Entrustment, Transfers to 3rd Party and Overseas Transfers
Spotify takes necessary measures for your data transferred to third parties and overseas to be safely protected in accordance with the laws of the Republic of Korea and internal policies of Spotify AB and Spotify group companies.
For the purposes stated in the Privacy Policy we may entrust and transfer your data overseas to 3rd parties according to the following:
(The following list is subject to change. Users must check the website for an up-to-date list.)
You may refuse to transfer your data overseas by making an individual request to us – see the Privacy Policy - Section 11 'Contact Us'. If you refuse to transfer your data overseas, we will exclude your data from being transferred overseas. However in this case, use of our services that necessarily involves overseas transfer of your data may be restricted.
(1) Entrustment and transfer of data
① Spotify Service Providers
|
Entrusted Company and Contact
|
Personal Information transferred | Services provided / Purpose of transfer |
Country to which data will be transferred
|
Date of the transfer and methods | Personal Information Retention & Usage Period |
|---|---|---|---|---|---|
|
24-7 Intouch, Inc.
|
Items listed in Section 4 of the Privacy Policy |
Customer Support |
United States of America |
Transmission over the network at the time of service |
Corresponds to the storage period described in the Privacy Policy |
|
Adaptavist, Inc.
|
Items listed in Section 4 of the Privacy Policy |
Customer Support |
United Kingdom |
Transmission over the network at the time of service |
Corresponds to the storage period described in the Privacy Policy |
|
Adjust GmbH
|
Items listed in Section 4 of the Privacy Policy |
Advertising and marketing assistance |
Germany, United States of America, Netherlands |
Transmission over the network at the time of service |
Corresponds to the storage period described in the Privacy Policy |
|
Adyen N.V
|
Items listed in Section 4 of the Privacy Policy
|
Payment processing
|
Netherlands
|
Transmission over the network at the time of service
|
Corresponds to the storage period described in the Privacy Policy
|
|
Airtable
|
Items listed in Section 4 of the Privacy Policy
|
Database and analytics tooling
|
United States of America
|
Transmission over the network at the time of service
|
Corresponds to the storage period described in the Privacy Policy
|
|
Akamai Technologies AB
|
Items listed in Section 4 of the Privacy Policy
|
Data storage and file-sharing
|
Sweden, United States of America
|
Transmission over the network at the time of service
|
Corresponds to the storage period described in the Privacy Policy
|
|
Amazon Web Services, Inc.
|
Items listed in Section 4 of the Privacy Policy
|
Data storage and file-sharing
|
United States of America, Australia, Germany, Japan, Ireland
|
Transmission over the network at the time of service
|
Corresponds to the storage period described in the Privacy Policy
|
|
Atlassian Corporation PLC
|
Items listed in Section 4 of the Privacy Policy |
Customer Support |
Australia |
Transmission over the network at the time of service |
Corresponds to the storage period described in the Privacy Policy
|
|
Backtrace I/O, Inc.
|
Items listed in Section 4 of the Privacy Policy |
Platform error monitoring |
United States of America |
Transmission over the network at the time of service |
Corresponds to the storage period described in the Privacy Policy |
|
Boku
Contact
|
Payment and purchase data as described in the Privacy Policy
|
Payment processing
|
N/A
|
N/A
|
Corresponds to the storage period described in the Privacy Policy
|
|
Box
|
Items listed in Section 4 of the Privacy Policy
|
Data storage and file-sharing
|
United States of America
|
Transmission over the network at the time of service
|
Corresponds to the storage period described in the Privacy Policy
|
|
Branch Metrics, Inc.
|
Items listed in Section 4 of the Privacy Policy
|
Advertising and marketing assistance, web analytics
|
United States of America
|
Transmission over the network at the time of service
|
Corresponds to the storage period described in the Privacy Policy
|
|
Braze, Inc.
|
Items listed in Section 4 of the Privacy Policy
|
Customer Support, Customer Engagement
|
United States of America, Germany
|
Transmission over the network at the time of service
|
Corresponds to the storage period described in the Privacy Policy
|
|
Catalytic Inc.
|
Items listed in Section 4 of the Privacy Policy
|
Customer Engagement
|
United States of America
|
Transmission over the network at the time of service
|
Corresponds to the storage period described in the Privacy Policy
|
|
Celtra, Inc.
