Entrustment, Transfers to 3rd Party and Overseas Transfers

Spotify takes necessary measures for your data transferred to third parties and overseas to be safely protected in accordance with the laws of the Republic of Korea and internal policies of Spotify AB and Spotify group companies.

For the purposes stated in the Privacy Policy we may entrust and transfer your data overseas to 3rd parties according to the following:

(The following list is subject to change. Users must check the website for an up-to-date list.)

You may refuse to transfer your data overseas by making an individual request to us – see the Privacy Policy - Section 11 'Contact Us'. If you refuse to transfer your data overseas, we will exclude your data from being transferred overseas. However in this case, use of our services that necessarily involves overseas transfer of your data may be restricted.

(1) Entrustment and transfer of data

① Spotify Service Providers

Entrusted Company and Contact Personal Information transferred Services provided / Purpose of transfer Country to which data will be transferred Date of the transfer and methods Personal Information Retention & Usage Period
24-7 Intouch, Inc.
Contact
Items listed in Section 4 of the Privacy Policy
Customer Support
United States of America
Transmission over the network at the time of service
Corresponds to the storage period described in the Privacy Policy
Adaptavist, Inc.
Contact
Items listed in Section 4 of the Privacy Policy
Customer Support
United Kingdom
Transmission over the network at the time of service
Corresponds to the storage period described in the Privacy Policy
Adjust GmbH
Contact
Items listed in Section 4 of the Privacy Policy
Advertising and marketing assistance
Germany, United States of America, Netherlands
Transmission over the network at the time of service
Corresponds to the storage period described in the Privacy Policy
Adyen N.V
Contact
Items listed in Section 4 of the Privacy Policy
Payment processing Netherlands Transmission over the network at the time of service Corresponds to the storage period described in the Privacy Policy
Airtable
Contact
Items listed in Section 4 of the Privacy Policy Database and analytics tooling United States of America Transmission over the network at the time of service Corresponds to the storage period described in the Privacy Policy
Akamai Technologies AB
Contact
Items listed in Section 4 of the Privacy Policy Data storage and file-sharing Sweden, United States of America Transmission over the network at the time of service Corresponds to the storage period described in the Privacy Policy
Amazon Web Services, Inc.
Contact
Items listed in Section 4 of the Privacy Policy Data storage and file-sharing United States of America, Australia, Germany, Japan, Ireland Transmission over the network at the time of service Corresponds to the storage period described in the Privacy Policy
Atlassian Corporation PLC
Contact
Items listed in Section 4 of the Privacy Policy
Customer Support
Australia
Transmission over the network at the time of service
Corresponds to the storage period described in the Privacy Policy
Backtrace I/O, Inc.
Contact
Items listed in Section 4 of the Privacy Policy
Platform error monitoring
United States of America
Transmission over the network at the time of service

