Personal data protection
The protection of your personal data is very important to Xandrie, Qobuz’ parent company. Xandrie would like to inform you (the subscribers, potential customers and web-browsers visiting our websites) of your rights regarding personal data and of the conditions under which your personal data is collected, used, stored and archived by Xandrie.
As part of its business operations, Xandrie processes your personal data (hereinafter referred to as "processing"). Xandrie may collect your personal data:
- directly from you, when you fill in a subscription form for one of our products or services (for example, for one of our music streaming subscriptions);
- from our partners, provided that they have obtained your permission to transmit information about you to Xandrie
1. What personal data does Xandrie collect about you?
The following categories of personal data are mainly collected in the context of your contractual or commercial relation to Xandrie:
- declarative personal data (data actively given by you; for example: while filling in a subscription form for one of our services)
- personal data related to your use of Xandrie’s products and services (such as data collected by cookies on our websites)
- personal data provided by a third party (provided that the third party has obtained your prior consent to share your data with Xandrie)
- personal data inferred or calculated by Xandrie
2. On what basis does Xandrie process your personal data?
In accordance with data protection regulations (General Data Protection Regulation No. 2016/679 as of 27 April 2016 and Act No. 78/17 as of 6 January 1978 as amended and the California Consumer Privacy Act of 2018 « SB-1121 » as amended), Xandrie collects your personal data on the basis of:
- your consent where it is required (particularly in terms of commercial development);
- a contract that you have signed with Xandrie (for example, a subscription to one of our music streaming services);
- or when it is justified by legitimate interests
3. For how long does Xandrie store your personal data?
Personal data is stored for the time necessary for the purposes for which they are collected.
- For subscribers to Xandrie’s products and services, personal data is stored for the length of the contract, in addition to periods of applicable legal requirements;
- For potential customers, personal data is stored for 3 years after the last time of contact;
- For web-browsers, personal data that is collected through cookies is stored for a maximum of 13 months from the time it is collected
4. Who can access your personal data?
Any collected personal data, as well as personal data which is later obtained by Xandrie, is used only by Xandrie. As such, only authorized personnel have access to this data.
The internal recipients of your data are:
- Xandrie marketing department;
- Xandrie data analysts;
- Xandrie customer service
The external recipients of your data are:
- Xandrie's subcontractors and service providers (technical service providers in charge of data hosting or IT developments, payment service providers, etc.) that are binded by a contract prohibiting them to retain, use or disclose your personal data for any purpose other than for the specific purpose of performing the services specified in the contract for the business;
- Partners and third parties with whom you have authorized data sharing, that are not collected nor processed by Xandrie.
Xandrie is not responsible for the processing of your personal data that you have authorized from third parties and that is not shared with Xandrie, such as, for example, social networks. It is your responsibility to refer to the data protection policies of these third parties to check the conditions of the processing operations carried out, or to exercise your rights regarding these operations.
5. Why does Xandrie collect your personal data?
Personal data collected by Xandrie is used determinately, explicitly and legitimately.
On the basis of a contract signed with you or with pre-contractual measures taken at your request, Xandrie carries out the following processing operations:
- Subscriptions to Xandrie products and services;
- Management of your commercial and contractual relations with Xandrie in the context of your subscriptions
- Invoices and payments
On the basis of a legitimate interest pursued by Xandrie, the following processing operations will be carried out so as to:
- improve our products and services according to problems reported by you;
- tailor the service towards your tastes as part of your subscription, according to your preferences;
- manage any complaints
On the basis of a legitimate interest pursued by Xandrie, or your consent where it is required, Xandrie uses processing for the following:
- Commercial development
- Information on the products and services offered by Xandrie
- Audience analytics (statistics and audience analysis) with information previously anonymized.
6. What are the security measures put in place by Xandrie?
With regards to the risks that data processing presents, Xandrie takes appropriate measures to maintain security and confidentiality of your personal data, in particular to prevent data from being destroyed, distorted or accessed by unauthorized third parties.
Xandrie chooses subcontractors and service providers with high security standards.
7. Why does Xandrie collect your personal data ?
You hold the following rights over your personal data : Right to request information about our collection, use and disclosure of your personal information over the prior 12 months, and ask that we provide the categories of personal information, the sources and the purposes for collecting your personal information, as well as their use by Xandrie or the third parties with which we share your personal information. A right of data portability of the gathered information delivered. The right to request for Xandrie to rectify or delete your personal information. Xandrie would like to inform you that modifying or deleting your data may have consequences on the processing of certain requests regarding contractual relations. A right of opposition to prospecting at any time or for reasons relating to a particular situation. A right to complain to the CNIL (Commission Nationale de l’Informatique et des Libertés) or the CCPA if you are a California resident, if Xandrie’s response to your request has not been satisfactory. Xandrie cannot discriminate you for exercising any of your rights under the CCPA.
If you do not have a Qobuz account, Xandrie has no reason to have collected any personal information that belongs to you. As such, we will be unable to verify and honor your requests. Any requests must include your full name and address and must be emailed to firstname.lastname@example.org, or posted to Any requests must include your full name and address and must be emailed to email@example.com, or posted to XANDRIE SA Legal Department, 45 rue de Delizy, 93692 Pantin CEDEX, FRANCE. Any requests regarding exercising your rights will be kept for follow-up purposes. A trusted third party, designated by decree, is entitled to define the guidelines for storage, erasure and communication of a consumer data after its death.
8. How does Xandrie analyze your data?
Xandrie analyzes data related to the subscriber's use of the service in order to tailor the service to the subscriber (modification of the layout or appearance of the pages on which he or she navigates).
9. Is your data transmitted outside of the European Union?
The data that Xandrie collects about you is potentially transmitted outside of the European Union. For example, Xandrie uses a service provider located outside of the European Union to host your data.
To secure these transfers, Xandrie can, for example, set up standard clauses defined by the European Commission to regulate these flows.