Qobuz
Qobuz is a French commercial music streaming and downloading service.
Score
Citation
Xandrie analyses data related to the subscriber's use of the service in order to tailor the service to the subscriber (modification of the layout or appearance of the pages on which he or she navigates).
Notes
It is not used outside of the service, according to the policy
Even if there is a reasonable delay before the data is fully deleted (as is common), the data still counts as "permanently deleted" and satisfies the parameters for this question.
Score
Citation
You hold the following rights over your personal data:a right of access, a right of rectification, a right of deletion, a right of data portability, a right of opposition for reasons relating to your particular situation, a right of opposition to prospecting at any time, a right to withdraw your consent, a right to limitation, a right to complain to the CNIL (Commision Nationale de l’Informatique et des Libertés) if Xandrie's response to your request for the exercise of your right has not been satisfactory, a right to define guidelines for storage, erasure and communication of your data after you have died to a trusted third party designated by decree.
This may come in the form of outright data sharing or by using local third-party analytics software (such as Google Analytics, which collects a plethora of user information).
Note that whether the policy allows sharing aggregated user data does not affect this question.
If the personal data is encrypted when it passes through the third-party, it does not count as third-party access (as the data is inaccessible to that party).
If personal data has been made public by, for example, posting it to a blog, it does not count as private personal information (and is therefore not considered by this question).
Score
Citation
Any collected personal, as well as personal data which is later obtained by Xandrie, is used only by Xandrie. As such, only authorised personnel have access to this data.
The external recipients of your data are:
- Xandrie's subcontractors (technical service providers in charge of data hosting or IT developments, payment service providers, etc.);
- Partners and third parties with whom you have authorized data sharing
Score
Notes
It was not mentioned if the service was disclosing data to law enforcement
Score
Citation
With regards to the risks that data processing presents, Xandrie takes appropriate measures to maintain security and confidentiality of your personal data, in particular to prevent data from being destroyed, distorted or accessed by unauthorised third parties.
Xandrie chooses subcontractors and service providers with high security standards.
Score
Notes
There is no date or changelog.
Note that all companies operating in the EU are subject to Art. 33 of the GDPR, which requires companies to notify their data protection authority of a data breach within 72 hours of discovering it.
Score
Notes
The policy doesn't require the service to disclose data breaches
Score
Notes
There isn't a requirement to disclose changes to the policy.
This includes the use of data brokers and independent verification authorities (such as background check providers).
Score
Citation
The following categories of personal data are mainly collected in the context of your contractual or commercial relation to Xandrie: personal data provided by a third party (provided that the third party has obtained your prior consent to share your data with Xandrie)
Score
Citation
Personal data collected by Xandrie is used determinately, explicitly and legitimately.
On the basis of a contract signed with you or with pre-contractual measures taken at your request, Xandrie carries out the following processing operations:
- Subscriptions to Xandrie products and services;
- Management of your commercial and contractual relations with Xandrie in the context of your subscriptions
- Invoices and payments
On the basis of a legitimate interest pursued by Xandrie, the following processing operations will be carried out so as to:
- improve our products and services according to problems reported by you;
- tailor the service towards your tastes as part of your subscription, according to your preferences;
- manage any complaints
On the basis of a legitimate interest pursued by Xandrie, or your consent where it is required, Xandrie uses processing for the following:
- Commercial development
- Information on the products and services offered by Xandrie
- Audience analytics (statistics and audience analysis)
Some services allow users to opt-out or opt-in to of non-critical collection or use of personal data, such as collecting data for personalized advertisements.
Score
Notes
There is no mention of opting out of non-critical usage
Score
Citation
The following categories of personal data are mainly collected in the context of your contractual or commercial relation to Xandrie:
- declarative personal data (data actively given by you, for example while filling in a subscription form for one of our services)
- personal data related to your use of Xandrie’s products and services (such as data collected by cookies on our websites)
- personal data provided by a third party (provided that the third party has obtained your prior consent to share your data with Xandrie)
personal data inferred or calculated by Xandrie
Conditions relating to cookies or connection tracers can be found in our cookies policy
Last Updated
June 24, 2020
Sources
Contributors