Corresponds to the storage period described in the Privacy Policy

Boku
Contact
Payment and purchase data as described in the Privacy Policy Payment processing N/A N/A Corresponds to the storage period described in the Privacy Policy
Box
Contact
Items listed in Section 4 of the Privacy Policy Data storage and file-sharing United States of America Transmission over the network at the time of service Corresponds to the storage period described in the Privacy Policy
Branch Metrics, Inc.
Contact
Items listed in Section 4 of the Privacy Policy Advertising and marketing assistance, web analytics United States of America Transmission over the network at the time of service Corresponds to the storage period described in the Privacy Policy
Braze, Inc.
Contact
Items listed in Section 4 of the Privacy Policy Customer Support, Customer Engagement United States of America, Germany Transmission over the network at the time of service Corresponds to the storage period described in the Privacy Policy
Catalytic Inc.
Contact
Items listed in Section 4 of the Privacy Policy Customer Engagement United States of America Transmission over the network at the time of service Corresponds to the storage period described in the Privacy Policy
Celtra, Inc.
Contact
Items listed in Section 4 of the Privacy Policy Advertising and marketing assistance United States of America, Slovenia, Singapore Transmission over the network at the time of service Corresponds to the storage period described in the Privacy Policy
Comscore
Contact
Items listed in Section 4 of the Privacy Policy Advertising analytics Chile, India, United States of America Transmission over the network at the time of service Corresponds to the storage period described in the Privacy Policy
Concentrix Corporation
Contact
Items listed in Section 4 of the Privacy Policy
Customer Support
United States of America
Transmission over the network at the time of service
Corresponds to the storage period described in the Privacy Policy
Conductrics
Contact
Items listed in Section 4 of the Privacy Policy
Platform error monitoring, user research
United Kingdom
Transmission over the network at the time of service
Corresponds to the storage period described in the Privacy Policy
Congruity360, LLC
Contact
Items listed in Section 4 of the Privacy Policy
Assistance with legal claims
United States of America
Transmission over the network at the time of service
Corresponds to the storage period described in the Privacy Policy
Content Square, Inc.
Contact
Items listed in Section 4 of the Privacy Policy
Advertising and marketing assistance, web analytics United Kingdom
Transmission over the network at the time of service
Corresponds to the storage period described in the Privacy Policy
Digitalist Finland Oy
Contact
Items listed in Section 4 of the Privacy Policy
Advertising and marketing assistance, web analytics Ireland, United States of America, Germany Transmission over the network at the time of service
Corresponds to the storage period described in the Privacy Policy
EventRegist Co., Ltd.
Contact
Items listed in Section 4 of the Privacy Policy Customer Engagement Japan Transmission over the network at the time of service Corresponds to the storage period described in the Privacy Policy
Feedzai – Consultadoria e Inovação Tecnológica, S.A.
Contact
Items listed in Section 4 of the Privacy Policy Fraud Analytics Portugal, Belgium Transmission over the network at the time of service Corresponds to the storage period described in the Privacy Policy
Five9.com
Contact
Items listed in Section 4 of the Privacy Policy Customer Engagement United States of America Transmission over the network at the time of service Corresponds to the storage period described in the Privacy Policy
Formagrid, Inc.
Contact
Items listed in Section 4 of the Privacy Policy
User Research
United States of America
Transmission over the network at the time of service
Corresponds to the storage period described in the Privacy Policy
Foursquare Labs, Inc.
Contact
Items listed in Section 4 of the Privacy Policy Customer Engagement, Advertising and marketing assistance United States of America Transmission over the network at the time of service Corresponds to the storage period described in the Privacy Policy
FUNCTIONAL SOFTWARE, INC.
Contact
Items listed in Section 4 of the Privacy Policy
Platform error monitoring
United States of America
Transmission over the network at the time of service
Corresponds to the storage period described in the Privacy Policy
Google Cloud EMEA Ltd
Contact
Items listed in Section 4 of the Privacy Policy Data storage and file-sharing, web analytics, fraud prevention
Belgium, United States of America, Taiwan Transmission over the network at the time of service
Corresponds to the storage period described in the Privacy Policy
Google, Inc
Contact
Items listed in Section 4 of the Privacy Policy
Advertising analytics
United States of America, Ireland, Singapore, Netherlands, Finland, Chile, Denmark, Taiwan, Belgium
Transmission over the network at the time of service
Corresponds to the storage period described in the Privacy Policy
Google Ireland Limited
Contact
Items listed in Section 4 of the Privacy Policy
Advertising and marketing assistance, web analytics
United States of America, Belgium, Taiwan, Chile, Denmark, Ireland, Singapore, Finland, Netherlands
Transmission over the network at the time of service
Corresponds to the storage period described in the Privacy Policy
Google LLC - Google Cloud Platform, Google Cloud Services, and Google Suite
Contact
Items listed in Section 4 of the Privacy Policy Data backup (storage) between countries, management of data and provision of service, provision of Google Suite tools.

Belgium, United States of America, Taiwan Transmission over the network at the time of service Corresponds to the storage period described in the Privacy Policy
Google LLC - Google Adwords, Analytics
Contact
Items listed in Section 4 of the Privacy Policy Advertising and marketing assistance, web analytics Ireland Transmission over the network at the time of service Corresponds to the storage period described in the Privacy Policy
Hold360
Contact
Items listed in Section 4 of the Privacy Policy Assistance with legal claims United States of America Transmission over the network at the time of service Corresponds to the storage period described in the Privacy Policy
Hopin Ltd.
Contact
Items listed in Section 4 of the Privacy Policy Customer Engagement United Kingdom, Ireland Transmission over the network at the time of service Corresponds to the storage period described in the Privacy Policy
Hotjar Ltd.
Contact
Items listed in Section 4 of the Privacy Policy Advertising and marketing assistance, web analytics Ireland, Malta Transmission over the network at the time of service Corresponds to the storage period described in the Privacy Policy
Indeemo Limited.
Contact
Items listed in Section 4 of the Privacy Policy User Research Ireland, Germany Transmission over the network at the time of service Corresponds to the storage period described in the Privacy Policy
Khoros, LLC
Contact
Items listed in Section 4 of the Privacy Policy
Customer Support
United States of America, Ireland, United Kingdom, India, Japan, Australia, Bulgaria, Italy
Transmission over the network at the time of service
Corresponds to the storage period described in the Privacy Policy
Korea Cyber Payment Limited (KCP)
VP, Hyunchul Cho
Contact
Payment and purchase data as described in the Privacy Policy Payment processing N/A N/A Corresponds to the storage period described in the Privacy Policy
K.G Mobilians
Ho-hwang Choi
Office: IT SupportPhone No: 1800-0678
Contact
Items listed in Section 4 of the Privacy Policy Verification of services or content with an age limit N/A N/A Corresponds to the storage period described in the Privacy Policy
KT Corporation

