Privacy statement
Who we are
This portal belongs to Opus Music Promotion. We are responsible for the data in it. Questions about privacy can go to your regular contact at Opus Music Promotion.
What data we process
- Your account: name, email address, the label you have access to, an encrypted password and, if you turn it on, the key for two-factor authentication.
- Campaign data: results of promotion campaigns, such as which DJs and radio shows played or downloaded a track, their feedback and their reach. This data comes from Inflyte, 1001Tracklists (via Songstats) and our own planning.
- Security: failed sign-in attempts (kept for at most 15 minutes) and one-time links to reset your password.
What we use it for
Only to show you the results of your campaigns and to keep the portal secure. We don't sell data or use it for advertising.
Legal basis
We process account data to perform our agreement with you. We process campaign data about DJs and radio shows based on our legitimate interest in reporting on the campaign; it concerns public playlists and feedback they gave themselves through promotion platforms.
Who has access
You only see the campaigns of your own label. Opus Music Promotion staff see all campaigns and sign in with two-factor authentication.
Service providers
- Vercel hosts the portal.
- Prisma hosts the database (in Europe).
- Resend sends emails, such as a link to reset your password.
How long we keep data
As long as you have access to the portal. If you are no longer a client, we delete your account within three months. We keep campaign data for as long as needed to report to the client.
Cookies
We only use one necessary cookie to keep you signed in. There are no tracking cookies and no analytics software.
Security
Everything runs over an encrypted connection (https). Passwords are stored encrypted. After five failed sign-in attempts we temporarily block the account, and two-factor authentication is required for admins.
Your rights
You can ask us what data we hold about you, and have it corrected or deleted. If you disagree with how we handle your data, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).