Additional California Privacy Disclosures
Effective as of July 1, 2020
Beginning January 1, 2020, the California Consumer Privacy Act ("CCPA”) gives California residents certain rights with respect to the processing of personal data (known as “personal information”under the CCPA).
Personal Information Collected and Processed
Requests to Exercise Your Rights
RIGHT TO KNOW REQUEST - Under the CCPA, you have a right to request information about our collection, use, and disclosure of your personal information over the prior 12 months, and ask that we provide you with the following information:
- Categories of and specific pieces of personal information we have collected about you.
- Categories of sources from which we collect personal information.
- Purposes for collecting personal information.
- Categories of third parties with which we share personal information.
- Categories of personal information disclosed about you for a business purpose
- If applicable, categories of personal information sold about you and the categories of third parties to which the personal information was sold, by category or categories of personal information for each third party to which the personal information was sold.
To make a verifiable request for information about the personal information we have collected about you, please access your Privacy Settings in your account profile to make a request by using the ‘Contact Us’ form on the Privacy Center and select the option “I want to make a download a copy of my data” or emailing us at email@example.com.
RIGHT TO DELETE REQUEST - You also have a right to request that we delete personal information, subject to certain exceptions. You may exercise your right to delete by using the ‘Contact Us’ form on the Privacy Center and selecting “I want to permanently delete my data” or emailing us at firstname.lastname@example.org.
HOUSEHOLD REQUESTS - We currently do not collect household data. If all the members of a household makes a Right to Know or Right to Delete request, we will respond as if the requests are individual requests.
REQUESTS, GENERALLY - Please note, if you do not have a Spotify account we will not have enough information about you to verify your Right to Know and Right to Delete requests, as we do not keep sufficient information necessary to reidentify and link you to a prior visit to the Spotify Service where data may have been collected. As such, we will be unable to verify and honor your requests. You may make a verifiable consumer request related to your personal information twice per 12-month period. We will not discriminate against you for exercising any of your rights under the CCPA.
REQUESTS MADE THROUGH AGENTS - You may designate, in writing or through a power of attorney, an authorized agent to make requests on your behalf to exercise your rights. Before accepting such a request from an agent, we will require the agent to provide proof you have authorized it to act on your behalf, and we may need you to verify your identity directly with us.
Disclosures of Personal Information for a Business Purpose
- User Data
- Usage Data
- Plan Verification Data
- Payment and Purchase Data
- Contests, Surveys and Sweepstakes Data
Sale of Personal Information
We do not sell personal information. We have taken substantial steps to identify and remediate any data sharing arrangements that could constitute a “sale” under the CCPA.
We will continue to update our business practices as regulatory guidance becomes available and provides clarity on what constitutes a sale transaction, particularly in the advertising ecosystem.