Payment and purchase data as described in the Privacy Policy Payment processing N/A N/A Corresponds to the storage period described in the Privacy Policy
Liveperson Inc.
Contact
Items listed in Section 4 of the Privacy Policy Customer Support Bulgaria, Israel, Dominican Republic, United States of America Transmission over the network at the time of service Corresponds to the storage period described in the Privacy Policy
LivePerson Netherlands B.V.
Contact
Items listed in Section 4 of the Privacy Policy
Customer Support
United Kingdom, United States of America, Israel, Bulgaria, Dominican Republic, Netherlands
Transmission over the network at the time of service
Corresponds to the storage period described in the Privacy Policy
LiveRamp
Contact
Items listed in Section 4 of the Privacy Policy User research and advertising and marketing assistance United States of America Transmission over the network at the time of service Corresponds to the storage period described in the Privacy Policy
LG Uplus Corporation
Contact
Payment and purchase data as described in the Privacy Policy Payment processing N/A N/A Corresponds to the storage period described in the Privacy Policy
Lookback Group, Inc
Contact
Items listed in Section 4 of the Privacy Policy User Research United States of America, Ireland Transmission over the network at the time of service Corresponds to the storage period described in the Privacy Policy
The Rocket Science Group LLC (MailChimp)
Contact
Items listed in Section 4 of the Privacy Policy Email marketing United States of America Transmission over the network at the time of service Corresponds to the storage period described in the Privacy Policy
Magnite Inc.
Contact
Items listed in Section 4 of the Privacy Policy Advertising and marketing assistance United States of America Transmission over the network at the time of service Corresponds to the storage period described in the Privacy Policy
Microsoft Corporation
Contact
Items listed in Section 4 of the Privacy Policy Data backup (storage), management of data United States of America, Sweden, Germany. Transmission over the network at the time of service Corresponds to the storage period described in the Privacy Policy
mParticle, Inc.
Contact
Items listed in Section 4 of the Privacy Policy Advertising and marketing assistance United States of America, Lithuania, Argentina Transmission over the network at the time of service Corresponds to the storage period described in the Privacy Policy
Mux, Inc.

Contact
Items listed in Section 4 of the Privacy Policy Platform error monitoring, web analytics United States of America, Germany Transmission over the network at the time of service Corresponds to the storage period described in the Privacy Policy
Nexmo, Inc.
Contact
Items listed in Section 4 of the Privacy Policy
Account authentication services
United States of America
Transmission over the network at the time of service
Corresponds to the storage period described in the Privacy Policy
Oracle Corporation
Contact
Items listed in Section 4 of the Privacy Policy Advertising and marketing assistance United States of America Transmission over the network at the time of service Corresponds to the storage period described in the Privacy Policy
Ownbackup, Inc.
Contact
Items listed in Section 4 of the Privacy Policy Data backup (storage), management of data Israel, United States of America Transmission over the network at the time of service Corresponds to the storage period described in the Privacy Policy
PayPal Pte. Ltd; PayPal (Europe) S.aÌ r.l. et Cie, S.C.A.
Contact
Items listed in Section 4 of the Privacy Policy Payment processing Singapore; Luxembourg. Transmission over the network at the time of service Corresponds to the storage period described in the Privacy Policy
Qualaroo, Inc.
Contact
Items listed in Section 4 of the Privacy Policy User Research United States of America Transmission over the network at the time of service Corresponds to the storage period described in the Privacy Policy
Qualtrics
Contact
Items listed in Section 4 of the Privacy Policy User Research United States of America Transmission over the network at the time of service Corresponds to the storage period described in the Privacy Policy
Quantum Consumer Solutions Private Limited
Contact
Items listed in Section 4 of the Privacy Policy
User Research
India
Transmission over the network at the time of service
Corresponds to the storage period described in the Privacy Policy
Sawtooth Software, Inc.
Contact
Items listed in Section 4 of the Privacy Policy
User Research United States of America Transmission over the network at the time of service Corresponds to the storage period described in the Privacy Policy
SK Telecom Co., Ltd
Contact
Payment and purchase data as described in the Privacy Policy
Payment processing
N/A N/A Corresponds to the storage period described in the Privacy Policy
Stripe Partners Ltd
Contact
Items listed in Section 4 of the Privacy Policy
User research
Ireland
Transmission over the network at the time of service
Corresponds to the storage period described in the Privacy Policy
Splunk
Contact
Items listed in Section 4 of the Privacy Policy Data backup (storage), management of data, data security
Germany, United States of America
Transmission over the network at the time of service
Corresponds to the storage period described in the Privacy Policy
Sutherland Global Services, Inc.

