Privacy Policy

PRIVACY POLICY Last updated: September 8, 2026 1. DATA CONTROLLER DIBSTEUR S.à.r.l, a company incorporated under Luxembourg law, with its registered office at 5 Pl. de la Gare, L-1616 Luxembourg, registered with the Luxembourg Trade and Companies Register under number B254823, is the controller of personal data collected through the Dibsteur website and services. If you have any questions about your personal data or wish to exercise your rights, you can write to us at [email protected] or at the postal address above. 2. DATA WE PROCESS We may process the data you provide when you register or use our services: identity and contact details, login information, billing and payment data, information about your music projects, communications with our team, and technical browsing data. Some data is necessary to create and operate your account. Where providing this data is mandatory, failure to do so may prevent us from providing the relevant service. 3. PURPOSES AND LEGAL BASES We process your data to: - create, manage and secure your account and provide the services you request, on the basis of performance of the contract; - process payments, issue invoices and comply with our accounting, tax and legal obligations; - respond to your requests and provide support, on the basis of our legitimate interests or performance of the contract; - prevent fraud, ensure security and defend our rights, on the basis of our legitimate interests; - send you marketing communications where permitted by law, on the basis of your consent where required. You can unsubscribe at any time using the link included in each communication. 4. RECIPIENTS AND TRANSFERS Your data is accessible to authorized personnel within Dibsteur and to service providers acting on our behalf, only where necessary for their tasks: hosting, maintenance, payments, messaging, support, analytics and administrative obligations. With your consent to advertising tracking, digital hashes derived from the contact details you enter in the website's forms (email address, phone number, first and last name) may be transmitted to our advertising measurement tools outside the European Union to measure the effectiveness of our campaigns. For this advertising measurement, the contact details you enter are transmitted only as digital hashes; their raw values do not leave your browser. Some service providers may process data outside the European Economic Area. In such cases, we implement the safeguards required by applicable regulations, including the European Commission's standard contractual clauses where necessary. 5. DATA RETENTION We retain your data for as long as necessary for the purposes described above. Account data is generally retained throughout the contractual relationship and then archived for the periods necessary to comply with our legal obligations or defend our rights. Data used for direct marketing is retained until you withdraw your consent or object. Technical data is retained for a period proportionate to its purpose. 6. COOKIES AND TRACKERS The website may use cookies and similar technologies necessary for its operation, as well as analytics or marketing trackers where your consent is required. You can manage your choices through the consent mechanism available on the website, where applicable, and through your browser settings. Your choice stays valid for 6 months. Rejecting certain trackers may affect some features. 7. YOUR RIGHTS Subject to the conditions set out in the GDPR, you have the rights of access, rectification, erasure, restriction of processing, objection and data portability, and the right to withdraw your consent at any time where processing is based on it. You may also give instructions on how your data should be handled after your death, in accordance with applicable law. To exercise your rights, contact us at [email protected]. We may ask you for the information necessary to verify your identity. We will respond within the time limits set by applicable regulations. You may lodge a complaint with Luxembourg's National Commission for Data Protection (Commission nationale pour la protection des données, CNPD), or with the competent supervisory authority in your place of habitual residence or work. 8. SECURITY We implement appropriate technical and organizational measures to protect your data against destruction, loss, alteration, disclosure or unauthorized access. However, no transmission or storage of data can be guaranteed to be completely secure. 9. CHANGES TO THIS POLICY We may update this policy to reflect changes in our practices, services or applicable regulations. The current version is the one published on this page.