|
Items listed in Section 4 of the Privacy Policy
|
Advertising and marketing assistance
|
United States of America, Slovenia, Singapore
|
Transmission over the network at the time of service
|
Corresponds to the storage period described in the Privacy Policy
|
|
Comscore
|
Items listed in Section 4 of the Privacy Policy
|
Advertising analytics
|
Chile, India, United States of America
|
Transmission over the network at the time of service
|
Corresponds to the storage period described in the Privacy Policy
|
|
Concentrix Corporation
|
Items listed in Section 4 of the Privacy Policy |
Customer Support |
United States of America
|
Transmission over the network at the time of service |
Corresponds to the storage period described in the Privacy Policy
|
|
Conductrics
|
Items listed in Section 4 of the Privacy Policy |
Platform error monitoring, user research |
United Kingdom |
Transmission over the network at the time of service |
Corresponds to the storage period described in the Privacy Policy |
|
Congruity360, LLC
|
Items listed in Section 4 of the Privacy Policy |
Assistance with legal claims |
United States of America
|
Transmission over the network at the time of service |
Corresponds to the storage period described in the Privacy Policy
|
|
Content Square, Inc.
|
Items listed in Section 4 of the Privacy Policy |
Advertising and marketing assistance, web analytics | United Kingdom |
Transmission over the network at the time of service |
Corresponds to the storage period described in the Privacy Policy
|
|
Digitalist Finland Oy
|
Items listed in Section 4 of the Privacy Policy |
Advertising and marketing assistance, web analytics | Ireland, United States of America, Germany | Transmission over the network at the time of service |
Corresponds to the storage period described in the Privacy Policy
|
|
EventRegist Co., Ltd.
|
Items listed in Section 4 of the Privacy Policy
|
Customer Engagement
|
Japan
|
Transmission over the network at the time of service
|
Corresponds to the storage period described in the Privacy Policy
|
|
Feedzai – Consultadoria e Inovação Tecnológica, S.A.
|
Items listed in Section 4 of the Privacy Policy
|
Fraud Analytics
|
Portugal, Belgium
|
Transmission over the network at the time of service
|
Corresponds to the storage period described in the Privacy Policy
|
|
Five9.com
|
Items listed in Section 4 of the Privacy Policy
|
Customer Engagement
|
United States of America
|
Transmission over the network at the time of service
|
Corresponds to the storage period described in the Privacy Policy
|
|
Formagrid, Inc.
|
Items listed in Section 4 of the Privacy Policy |
User Research |
United States of America
|
Transmission over the network at the time of service |
Corresponds to the storage period described in the Privacy Policy |
|
Foursquare Labs, Inc.
|
Items listed in Section 4 of the Privacy Policy
|
Customer Engagement, Advertising and marketing assistance
|
United States of America
|
Transmission over the network at the time of service
|
Corresponds to the storage period described in the Privacy Policy
|
|
FUNCTIONAL SOFTWARE, INC.
|
Items listed in Section 4 of the Privacy Policy
|
Platform error monitoring
|
United States of America
|
Transmission over the network at the time of service
|
Corresponds to the storage period described in the Privacy Policy
|
|
Google Cloud EMEA Ltd
|
Items listed in Section 4 of the Privacy Policy | Data storage and file-sharing, web analytics, fraud prevention |
Belgium, United States of America, Taiwan | Transmission over the network at the time of service |
Corresponds to the storage period described in the Privacy Policy |
|
Google, Inc
|
Items listed in Section 4 of the Privacy Policy |
Advertising analytics |
United States of America, Ireland, Singapore, Netherlands, Finland, Chile, Denmark, Taiwan, Belgium |
Transmission over the network at the time of service |
Corresponds to the storage period described in the Privacy Policy |
|
Google Ireland Limited
|
Items listed in Section 4 of the Privacy Policy |
Advertising and marketing assistance, web analytics |
United States of America, Belgium, Taiwan, Chile, Denmark, Ireland, Singapore, Finland, Netherlands |
Transmission over the network at the time of service |
Corresponds to the storage period described in the Privacy Policy |
|
Google LLC -
Google Cloud Platform, Google Cloud Services, and Google Suite
|
Items listed in Section 4 of the Privacy Policy
|
Data backup (storage) between countries, management of data and provision of service, provision of Google Suite tools.
