Privacy Policy – GDPR

We at Mouseworks, Inc. care about the protection of your personal data. If you are located in the European Union or the European Economic Area, the following privacy policy applies to the processing of your personal data when you use our app.

1                 Data Controller

When you use our app, the data controller for your personal data is

Mouseworks, Inc.
PO Box 340020
Nashville, TN 37203
United States of America

If you have any questions or suggestions regarding the protection of your data, you are welcome to contact us by e-mail at privacy@stationrotation.com.

You can also contact our representative in the European Union:

Adaptant Solutions AG

2                 Permissions

Our app uses the following permissions:

Permission

Purpose

Notifications

Local notifications are used to notify the user the playback has unexpectedly paused and needs intervention to resume.

Photo Library

Access to the photo library is required for station creators to attach a photo to the user’s station

3                 Spotify Data

If you want to listen to music using our app, you have to sign in with your Spotify account. In this case, we receive and store the following personal data from Spotify:

Ÿ    Your Spotify ID

Ÿ    Your Spotify Username

Ÿ    Your Spotify account picture

Ÿ    Last time you have signed in to our app

Ÿ    An authentication token

We need this data to be able to play music through your Spotify account and to display the logged-in user in our app. The legal basis for processing your personal data is Art. 6 (1) (b) GDPR.

We delete your personal data upon your request or when you have been inactive for 2 years.

4                 Who’s listening

By default, we keep your personal data strictly private. However, you can choose to be visible to other users of the app when you listen to someone’s station. In this case, we show your name and your profile pictures in the “Who’s listening” section of the station.

The legal basis for showing your personal data is your consent, Art. 6 (1) (a) GDPR. You can turn off your visibility and withdraw your consent with future effect at any time in the app settings.

5                 Google Firebase

We use Google Firebase, a service of Google LLC ("Google"). Google Firebase provides us with several services to operate our app. Specifically, we use the following services:

Ÿ    Firebase Hosting

Google stores your Spotify profile information for us. The data is stored for the purpose of providing our services to you (Art. 6 (1) (b) GDPR).

We use Google as a data processor. Your personal data is transferred to Google on the basis of Art. 28 (1) GDPR.

6                 Mixpanel

We use Mixpanel, a service of Mixpanel, Inc. Mixpanel allows us to analyze the use of our app so we can better understand how our app is used and what we can do to improve the user experience. Mixpanel collects pseudonymous data, meaning data which does not identify you by name but which can be used to identify your device and your usage patterns. All data collected will be stored for 14 months (excluding aggregated reports).

We only use Mixpanel if you give us your consent (Art. 6 (1) (a) GDPR). You can turn off Mixpanel and withdraw your consent with future effect at any time in the app settings.

7                 Automated individual decisions or profiling

We do not use automated processing to make a decision or profiling.

8                 Your rights as a data subject

When we process your personal data, you have certain rights under the GDPR, which include a right of access to your personal data, a right to rectify your personal data, a right to erasure of your personal data (“right to be forgotten”), a right to restrict the processing of your personal data and a right to data portability.

Furthermore, in cases where the data processing is based on Art. 6 (1) (e) or (f) GDPR, or is carried out for the purpose of direct advertising, you have the right to object to the processing.

You also have the right to lodge a complaint with a supervisory authority at any time.

9                 Data processing when exercising your rights

When you exercise your rights under the GDPR, we also process the personal data you provided to us for the purpose of processing your request, to grant you your rights and to keep evidence about our response to your request. We will process such personal data only for these purposes. This processing is based on Art. 6 (1) (c) GDPR in conjunction with Art. 15 to 22 GDPR.

Last modified: 27 August 2020