In accordance with data protection regulations (General Data Protection Regulation No. 2016/679 as of 27 April 2016 and Act No. 78/17 as of 6 January 1978 as amended), Xandrie collects your personal data on the basis of:

• your consent where it is required (particularly in terms of commercial development);
• a contract that you have signed with Xandrie (for example, a subscription to one of our music streaming services);
• or when it is justified by legitimate interests

Personal data is stored for the time necessary for the purposes for which they are collected.

• For subscribers to Xandrie’s products and services, personal data is stored for the length of the contract, in addition to periods of applicable legal requirements;
• For potential customers, personal data is stored for 3 years after the last time of contact;
• For web-browsers, personal data that is collected through cookies is stored for a maximum of 13 months from the time it is collected

Any collected personal, as well as personal data which is later obtained by Xandrie, is used only by Xandrie. As such, only authorised personnel have access to this data.

The internal recipients of your data are:

• Xandrie marketing department;
• Xandrie data analysts;
• Xandrie customer services

The internal recipients of your data are:

• Xandrie's subcontractors (technical service providers in charge of data hosting or IT developments, payment service providers, etc.);
• Partners and third parties with whom you have authorized data sharing

Xandrie is not responsible for the processing of your personal data that you have authorised from third parties and that is not shared with Xandrie, such as, for example, social networks. It is your responsibility to refer to the data protection policies of these third parties to check the conditions of the processing operations carried out, or to exercise your rights regarding these operations.

Personal data collected by Xandrie is used determinately, explicitly and legitimately.

On the basis of a contract signed with you or with pre-contractual measures taken at your request, Xandrie carries out the following processing operations:

• Subscriptions to Xandrie products and services;
• Management of your commercial and contractual relations with Xandrie in the context of your subscriptions
• Invoices and payments

On the basis of a legitimate interest pursued by Xandrie, the following processing operations will be carried out so as to:

• improve our products and services according to problems reported by you;
• tailor the service towards your tastes as part of your subscription, according to your preferences;
• manage any complaints

On the basis of a legitimate interest pursued by Xandrie, or your consent where it is required, Xandrie uses processing for the following:

• Commercial development
• Information on the products and services offered by Xandrie
• Audience analytics (statistics and audience analysis)

With regards to the risks that data processing presents, Xandrie takes appropriate measures to maintain security and confidentiality of your personal data, in particular to prevent data from being destroyed, distorted or accessed by unauthorised third parties.

Xandrie chooses subcontractors and service providers with high security standards.

You hold the following rights over your personal data:a right of access, a right of rectification, a right of deletion, a right of data portability, a right of opposition for reasons relating to your particular situation, a right of opposition to prospecting at any time, a right to withdraw your consent, a right to limitation, a right to complain to the CNIL (Commision Nationale de l’Informatique et des Libertés) if Xandrie's response to your request for the exercise of your right has not been satisfactory, a right to define guidelines for storage, erasure and communication of your data after you have died to a trusted third party designated by decree.

Xandrie would like to inform you that modifying or failing to provide your data may have consequences on the processing of certain requests regarding contractual relations, and that any requests regarding exercising your rights will be kept for follow-up purposes. Any requests must include your full name and address and must be emailed to support@qobuz.com, or posted to XANDRIE SA Legal Department, 45 rue de Delizy, 93692 Pantin CEDEX, FRANCE.

Xandrie analyses data related to the subscriber's use of the service in order to tailor the service to the subscriber (modification of the layout or appearance of the pages on which he or she navigates).

The data that Xandrie collects about you is potentially transmitted outside of the European Union. For example, Xandrie uses a service provider located outside of the European Union to host your data.

To secure these transfers, Xandrie can, for example, set up standard clauses defined by the European Commission to regulate these flows.