Contact
Items listed in Section 4 of the Privacy Policy
Customer Support
Philippines, United States of America, Ireland, India, Dubai, Canada, United Kingdom, Germany, Japan, Netherlands, Singapore, Australia
Transmission over the network at the time of service
Corresponds to the storage period described in the Privacy Policy
TREMENDOUS
Contact
Items listed in Section 4 of the Privacy Policy
User Research
United States of America
Transmission over the network at the time of service
Corresponds to the storage period described in the Privacy Policy
Twenty Nine Enterprises, Inc.
Contact
Items listed in Section 4 of the Privacy Policy User research and advertising and marketing assistance United States of America Transmission over the network at the time of service Corresponds to the storage period described in the Privacy Policy
Twilio Inc.
Contact
Items listed in Section 4 of the Privacy Policy Advertising and marketing assistance Ireland, United States of America Transmission over the network at the time of service Corresponds to the storage period described in the Privacy Policy
Xandr Inc.
Contact
Items listed in Section 4 of the Privacy Policy Advertising and marketing assistance United States of America Transmission over the network at the time of service Corresponds to the storage period described in the Privacy Policy
Zendesk, Inc.
Contact
Items listed in Section 4 of the Privacy Policy
Customer Support
Germany, Japan, Australia, Ireland, United States of America
Transmission over the network at the time of service
Corresponds to the storage period described in the Privacy Policy

Data will be retained by the service provider for as long as is necessary to fulfil the purpose of the transfer and/or to fulfil the service provider's legal obligations.

② Spotify Group Companies

Spotify group companies

Spotify AB
SPOTIFY ARGENTINA S.A.
Spotify Australia Pty Ltd
Spotify Belgium NV
Spotify Brasil Servicos De Musica LTDA
Spotify Canada Inc.
Spotify Denmark ApS
Spotify Dijital Yayıncılık Hizmetleri Anonim Şirketi
Spotify Finance Ltd
Spotify Finland OY
Spotify France SAS
Spotify GmbH
Spotify India LLP
Spotify Ireland Limited
Spotify Italy S.r.l.
Spotify Japan K.K. / スポティファイジャパン株式会社
Spotify Korea, Ltd
Spotify Ltd
Spotify Mena FZ-LLC
Spotify Netherlands BV
Spotify Singapore Pte Ltd.
Spotify South Africa Pty Ltd
Spotify Spain S.L
Spotify Taiwan Ltd
Spotify Technology S.A
Spotify USA Inc.
Spotify Yönetim Destek Hizmetleri Anonim Sirketi
Chartable Holding, Inc.
Findaway World LLC
Gimlet LLC
Gimlet Media LLC
Kinzen Limited
Parcast LLC
Ringer.com LLC
S Servicios De Música México S.A. De C.V
Sociedad Recaudadora SSMM México, S.A. De C.V
Sonantic Limited
Whooshkaa Pty Ltd
Items listed in Section 4 of the Privacy Policy Assisting Spotify AB with the purposes set out in Section 5 of the Privacy Policy Argentina, Australia, Belgium, Brazil, Canada, Denmark, Finland, France, Germany, India, Ireland, Italy, Japan, Luxembourg, Mexico, Netherlands, Singapore, South Africa, Spain, Sweden, Taiwan, Turkey, United Arab Emirates, United Kingdom, United States of America
Transmission over the network at the time of service Corresponds to the storage period described in the Privacy Policy

(2) Transfer of Data to 3rd Parties

① Third Party apps you have granted access to your Spotify account

Third Party apps you have granted access to your Spotify account (if any) as found in the link in Section 6 Information may differ slightly depending on the third party application, but may include: information about what you are currently playing and your connected devices, email address, username, information about your playlists or library, information about your subscription details, artists you follow, your followers, recently played and top tracks To allow third party apps located outside of Korea to process information pursuant to your grant of access See the privacy policy of the application or device you have granted access to your Spotify account Transmission over the network at the time of service See the privacy policy of the application or device you have granted access to your Spotify account

② Content providers

Warner Music Inc.


Warner Music Inc. and WEA International Inc. 1633 Broadway, New York, New York 10019

Warner Music International Services Ltd.


27 Wrights Lane


London, England W8 5SW
Account registration data To directly send you news or promotional offers by email

USA, UK Transmission over the network at the time of service Corresponds to the storage period described in this privacy policy
UMG Recordings Services Inc. Account registration data To directly send you news or promotional offers by email

USA Transmission over the network at the time of service Corresponds to the storage period described in this privacy policy
Universal International Music, B.V. Account registration data To directly send you news or promotional offers by email

Netherlands Transmission over the network at the time of service Corresponds to the storage period described in this privacy policy
Sony Music Entertainment Account registration data To directly send you news or promotional offers by email

USA Transmission over the network at the time of service Corresponds to the storage period described in this privacy policy