Privacy Policy

EightSix GmbH ("EightSix", "we", "us", or "our") is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platforms and services.

Data Controller:
EightSix GmbH
Registered at Amtsgericht Charlottenburg, HRB 226406 B
Email: privacy@eightsix.com

For questions about this Privacy Policy or our data practices, please contact our Data Protection team at privacy@eightsix.com.

We collect the following categories of personal data:

Account Information: Name, email address, company name, job title, password (encrypted), and billing information when you create an account or subscribe to our services.

Usage Data: Information about how you interact with our platforms, including pages visited, features used, search queries, music selections, and preferences.

Device and Technical Data: IP address, browser type, operating system, device identifiers, and access times.

Communications: Records of your correspondence with us, including support requests and feedback.

Cookies and Tracking Technologies: Information collected through cookies, pixels, and similar technologies as described in Section 9.

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

Contract Performance (Art. 6(1)(b) GDPR): Processing necessary to provide our services, manage your account, and fulfill our contractual obligations to you.

Consent (Art. 6(1)(a) GDPR): Where you have given explicit consent, such as for marketing communications or certain cookies. You may withdraw consent at any time.

Legitimate Interests (Art. 6(1)(f) GDPR): Processing necessary for our legitimate business interests, such as improving our services, fraud prevention, and security, provided these do not override your rights.

Legal Obligation (Art. 6(1)(c) GDPR): Processing required to comply with applicable laws, such as tax regulations or legal proceedings.

We use your personal data for the following purposes:

• Providing and maintaining our platforms and services
• Processing transactions and managing subscriptions
• Personalizing your experience and providing tailored recommendations
• Facilitating music licensing connections between brands and rights holders
• Analyzing usage patterns to improve our services
• Communicating with you about updates, support, and promotional content
• Ensuring security and preventing fraud
• Complying with legal obligations

We may share your personal data with the following categories of recipients:

Service Providers: Third-party vendors who assist us in operating our platforms, including hosting providers, payment processors, and analytics services. These providers are contractually bound to protect your data.

Music Rights Holders: When facilitating licensing connections, we may share relevant information with artists, labels, publishers, or their representatives as necessary to complete transactions.

Business Partners: Trusted partners with whom we collaborate to provide integrated services.

Legal and Regulatory Authorities: When required by law, court order, or to protect our rights and the rights of others.

Corporate Transactions: In connection with a merger, acquisition, or sale of assets, your data may be transferred as part of the transaction.

We do not sell your personal data to third parties.

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place:

• Transfers to countries with an adequacy decision from the European Commission
• Standard Contractual Clauses (SCCs) approved by the European Commission
• Other legally recognized transfer mechanisms

You may request information about the specific safeguards applied to transfers of your data by contacting us.

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

• Active account data: retained while your account is active and for a reasonable period thereafter
• Transaction records: retained for 10 years as required by German commercial and tax law
• Marketing preferences: retained until you withdraw consent or update your preferences
• Technical logs: typically retained for 90 days for security and troubleshooting purposes

When data is no longer needed, we securely delete or anonymize it.

Under the GDPR, you have the following rights regarding your personal data:

Right of Access (Art. 15): Request a copy of the personal data we hold about you.

Right to Rectification (Art. 16): Request correction of inaccurate or incomplete data.

Right to Erasure (Art. 17): Request deletion of your data under certain circumstances ("right to be forgotten").

Right to Restriction (Art. 18): Request limitation of processing in specific situations.

Right to Data Portability (Art. 20): Receive your data in a structured, machine-readable format.

Right to Object (Art. 21): Object to processing based on legitimate interests or for direct marketing purposes.

Right Regarding Automated Decisions (Art. 22): Not be subject to decisions based solely on automated processing that significantly affect you.

To exercise any of these rights, please contact us at privacy@eightsix.com. We will respond within one month as required by law.

We use cookies and similar technologies to enhance your experience:

Essential Cookies: Required for the basic functionality of our platforms. These cannot be disabled.

Analytics Cookies: Help us understand how visitors interact with our platforms, allowing us to improve our services.

Functional Cookies: Remember your preferences and settings to provide a personalized experience.

Marketing Cookies: Used to deliver relevant advertisements and track campaign effectiveness.

When you first visit our platforms, you will be presented with a cookie consent banner where you can manage your preferences. You can also adjust your cookie settings at any time through your browser settings or our cookie preference center.

If you allow it, we load the OpenAI measurement pixel. It reports page views and successful enquiry submissions to OpenAI so we can attribute them to our OpenAI ads. This is optional and off unless you allow it.

For this purpose, technical browser and network data is processed and first-party attribution cookies named __oppref and __obref may be set. The pixel's automatic matching is enabled in our OpenAI Ads account, so supported contact identifiers you enter on our site, such as an email address or phone number, may also be sent to OpenAI as hashed values. We never manually forward the content of your enquiry message. All of this happens only after you have explicitly opted in; the pixel is not loaded at all before that.

You can withdraw this permission at any time using the "Ads measurement settings" control in the footer. See OpenAI's privacy policy.

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and penetration testing
• Access controls and authentication mechanisms
• Employee training on data protection
• Incident response procedures

While we strive to protect your data, no method of transmission over the Internet is 100% secure. We encourage you to use strong passwords and protect your account credentials.

Our platforms are not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately at privacy@eightsix.com, and we will take steps to delete the information.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will notify you by email or through a prominent notice on our platforms at least 30 days before the changes take effect. We encourage you to review this policy periodically.

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us:

EightSix GmbH
Email: privacy@eightsix.com
Address: See Imprint for full company details

If you are not satisfied with our response, you have the right to lodge a complaint with a supervisory authority. For EightSix GmbH, the competent authority is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit (BlnBDI)
Friedrichstraße 219
10969 Berlin, Germany
Website: www.datenschutz-berlin.de