|
Belgium, United States of America, Taiwan
|
Transmission over the network at the time of service
|
Corresponds to the storage period described in the Privacy Policy
|
|
Google LLC -
Google Adwords, Analytics
|
Items listed in Section 4 of the Privacy Policy
|
Advertising and marketing assistance, web analytics
|
Ireland
|
Transmission over the network at the time of service
|
Corresponds to the storage period described in the Privacy Policy
|
|
Hold360
|
Items listed in Section 4 of the Privacy Policy
|
Assistance with legal claims
|
United States of America
|
Transmission over the network at the time of service
|
Corresponds to the storage period described in the Privacy Policy
|
|
Hopin Ltd.
|
Items listed in Section 4 of the Privacy Policy
|
Customer Engagement
|
United Kingdom, Ireland
|
Transmission over the network at the time of service
|
Corresponds to the storage period described in the Privacy Policy
|
|
Hotjar Ltd.
|
Items listed in Section 4 of the Privacy Policy
|
Advertising and marketing assistance, web analytics
|
Ireland, Malta
|
Transmission over the network at the time of service
|
Corresponds to the storage period described in the Privacy Policy
|
|
Indeemo Limited.
|
Items listed in Section 4 of the Privacy Policy
|
User Research
|
Ireland, Germany
|
Transmission over the network at the time of service
|
Corresponds to the storage period described in the Privacy Policy
|
|
Khoros, LLC
|
Items listed in Section 4 of the Privacy Policy |
Customer Support |
United States of America, Ireland, United Kingdom, India, Japan, Australia, Bulgaria, Italy |
Transmission over the network at the time of service |
Corresponds to the storage period described in the Privacy Policy |
|
Korea Cyber Payment Limited (KCP)
VP, Hyunchul Cho
|
Payment and purchase data as described in the Privacy Policy
|
Payment processing
|
N/A
|
N/A
|
Corresponds to the storage period described in the Privacy Policy
|
|
K.G Mobilians
Ho-hwang Choi
Office: IT Support
Phone No: 1800-0678
|
Items listed in Section 4 of the Privacy Policy
|
Verification of services or content with an age limit
|
N/A
|
N/A
|
Corresponds to the storage period described in the Privacy Policy
|
|
KT Corporation
|
Payment and purchase data as described in the Privacy Policy
|
Payment processing
|
N/A
|
N/A
|
Corresponds to the storage period described in the Privacy Policy
|
|
Liveperson Inc.
Contact
|
Items listed in Section 4 of the Privacy Policy
|
Customer Support
|
Bulgaria, Israel, Dominican Republic, United States of America
|
Transmission over the network at the time of service
|
Corresponds to the storage period described in the Privacy Policy
|
|
LivePerson Netherlands B.V.
|
Items listed in Section 4 of the Privacy Policy |
Customer Support |
United Kingdom, United States of America, Israel, Bulgaria, Dominican Republic, Netherlands |
Transmission over the network at the time of service |
Corresponds to the storage period described in the Privacy Policy |
|
LiveRamp
|
Items listed in Section 4 of the Privacy Policy
|
User research and advertising and marketing assistance
|
United States of America
|
Transmission over the network at the time of service
|
Corresponds to the storage period described in the Privacy Policy
|
|
LG Uplus Corporation
|
Payment and purchase data as described in the Privacy Policy
|
Payment processing
|
N/A
|
N/A
|
Corresponds to the storage period described in the Privacy Policy
|
|
Lookback Group, Inc
|
Items listed in Section 4 of the Privacy Policy
|
User Research
|
United States of America, Ireland
|
Transmission over the network at the time of service
|
Corresponds to the storage period described in the Privacy Policy
|
|
The Rocket Science Group LLC (MailChimp)
|
Items listed in Section 4 of the Privacy Policy
|
Email marketing
|
United States of America
|
Transmission over the network at the time of service
|
Corresponds to the storage period described in the Privacy Policy
|
|
Magnite Inc.
|
Items listed in Section 4 of the Privacy Policy
|
Advertising and marketing assistance
|
United States of America
|
Transmission over the network at the time of service
|
Corresponds to the storage period described in the Privacy Policy
|
|
Microsoft Corporation
|
Items listed in Section 4 of the Privacy Policy
|
Data backup (storage), management of data
|
United States of America, Sweden, Germany.
