacy Policy |
| mParticle, Inc. Contact |
Items listed in Section 4 of the Privacy Policy | Advertising and marketing assistance | United States of America, Lithuania, Argentina | Transmission over the network at the time of service | Corresponds to the storage period described in the Privacy Policy |
| Mux, Inc. Contact |
Items listed in Section 4 of the Privacy Policy | Platform error monitoring, web analytics | United States of America, Germany | Transmission over the network at the time of service | Corresponds to the storage period described in the Privacy Policy |
| Nexmo, Inc. Contact |
Items listed in Section 4 of the Privacy Policy |
Account authentication services |
United States of America |
Transmission over the network at the time of service |
Corresponds to the storage period described in the Privacy Policy |
| Oracle Corporation Contact |
Items listed in Section 4 of the Privacy Policy | Advertising and marketing assistance | United States of America | Transmission over the network at the time of service | Corresponds to the storage period described in the Privacy Policy |
| Ownbackup, Inc. Contact |
Items listed in Section 4 of the Privacy Policy | Data backup (storage), management of data | Israel, United States of America | Transmission over the network at the time of service | Corresponds to the storage period described in the Privacy Policy |
| PayPal Pte. Ltd; PayPal (Europe) S.aÌ r.l. et Cie, S.C.A. Contact |
Items listed in Section 4 of the Privacy Policy | Payment processing | Singapore; Luxembourg. | Transmission over the network at the time of service | Corresponds to the storage period described in the Privacy Policy |
| Qualaroo, Inc. Contact |
Items listed in Section 4 of the Privacy Policy | User Research | United States of America | Transmission over the network at the time of service | Corresponds to the storage period described in the Privacy Policy |
| Qualtrics Contact |
Items listed in Section 4 of the Privacy Policy | User Research | United States of America | Transmission over the network at the time of service | Corresponds to the storage period described in the Privacy Policy |
| Quantum Consumer Solutions Private Limited Contact |
Items listed in Section 4 of the Privacy Policy |
User Research |
India |
Transmission over the network at the time of service |
Corresponds to the storage period described in the Privacy Policy |
| Sawtooth Software, Inc. Contact |
Items listed in Section 4 of the Privacy Policy |
User Research | United States of America | Transmission over the network at the time of service | Corresponds to the storage period described in the Privacy Policy |
| SK Telecom Co., Ltd Contact |
Payment and purchase data as described in the Privacy Policy |
Payment processing |
N/A | N/A | Corresponds to the storage period described in the Privacy Policy |
| Stripe Partners Ltd Contact |
Items listed in Section 4 of the Privacy Policy |
User research |
Ireland |
Transmission over the network at the time of service |
Corresponds to the storage period described in the Privacy Policy |
| Splunk Contact |
Items listed in Section 4 of the Privacy Policy | Data backup (storage), management of data, data security |
Germany, United States of America |
Transmission over the network at the time of service |
Corresponds to the storage period described in the Privacy Policy |
| Sutherland Global Services, Inc. Contact |
Items listed in Section 4 of the Privacy Policy |
Customer Support |
Philippines, United States of America, Ireland, India, Dubai, Canada, United Kingdom, Germany, Japan, Netherlands, Singapore, Australia |
Transmission over the network at the time of service |
Corresponds to the storage period described in the Privacy Policy |
| TREMENDOUS Contact |
Items listed in Section 4 of the Privacy Policy |
User Research |
United States of America |
Transmission over the network at the time of service |
Corresponds to the storage period described in the Privacy Policy |
| Twenty Nine Enterprises, Inc. Contact |
Items listed in Section 4 of the Privacy Policy | User research and advertising and marketing assistance | United States of America | Transmission over the network at the time of service | Corresponds to the storage period described in the Privacy Policy |
| Twilio Inc. Contact |
Items listed in Section 4 of the Privacy Policy | Advertising and marketing assistance | Ireland, United States of America | Transmission over the network at the time of service | Corresponds to the storage period described in the Privacy Policy |
| Xandr Inc. Contact |
Items listed in Section 4 of the Privacy Policy | Advertising and marketing assistance | United States of America | Transmission over the network at the time of service | Corresponds to the storage period described in the Privacy Policy |
| Zendesk, Inc. Contact |
Items listed in Section 4 of the Privacy Policy |
Customer Support |
Germany, Japan, Australia, Ireland, United States of America |
Transmission over the network at the time of service |
Corresponds to the storage period described in the Privacy Policy |
Data will be retained by the service provider for as long as is necessary to fulfil the purpose of the transfer and/or to fulfil the service provider's legal obligations.
