1. Introduction
Gallery Play Media BV (“Gallery Play”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, share and protect personal data when:

• you visit or use our website www.galleryplay.com,

• you use our music services or products,

• you contact us directly (e.g. by email, phone, or contact form).

We process personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Dutch law.

2. What data we collect
Depending on how you interact with us, we may collect the following categories of personal data:

• Contact details (name, email address, telephone number, business address).

• Company information (business name, VAT number, billing details).

• Account information (login credentials, if you have a client account).

• Technical information (IP address, browser type, device type, usage statistics collected via anonymized analytics).

• Communication content (messages you send to us by email, contact forms or otherwise).

We do not intentionally collect sensitive personal data (such as health information, religious or political beliefs).

3. How we use your data
We process your personal data for the following purposes:

• Contract performance: to provide our services, process payments, and manage customer relationships.

• Communication: to respond to your questions, support requests, or feedback.

• Improvement: to maintain, secure, and improve our services and website (based on anonymized analytics).

• Legal obligations: to comply with tax, accounting and copyright reporting requirements.

• Marketing (optional): if you have opted in, we may send you updates about our services. You can unsubscribe at any time.
   

4. Cookies
Our website uses only functional cookies (to ensure the site works properly) and anonymized analytical cookies (to understand how the site is used).
We do not use tracking cookies or personalized advertising cookies.
See our [Cookie Notice] for details.

5. Sharing of data
We only share your personal data with trusted third parties when necessary for the purposes above, including:

• IT and hosting providers (to operate our website and systems).

• Payment service providers (to process invoices and transactions).

• Music rights organisations (Buma/Stemra, Sena) where reporting is required by law.

• Professional advisors (e.g. accountants, legal advisors).

We do not sell or trade your personal data.

6. Data storage & security
We store your data only as long as necessary for the purposes stated above, or as required by law (e.g. 7 years for financial records under Dutch tax law).
We take appropriate technical and organizational measures to protect your personal data from unauthorized access, misuse, loss or disclosure.

7. Your rights
Under GDPR, you have the following rights:

• Access: request a copy of your personal data.

• Correction: request correction of inaccurate or incomplete data.

• Erasure: request deletion of your personal data, where legally possible.

• Restriction: request limitation of certain processing.

• Objection: object to processing based on legitimate interests or to direct marketing.

• Portability: request transfer of your personal data to another provider.

To exercise these rights, please contact us at privacy@galleryplay.com. We may request proof of identity before processing your request.

8. International transfers
In principle, your data is processed within the European Union (EU). If personal data is transferred outside the EU, we ensure appropriate safeguards (such as EU Standard Contractual Clauses) are in place.

9. Updates to this policy
We may update this Privacy Policy from time to time. Changes will be published on this page with a new “last updated” date.

10. Contact us
If you have any questions about this Privacy Policy or how we handle your data, please contact us at:
Gallery Play Media BV
Email: privacy@galleryplay.com
Website: www.galleryplay.com

If you believe we have not handled your data correctly, you also have the right to lodge a complaint with the Autoriteit Persoonsgegevens (the Dutch Data Protection Authority).