Privacy Policy

1. Controller

GP BY SP.STUDIOS GLOBAL MUSIC, S.R.L.U., trading as GP by SP.Studios, is the controller for personal data processed through this platform. Privacy requests may be sent to info@gpbyspstudios.com.

2. Data we process

We process account and identity data; contact, address, country and tax details; order, payment-status and invoice data; producer submissions, files and rights evidence; support and copyright communications; wishlist and account preferences; device, security and consent records; and marketing preferences. Payment providers process full payment credentials under their own responsibilities; we retain only the references and status needed to manage the order.

3. Purposes and legal bases

• Perform contracts, deliver purchases and administer producer submissions and payments.
• Comply with tax, accounting, consumer, anti-fraud and legal obligations.
• Protect the platform, investigate infringement and pursue or defend claims on the basis of legitimate interests and legal obligations.
• Send email or WhatsApp marketing where consent or another valid legal basis applies; recipients may opt out at any time.
• Measure audiences and advertising only after the required cookie consent.

4. Recipients and international transfers

Data may be shared as necessary with hosting, storage and delivery services (including Dropbox), payment providers such as Stripe, invoicing and accounting providers, email and messaging services, analytics providers such as Google, advertising providers such as Meta, professional advisers and public authorities. Transfers outside the EEA will rely on an adequacy decision, standard contractual clauses or another valid safeguard, with supplementary measures where required.

5. Retention

• Account data: while active and afterwards for applicable limitation periods.
• Contracts, orders, invoices and accounting records: for statutory tax and commercial periods, generally up to six years, and longer where legally required.
• Support enquiries: up to three years after closure unless linked to a longer contractual or legal record.
• Marketing data: until consent is withdrawn or the address becomes inactive, subject to a minimal suppression record.
• Copyright and dispute files: through the claim and applicable limitation periods.
• Consent evidence: for the time necessary to demonstrate compliance.

6. Rights

Depending on the circumstances, individuals may request access, rectification, erasure, restriction, portability or objection, and may withdraw consent without affecting earlier processing. Identity may be verified before fulfilling a request. Individuals may also complain to the Spanish Data Protection Agency or their competent supervisory authority.

7. Minors

Where a minor lacks legal capacity to contract or consent to relevant processing, the platform requires verifiable authorisation or representation from a parent or legal guardian. We may pause an account, submission, rights transfer or payment until that authority is established.

8. Security and updates

We use proportionate access, authentication, storage and monitoring measures. No online service is risk-free. Material changes to this policy will be communicated through the platform or account contact details.

Questions or notices may be sent to info@gpbyspstudios.com or by telephone at +34 687 203 998. Tax ID: B26654194.