At Spotify, we want to give you the best possible experience. To do this we process some personal data about you to understand your listening habits and to develop the best service for you and all of our customers. But, be assured, your privacy and the security of your personal data are very important to us.
It is very important to us that you understand what personal data we collect about you, how we collect it, and why it’s necessary.
We collect your personal data in the following ways:
We collect and use your personal data for the following reasons:
We are committed to protecting our users’ personal data. We implement appropriate technical and organizational measures to help protect the security of your personal data; however, please note that no system is ever completely secure. We have implemented various policies including pseudonymization, encryption, access, and retention policies to guard against unauthorised access and unnecessary retention of personal data in our systems.
Your password protects your user account, so we encourage you to use a unique and strong password, limit access to your computer and browser, and log out after having used the Spotify Service.
Spotify shares your personal data globally with other companies in the Spotify Group.
Spotify may also subcontract processing to, or share your personal data with, third parties located in countries other than your home country. Your personal data may therefore be subject to privacy laws that are different from those in your country of residence.
Personal data collected within the European Union (“EU”) and Switzerland may, for example, be transferred to and processed by third parties located in a country outside of the EU and Switzerland. In such instances Spotify shall ensure that the transfer of your personal data is carried out in accordance with applicable privacy laws and in particular that appropriate contractual, technical, and organizational measures are in place such as the Standard Contractual Clauses approved by the EU Commission.
You may be aware that a new European Union law, called the General Data Protection Regulation or "GDPR" gives certain rights to individuals in relation to their personal data. Accordingly, we have implemented additional transparency and access controls in our Privacy Center and Privacy Settings to help users take advantage of those rights. As available and except as limited under applicable law, individuals have the rights described below.
The right to be informed of and request access to the personal data we process about you.
The right to request that we amend or update your personal data where it is inaccurate or incomplete.
The right to request that we temporarily or permanently stop processing all or some of your personal data.
The right to object to us processing your personal data where we no longer have a legitimate or legal need to process it.
The right to object to your personal data being processed for direct marketing purposes.
The right to not be subject to a decision based solely on automated decision making, including profiling, where the decision would have a legal effect on you or produce a similarly significant effect.
The right to request a copy of your personal data in a machine readable format and the right to transmit that personal data for use in another party’s service.
The right to request that we delete your personal data.
If you have further questions, please refer to the FAQs section of this Privacy Center or reach out to us by using this contact us form
You can access the following controls via your Account Settings:
For more information about the personal data you can control from your Account Settings page, see data rights and privacy settings.
At Spotify we are dedicated to providing you with the best music experience. Below are the policies that we apply when providing you with this service.