|
Transmission over the network at the time of service
|
Corresponds to the storage period described in the Privacy Policy
|
|
mParticle, Inc.
|
Items listed in Section 4 of the Privacy Policy
|
Advertising and marketing assistance
|
United States of America, Lithuania, Argentina
|
Transmission over the network at the time of service
|
Corresponds to the storage period described in the Privacy Policy
|
|
Mux, Inc. Contact |
Items listed in Section 4 of the Privacy Policy
|
Platform error monitoring, web analytics
|
United States of America, Germany
|
Transmission over the network at the time of service
|
Corresponds to the storage period described in the Privacy Policy
|
|
Nexmo, Inc.
|
Items listed in Section 4 of the Privacy Policy |
Account authentication services |
United States of America |
Transmission over the network at the time of service |
Corresponds to the storage period described in the Privacy Policy |
|
Oracle Corporation
|
Items listed in Section 4 of the Privacy Policy
|
Advertising and marketing assistance
|
United States of America
|
Transmission over the network at the time of service
|
Corresponds to the storage period described in the Privacy Policy
|
|
Ownbackup, Inc.
|
Items listed in Section 4 of the Privacy Policy
|
Data backup (storage), management of data
|
Israel, United States of America
|
Transmission over the network at the time of service
|
Corresponds to the storage period described in the Privacy Policy
|
|
PayPal Pte. Ltd; PayPal (Europe) S.aÌ r.l. et Cie, S.C.A.
|
Items listed in Section 4 of the Privacy Policy
|
Payment processing
|
Singapore; Luxembourg.
|
Transmission over the network at the time of service
|
Corresponds to the storage period described in the Privacy Policy
|
|
Qualaroo, Inc.
|
Items listed in Section 4 of the Privacy Policy
|
User Research
|
United States of America
|
Transmission over the network at the time of service
|
Corresponds to the storage period described in the Privacy Policy
|
|
Qualtrics
|
Items listed in Section 4 of the Privacy Policy
|
User Research
|
United States of America
|
Transmission over the network at the time of service
|
Corresponds to the storage period described in the Privacy Policy
|
|
Quantum Consumer Solutions Private Limited
|
Items listed in Section 4 of the Privacy Policy |
User Research |
India |
Transmission over the network at the time of service |
Corresponds to the storage period described in the Privacy Policy |
|
Sawtooth Software, Inc.
|
Items listed in Section 4 of the Privacy Policy
|
User Research
|
United States of America
|
Transmission over the network at the time of service
|
Corresponds to the storage period described in the Privacy Policy
|
|
SK Telecom Co., Ltd
|
Payment and purchase data as described in the Privacy Policy
|
Payment processing
|
N/A
|
N/A
|
Corresponds to the storage period described in the Privacy Policy
|
|
Stripe Partners Ltd
|
Items listed in Section 4 of the Privacy Policy |
User research |
Ireland |
Transmission over the network at the time of service |
Corresponds to the storage period described in the Privacy Policy |
|
Splunk
|
Items listed in Section 4 of the Privacy Policy | Data backup (storage), management of data, data security |
Germany, United States of America
|
Transmission over the network at the time of service
|
Corresponds to the storage period described in the Privacy Policy
|
| Sutherland Global Services, Inc. Contact |
Items listed in Section 4 of the Privacy Policy |
Customer Support |
Philippines, United States of America, Ireland, India, Dubai, Canada, United Kingdom, Germany, Japan, Netherlands, Singapore, Australia |
Transmission over the network at the time of service |
Corresponds to the storage period described in the Privacy Policy |
|
TREMENDOUS
|
Items listed in Section 4 of the Privacy Policy |
User Research |
United States of America |
Transmission over the network at the time of service |
Corresponds to the storage period described in the Privacy Policy |
|
Twenty Nine Enterprises, Inc.
|
Items listed in Section 4 of the Privacy Policy
|
User research and advertising and marketing assistance
|
United States of America
|
Transmission over the network at the time of service
|
Corresponds to the storage period described in the Privacy Policy
|
|
Twilio Inc.
