Privacy Policy

Site Publisher Information

Dropzik Numérique Inc., incorporated in Canada, headquartered at 102.2-1395 RUE Fleury E, Montreal, Quebec, H2C1R7, Canada.

Introduction

This Privacy Policy pertains to Dropzik Numérique Inc. and outlines our practices regarding the processing of personal data within the scope of digital music distribution.

We prioritize data security, privacy, and the protection of associated rights. Please take the time to read this document.

By visiting Dropzik's platform, providing your personal data to Dropzik, or entering into a contract with Dropzik, you expressly acknowledge having read and agreed to comply with this Privacy Policy.

The purpose of this policy is to inform users of Dropzik's platform ("Users," "you," and "your") about the use of their personal data, which pertains solely to individual users (contact details, identity) and not to the labels they may represent. This policy also defines user rights regarding this data and potential recipients.

Management of Personal Data by Dropzik

Dropzik collects, stores, and uses your personal data when you use the website.

a) Purpose of Data Collection by Dropzik

Dropzik collects your personal data for the following purposes:

Contacting you regarding contractual obligations between the label you represent and Dropzik.
Processing various payment transactions.
Sending billing notices.
Technical support.
Sending Dropzik updates and newsletters.
Creating and administering your personal account.
Collecting names of individuals involved in recordings for accurate distribution on various platforms.
Enabling you to connect to your Google account and manage video uploads to your label's YouTube channel via Dropzik through the integrated Google API.
Storing Google authentication codes for the first-time connection via the Google API on Dropzik.
Updating Dropzik’s internal database of partner labels’ contacts.
Responding to your questions, information requests, or managing and improving customer service.
Managing and administering your data in compliance with applicable data protection regulations.

b) Data Collected by Dropzik

"Personal data" refers to any information that directly (e.g., name, email address) or indirectly (e.g., Google authentication token) identifies you. We collect personal data directly from you (e.g., when you create a Dropzik account) or when you log in to your Google account via the Google API within Dropzik.

The types of data we collect and use include:

Identification and contact details such as your name, email, last login date, and encrypted login credentials.
Names of all individuals involved in recordings distributed by Dropzik.
Cookies for automatic authentication/reconnection on Dropzik.
Google authentication tokens for managing video uploads directly to the associated YouTube channel.

c) Storage of Personal Data

Personal data is stored by Dropzik:

Throughout the duration of the contract between Dropzik and the label you represent.
During any legal proceedings where such data is necessary to defend Dropzik’s rights and interests.
Personal data will be permanently deleted from our databases once no longer needed, except for identifiers kept for technical archiving of activities performed on a page. Google authentication tokens are not stored and are only used to authorize YouTube access within Dropzik upon your first login.
Personal data can be accessed, modified, or deleted upon your request or by Dropzik staff in the event of changes to your status or contact details.

d) Recipients of Your Personal Data

Your data is accessible exclusively to authorized individuals as necessary for the purposes stated above. We ensure that access complies with the security measures we have implemented.

Your personal data is intended solely for use by Dropzik employees and its subsidiaries, except for Google authentication tokens, which are neither stored nor accessible by employees.

Your data may be disclosed to a third party only in cases of corporate restructuring (e.g., full or partial sale of assets, merger, acquisition) to ensure the continuity of Dropzik’s services. Dropzik also reserves the right to disclose your data to state agencies (e.g., tax authorities) or a judicial body when required by law.

e) Data Retention Period

We retain personal data only as long as necessary to fulfill the contract, achieve the intended purpose, respond to your needs, or meet legal obligations. Retention criteria include:

Duration of the contract with you.
Regulatory requirements (accounting, archiving obligations).
Duration of consent for specific uses.
Up to 6 months for cookies or 13 months in specific cases.

Once no longer needed, data will be deleted or anonymized to ensure you can no longer be identified.

f) Hosting, Storage, and Data Transfer Outside of Canada

Dropzik’s platform and personal data are hosted on A2 Hosting, AWS (Amazon Web Services), and Google Cloud infrastructure, with servers potentially located outside of Canada.

Given our global presence, some data may be collected, transferred, or stored outside of Canada.

Data protection and security standards vary by region and may not provide the same level of protection as your country of residence. Nonetheless, Dropzik and its affiliates take adequate steps to protect your data transfers. Measures include the use of approved data methods by regulatory bodies and written agreements with contractors to ensure data is processed per legal standards.

g) Data Security and Confidentiality

Per applicable data protection laws, Dropzik has implemented technical and organizational measures to safeguard the confidentiality and security of personal data collected. These measures include:

Physical and logical protection of IT systems, regularly assessed and enhanced.
Regular backups of Dropzik’s information systems.
Limited data access to only those employees whose roles require it, with contractual confidentiality obligations.
Service providers and contractors bound by written commitments to implement adequate security measures.
The Dropzik website is protected by SSL encryption, securing data transmission over the internet.

Please note that while Dropzik takes steps to secure your data, there are inherent risks associated with the use and operation of the Internet.

Data Controller

Dropzik Numérique Inc., based at 102.2-1395 RUE Fleury E, Montreal, Quebec, H2C1R7, Canada, is the data controller for email addresses of personnel working with partner labels collected as part of the service.

Subcontracting

Dropzik also acts as a data processor for the data of authors, composers, and contributors to recordings distributed via Dropzik, collected as part of the service.

Your Rights

Right to Information: Obtain clear, transparent information on how your data is used.
Right of Access: Request a copy of personal data we hold.
Right to Rectification: Correct inaccurate, outdated, or incomplete data.
Right to Erasure: Delete your data.
Right to Object to Direct Marketing: Opt-out of marketing emails.
Right to Restriction of Use: Request restricted use of your data for specific operations.
Right to Data Portability: Receive your data in a format suitable for transfer to another database.

To exercise these rights, contact us at [email protected] or by mail at:

Dropzik Numérique Inc. 102.2-1395 RUE Fleury E Montreal, Quebec, H2C1R7, Canada