② Spotify Group Companies
| Spotify group companies Spotify AB SPOTIFY ARGENTINA S.A. Spotify Australia Pty Ltd Spotify Belgium NV Spotify Brasil Servicos De Musica LTDA Spotify Canada Inc. Spotify Denmark ApS Spotify Dijital Yayıncılık Hizmetleri Anonim Şirketi Spotify Finance Ltd Spotify Finland OY Spotify France SAS Spotify GmbH Spotify India LLP Spotify Ireland Limited Spotify Italy S.r.l. Spotify Japan K.K. / スポティファイジャパン株式会社 Spotify Korea, Ltd Spotify Ltd Spotify Mena FZ-LLC Spotify Netherlands BV Spotify Singapore Pte Ltd. Spotify South Africa Pty Ltd Spotify Spain S.L Spotify Taiwan Ltd Spotify Technology S.A Spotify USA Inc. Spotify Yönetim Destek Hizmetleri Anonim Sirketi Chartable Holding, Inc. Findaway World LLC Gimlet LLC Gimlet Media LLC Kinzen Limited Parcast LLC Ringer.com LLC S Servicios De Música México S.A. De C.V Sociedad Recaudadora SSMM México, S.A. De C.V Sonantic Limited Whooshkaa Pty Ltd |
Items listed in Section 4 of the Privacy Policy | Assisting Spotify AB with the purposes set out in Section 5 of the Privacy Policy | Argentina, Australia, Belgium, Brazil, Canada, Denmark, Finland, France, Germany, India, Ireland, Italy, Japan, Luxembourg, Mexico, Netherlands, Singapore, South Africa, Spain, Sweden, Taiwan, Turkey, United Arab Emirates, United Kingdom, United States of America |
Transmission over the network at the time of service | Corresponds to the storage period described in the Privacy Policy |
(2) Transfer of Data to 3rd Parties
① Third Party apps you have granted access to your Spotify account
| Third Party apps you have granted access to your Spotify account (if any) as found in the link in Section 6 | Information may differ slightly depending on the third party application, but may include: information about what you are currently playing and your connected devices, email address, username, information about your playlists or library, information about your subscription details, artists you follow, your followers, recently played and top tracks | To allow third party apps located outside of Korea to process information pursuant to your grant of access | See the privacy policy of the application or device you have granted access to your Spotify account | Transmission over the network at the time of service | See the privacy policy of the application or device you have granted access to your Spotify account |
② Content providers
| Warner Music Inc. Warner Music Inc. and WEA International Inc. 1633 Broadway, New York, New York 10019 Warner Music International Services Ltd. 27 Wrights Lane London, England W8 5SW |
Account registration data | To directly send you news or promotional offers by email |
USA, UK | Transmission over the network at the time of service | Corresponds to the storage period described in this privacy policy |
| UMG Recordings Services Inc. | Account registration data | To directly send you news or promotional offers by email |
USA | Transmission over the network at the time of service | Corresponds to the storage period described in this privacy policy |
| Universal International Music, B.V. | Account registration data | To directly send you news or promotional offers by email |
Netherlands | Transmission over the network at the time of service | Corresponds to the storage period described in this privacy policy |
| Sony Music Entertainment | Account registration data | To directly send you news or promotional offers by email |
USA | Transmission over the network at the time of service | Corresponds to the storage period described in this privacy policy |