Privacy Policy

Last updated: March 10, 2023

Controller Responsible for Data Processing

The controller responsible for the processing of personal data on this website according to the GDPR is:

Information We Collect

When you use this website and its related services, we collect the following types of information:

• Account information from Spotify (with your permission)
• Playlist data from Spotify (with your permission)
• Apple Music authentication tokens (stored only on your device)
• Technical information such as your IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform
• Usage data including page views, navigation paths, and interaction with the service

Legal Basis for Processing

We process your data based on the following legal grounds:

• Your consent (Art. 6(1)(a) GDPR) for processing Spotify account and playlist data
• Performance of a contract (Art. 6(1)(b) GDPR) to provide our service to you
• Our legitimate interests (Art. 6(1)(f) GDPR) to improve our service and ensure its functionality

How We Use Your Information

We use the information we collect to:

• Enable playlist conversion between Spotify and Apple Music
• Improve our service functionality
• Troubleshoot technical issues
• Comply with legal obligations

Data Transfers to Third Countries

Some of our service providers may be located outside the European Economic Area (EEA). When transferring your data outside the EEA, we ensure appropriate safeguards are in place through standard contractual clauses or other valid transfer mechanisms.

Cookies and Tracking

Our website uses essential cookies that are necessary for the functionality of our service. We do not use tracking cookies or third-party analytics services without your explicit consent.

Data Retention

We only store the minimum data necessary for our service to function. Your authentication tokens and playlist data are not permanently stored on our servers. Technical data is automatically deleted after 7 days.

Your Rights

Under the GDPR, you have the following rights:

• Right to access your personal data (Art. 15 GDPR)
• Right to rectification of inaccurate personal data (Art. 16 GDPR)
• Right to erasure of your personal data (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to withdraw consent at any time (Art. 7(3) GDPR)

To exercise these rights, please contact us using the details provided above.

Data Protection Authority

You have the right to lodge a complaint with a supervisory authority. You can contact the data protection authority responsible for your place of residence, workplace, or the place of the alleged infringement.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.