Show contents
1. PERSONAL DATA CONTROLLER
MELODEEX LTD
MELODEEX LTD is the controller of personal data under the legislation of Georgia and is responsible for its processing.
2. WHAT DATA WE COLLECT
Data provided by the user on registration: first and last name; email address; country of residence; payment details (IBAN, BIC, bank) for the payment of remuneration; tax identification number (TIN, NIP or equivalent) where necessary.
Data collected automatically when the website is used: IP address and geolocation; browser and operating system type; the pages and sections of the website you visit; the date and time of visits; cookies and similar technologies.
Content data: metadata of uploaded musical works (title, performers, ISRC, UPC, artwork); streaming and revenue statistics from the platforms.
Communication data: the content of messages to the support team; email correspondence history.
3. PURPOSES OF PERSONAL DATA PROCESSING
Performance of the agreement for agency services for the distribution of music content.
Identification of the user and management of their account in the personal dashboard.
Financial settlements and payment of remuneration.
Transfer of data to digital platforms (Spotify, Apple Music, Yandex Music and others) for the purposes of content distribution.
Compliance with the tax and financial legislation of Georgia.
Informing the user about changes to the terms of the service, technical notices and MELODEEX news (with the option to unsubscribe).
Ensuring the security of the service and preventing fraud.
Improving the quality of the service based on usage analysis.
4. LEGAL BASES FOR PROCESSING
Performance of a contract — processing is necessary to fulfil the obligations under the Public Offer Agreement accepted by the user.
Legitimate interest — ensuring security, preventing fraud, improving the service.
Consent — for newsletters and marketing communications. Consent may be withdrawn at any time.
Legal obligation — compliance with the legislation of Georgia, including tax and financial legislation.
5. DISCLOSURE OF DATA TO THIRD PARTIES
MELODEEX LTD discloses personal data to third parties only in the following cases:
Digital platforms (Spotify, Apple Music, Yandex Music, VK Music, YouTube Music, Zvuk, Deezer and others) — for the registration and distribution of content. The processing of data by the platforms is governed by their own privacy policies.
Payment systems and banks — for the payment of remuneration.
Public authorities — at the lawful request of the competent authorities of Georgia or other states in accordance with applicable law.
Affiliates of MELODEEX LTD — to the extent necessary to provide the services.
MELODEEX LTD does not sell personal data to third parties and does not disclose it for advertising purposes without the user's express consent.
When data is transferred outside Georgia, MELODEEX LTD ensures an adequate level of protection in accordance with the requirements of Georgian legislation.
6. DATA RETENTION PERIODS
Personal data is kept for the entire term of the agreement with the user and for 5 (five) years after its termination in order to fulfil tax and financial obligations.
Data collected on the basis of consent is kept until the consent is withdrawn.
Technical logs and security data are kept for no longer than 1 (one) year.
When the retention period expires, the data is irreversibly destroyed or anonymised.
7. USER RIGHTS
In accordance with the Law of Georgia on Personal Data Protection, the user has the following rights:
Access — to obtain information about which personal data is processed, for what purposes and on what basis.
Rectification — to require the correction of inaccurate or incomplete data.
Erasure ("right to be forgotten") — to require the deletion of data if it is no longer needed for the purposes of processing or if consent has been withdrawn.
Restriction of processing — to require the suspension of data processing in the cases established by law.
Portability — to receive their data in a machine-readable format.
Objection — to object to processing carried out on the basis of legitimate interest.
Withdrawal of consent — to withdraw consent to data processing at any time without affecting the lawfulness of processing carried out before the withdrawal.
To exercise these rights, send a request to in@melodeex.com. A reply is provided within 10 business days.
8. COOKIES
The melodeex.com website uses cookies — small text files stored by the browser — to make the website work, for authentication and for usage analysis.
Types of cookies used: necessary (required for the service to work); functional (remembering user settings); analytical (collecting anonymised statistics).
The user may disable cookies in the browser settings; however, this may affect the functionality of the website.
9. DATA SECURITY
MELODEEX LTD applies technical and organisational measures to protect personal data: encryption of data in transit (TLS/SSL); restricted employee access to personal data; regular security audits.
In the event of a personal data breach likely to result in a high risk to the rights of users, MELODEEX LTD will notify the affected users as soon as possible in accordance with the requirements of the legislation of Georgia.
10. MINORS
The MELODEEX LTD service is not intended for persons under the age of 16. MELODEEX LTD does not knowingly collect personal data of minors. If such data is discovered, it will be deleted without delay.
11. CHANGES TO THE POLICY
MELODEEX LTD may amend this Policy unilaterally. The new version is published on melodeex.com.
Continued use of the service after the changes are published means acceptance of the updated Policy.
In the event of material changes, users will be notified by email at least 7 days before the changes take effect.
12. CONTACT INFORMATION
For questions about the processing of personal data and to exercise your rights, please contact:
Supervisory authority for personal data protection in Georgia: Personal Data Protection Service of Georgia (personaldata.ge).