Privacy Policy

1. Introduction

PlaylistsForYou B.V. ("we", "us", "our"), registered in Utrecht, the Netherlands (Chamber of Commerce: 93964123), respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and share your personal information when you use our website and services, in accordance with the EU General Data Protection Regulation (GDPR) and applicable Dutch law.

2. Controller

The data controller is PlaylistsForYou B.V., St. Jacobsstraat 319, 3511BP Utrecht, the Netherlands. For data protection inquiries, contact us at [email protected].

3. Information we collect

We collect several types of information:

• Account and contact information: name, email address, and any information you provide when creating a campaign, signing up, or contacting us.
• Payment information: payment details are processed by Stripe; we do not store full card details on our servers. Stripe acts as a data processor under a DPA.
• Usage data: pages visited, features used, device type, browser, IP address, and analytics data (see section 4 below).
• Communications: records of communications between you and our support or operations teams.
• Spotify data: playlist IDs and track links you provide when creating a campaign. We do not access your Spotify account; we only process the identifiers you share with us.

4. Cookies and tracking technologies

We use cookies and similar technologies on our website. Cookies are small text files stored on your device. We categorise our cookies as follows:

4.1 Strictly necessary cookies

These are required for the website to function properly. They cannot be turned off. They include session cookies, CSRF protection, and your cookie consent preferences.

4.2 Analytics cookies

These help us understand how visitors interact with our website. We use Google Analytics 4 (GA4) via Google Tag Manager. Analytics cookies are only set after you give explicit consent.

Google Analytics data is processed under the Google Analytics EU-US Data Privacy Framework. We have configured GA4 to anonymise IP addresses and to use data solely for statistical purposes. For more information, see Google's Privacy Policy.

4.3 Marketing cookies

These are used for targeted advertising, remarketing, and conversion tracking. Marketing cookies are only set after you give explicit consent. We use:

• Google Ads - conversion tracking and remarketing (cookies: _gcl_au, IDE, etc.)
• Meta Pixel - ad performance measurement on Facebook and Instagram
• TikTok Pixel - ad performance measurement on TikTok

4.4 Managing your preferences

You can change or withdraw your consent at any time by clicking "Cookie settings" in the website footer. You can also manage cookies through your browser settings. Note that disabling cookies may affect website functionality.

5. Legal basis for processing (GDPR)

We process your personal data on the following legal bases:

• Consent (Art. 6(1)(a)) - for analytics and marketing cookies.
• Contract performance (Art. 6(1)(b)) - to deliver services you have signed up for.
• Legitimate interest (Art. 6(1)(f)) - for fraud prevention, security, and improving our services.
• Legal obligation (Art. 6(1)(c)) - for tax, accounting, and regulatory compliance.

6. Data retention

We retain personal data only as long as necessary for the purposes described in this policy, or as required by law. Specific retention periods:

• Account data: retained for the duration of your account plus 30 days after deletion request.
• Analytics data: retained for 14 months, then automatically deleted.
• Marketing data: retained for 13 months from last interaction.
• Campaign records: retained for 7 years for tax and legal compliance.

7. Third-party services

We share data with the following processors, each under a Data Processing Agreement:

When data is transferred outside the EEA, we rely on Standard Contractual Clauses (SCCs) or the EU-US Data Privacy Framework to ensure adequate protection.

8. Your rights (GDPR)

Under the GDPR, you have the following rights:

• Right of access (Art. 15) - request a copy of your personal data.
• Right to rectification (Art. 16) - correct inaccurate data.
• Right to erasure (Art. 17) - request deletion of your data ("right to be forgotten").
• Right to restrict processing (Art. 18) - limit how we use your data.
• Right to data portability (Art. 20) - receive your data in a machine-readable format.
• Right to object (Art. 21) - object to processing based on legitimate interest.
• Right to withdraw consent (Art. 7(3)) - withdraw consent for analytics or marketing at any time via the cookie banner or by emailing us.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority.

9. Security

We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit (TLS), access controls, and regular security assessments. While we take care to secure your information, no internet transmission can be guaranteed to be 100% secure.

10. Children

Our services are not directed at children under 16. We do not knowingly collect personal data from children under 16. If we discover that we have collected such data, we will delete it promptly.

11. International transfers

Some of our processors operate outside the EEA. When personal data is transferred outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses and adherence to the EU-US Data Privacy Framework.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised policy on our website with an updated "Last updated" date. If material changes are made, we will notify you via email or a prominent notice on our website. Continued use after changes indicates acceptance.

13. Contact

For questions about this policy, to exercise your data rights, or to submit a complaint, contact us:

PlaylistsForYou B.V.
St. Jacobsstraat 319, 3511BP Utrecht, the Netherlands
Email: [email protected]

Return to homepage