|
Items listed in Section 4 of the Privacy Policy
|
Advertising and marketing assistance
|
Ireland, United States of America
|
Transmission over the network at the time of service
|
Corresponds to the storage period described in the Privacy Policy
|
|
Xandr Inc.
|
Items listed in Section 4 of the Privacy Policy
|
Advertising and marketing assistance
|
United States of America
|
Transmission over the network at the time of service
|
Corresponds to the storage period described in the Privacy Policy
|
|
Zendesk, Inc.
|
Items listed in Section 4 of the Privacy Policy |
Customer Support |
Germany, Japan, Australia, Ireland, United States of America |
Transmission over the network at the time of service |
Corresponds to the storage period described in the Privacy Policy |
Data will be retained by the service provider for as long as is necessary to fulfil the purpose of the transfer and/or to fulfil the service provider's legal obligations.
② Spotify Group Companies
| Spotify group companies
Spotify AB
SPOTIFY ARGENTINA S.A.
Spotify Australia Pty Ltd
Spotify Belgium NV
Spotify Brasil Servicos De Musica LTDA
Spotify Canada Inc.
Spotify Denmark ApS
Spotify Dijital Yayıncılık Hizmetleri Anonim Şirketi
Spotify Finance Ltd
Spotify Finland OY
Spotify France SAS
Spotify GmbH
Spotify India LLP
Spotify Ireland Limited
Spotify Italy S.r.l.
Spotify Japan K.K. / スポティファイジャパン株式会社
Spotify Korea, Ltd
Spotify Ltd
Spotify Mena FZ-LLC
Spotify Netherlands BV
Spotify Singapore Pte Ltd.
Spotify South Africa Pty Ltd
Spotify Spain S.L
Spotify Taiwan Ltd
Spotify Technology S.A
Spotify USA Inc.
Spotify Yönetim Destek Hizmetleri Anonim Sirketi
Chartable Holding, Inc.
Findaway World LLC
Gimlet LLC
Gimlet Media LLC
Kinzen Limited
Parcast LLC
Ringer.com LLC
S Servicios De Música México S.A. De C.V
Sociedad Recaudadora SSMM México, S.A. De C.V
Sonantic Limited
Whooshkaa Pty Ltd
|
Items listed in Section 4 of the Privacy Policy | Assisting Spotify AB with the purposes set out in Section 5 of the Privacy Policy | Argentina, Australia, Belgium, Brazil, Canada, Denmark, Finland, France, Germany, India, Ireland, Italy, Japan, Luxembourg, Mexico, Netherlands, Singapore, South Africa, Spain, Sweden, Taiwan, Turkey, United Arab Emirates, United Kingdom, United States of America |
Transmission over the network at the time of service | Corresponds to the storage period described in the Privacy Policy |
(2) Transfer of Data to 3rd Parties
① Third Party apps you have granted access to your Spotify account
| Third Party apps you have granted access to your Spotify account (if any) as found in the link in Section 6 | Information may differ slightly depending on the third party application, but may include: information about what you are currently playing and your connected devices, email address, username, information about your playlists or library, information about your subscription details, artists you follow, your followers, recently played and top tracks | To allow third party apps located outside of Korea to process information pursuant to your grant of access | See the privacy policy of the application or device you have granted access to your Spotify account | Transmission over the network at the time of service | See the privacy policy of the application or device you have granted access to your Spotify account |
② Content providers
| Warner Music Inc. Warner Music Inc. and WEA International Inc. 1633 Broadway, New York, New York 10019 Warner Music International Services Ltd. 27 Wrights Lane London, England W8 5SW |
Account registration data | To directly send you news or promotional offers by email |
USA, UK | Transmission over the network at the time of service | Corresponds to the storage period described in this privacy policy |
| UMG Recordings Services Inc. | Account registration data | To directly send you news or promotional offers by email |
USA | Transmission over the network at the time of service | Corresponds to the storage period described in this privacy policy |
| Universal International Music, B.V. | Account registration data | To directly send you news or promotional offers by email |
Netherlands | Transmission over the network at the time of service | Corresponds to the storage period described in this privacy policy |
| Sony Music Entertainment | Account registration data | To directly send you news or promotional offers by email |
USA | Transmission over the network at the time of service | Corresponds to the storage period described in this privacy policy |