With regard to data processing within the framework of SoundCloud’s internal administration and joint procedures through centralized systems, SoundCloud Global Limited & Co. KG, SoundCloud Inc. and Repost Network Inc. act as joint controllers. The joint processes particularly pertain to the operation and use of joint databases, platforms and IT systems. With respect to the joint processes, SoundCloud determines the purposes and means of processing. In a separate agreement on joint controllership pursuant to Article 26 GDPR, SoundCloud determines how the respective tasks and responsibilities of the processing of personal data are structured and who fulfils which data protection obligations. In particular, it is determined how an appropriate level of security and how your rights as a data subject can be ensured, how the information duties under data protection law can be jointly fulfilled and how potential data protection incidents can be monitored. This includes reporting and notification obligations.
In the event SoundCloud does not act as a joint controller, the sole controller, as given the meaning by data protection legislation, is either:
If you are located in the United States, SoundCloud Inc., 71 5th Avenue, 3rd Floor, New York 10003, NY, USA, firstname.lastname@example.org,
or if you are located outside of the United States, SoundCloud Global Limited & Co. KG, Rheinsberger Str. 76/77, 10115 Berlin, Germany, email@example.com,
We may share your data within our corporate group of companies that are related by common ownership or control (“SoundCloud Group”) and the data of US users may be processed by SoundCloud Global Limited & Co. KG on SoundCloud Inc.’s behalf. The personal data of users who have signed up for SoundCloud Direct may be processed by Repost Network Inc. doing business as SoundCloud Direct on behalf of the respective Data Controller.
SoundCloud provides statistics and insights about the performance of a particular sound recording and its underlying composition uploaded to the Platform (“Track”). These statistics and insights are provided to any person (including Creators) or entity owning or controlling a Track (“Rightsholders”) and include information about how fans interact with their Tracks on the Platform to make Rightsholders better understand their fanbase ("Rightsholder Insights"). Rightsholder Insights are processed in joint controllership between SoundCloud Global Limited & Co. KG and the respective Rightsholder, subject to the applicable agreement to be found here.
The collection and processing of your data is governed by the law applicable to your respective Data Controller, as outlined above.
With that being said, SoundCloud follows European law and the GDPR where applicable to ensure adequate protection of your personal data. Data collection and processing under GDPR may be based on your consent (see Art. 6 lit. a) GDPR), contractual purposes (see Art. 6 lit. b) GDPR) or, in exceptional cases, for legitimate purposes, which we weigh against your data protection interests (see Art. 6 lit. f) GDPR). We have specified the legal bases for individual data processing activities in more detail below.
We may also use our user’s personal data under GDPR if:
Processing is necessary to fulfil a legal obligation to which the person responsible is subject (see Art. 6 lit. c) GDPR);
Processing is necessary to protect the vital interests of the data subject or another natural person (Art. 6 lit. d) GDPR); or
Processing is necessary for the performance of a task that is in the public interest or takes place in the exercise of official authority that has been assigned to the person responsible (see Art. 6 lit. e) GDPR).
Any personal data we collect falls into one of three general categories:
Personal data you provide to us,
Personal data we collect automatically,
Personal data we obtain from third parties.
We ask for and collect the below personal data when you use the Platform. This personal data is necessary for the adequate performance of the platform, to meet the requirements of the contract present between you and us and to comply with our obligations thereunder.
You don’t need to register for a SoundCloud account in order to visit or use our Platform. However, certain Services require that you register for an account and, by doing so, you will need to provide us with certain personal data:
Account Information - When you register with any kind of SoundCloud account, you will need to provide your email address (except when you sign-up with Facebook, Google or Apple and don’t give your permission to share it with SoundCloud), your age, a username (which may be your real name or a pseudonym) and a password.
Profile Information - you may choose, at your discretion, to provide additional personal data for your public profile on SoundCloud – for example:
your real name
the city and country in which you live
a profile picture, profile header image or avatar
any content associated with your Track uploads (all audio (including podcasts), text, pictures, graphics, comments, and other content, data or information that you upload, including your compositions, metadata, song names, composer names, creators’ names, performers’ names, group names, producers’ names, album artworks and your name, image, likeness and biographical information) (“Materials”).
information about how you categorize yourself with respect to your Materials (for example, whether you are a musician, a label or some other category of creator)
details of your other websites and social media profiles, including links to those pages
SoundCloud Direct - In the event you use the services of SoundCloud Direct, you must provide your real name, payment information and personal data necessary to operate and maintain your monetization and/or distribution with SoundCloud Direct (e.g. content identification information such ISRC codes).
Music Publishing - In the event you use the services of music publishing administration, you must provide your real name, payment information and personal data necessary to operate and maintain your music publishing administration (e.g. publisher, sub-publisher information as well as performance rights and or mechanical rights organization information and content identification data, such as interested party Information (IPI) numbers, ISWC numbers).
Communications - When you communicate with SoundCloud by email or through the Platform, or use the Platform to communicate with other users, we collect personal data about your communication and any personal data you choose to provide based on contractual purposes.
Survey Information - If you participate in any survey, you may provide certain personal data as part of your response, unless you respond anonymously. The personal data you provided is only processed based on your consent.
Information Provided For Tax or Financial Reasons
Tax ID/VAT - We also collect your tax ID or VAT number if applicable. If you join SoundCloud Direct as a business, this personal data is required to enable proper tax accounting purposes.
Other Tax Payee Information and W9 Certifications (US Only) - If you are located in the U.S., we will collect certain personal data and certifications from you, which enables us to report eligible payouts to the Internal Revenue Service.
PayPal Email Address - In order to be able to remit any revenue earned through your monetized tracks to your designated PayPal account, we ask you to provide us with the email address that is connected to the PayPal account in which you wish to receive your eligible payouts.
Log Data – We automatically collect log information when you use the Platform, even if you have not registered for an account or logged in. That personal data includes, among other things: details about how you’ve used the Platform (including links to third party sites or services), Internet Protocol (IP) address, access times, your browser type and operating system, device information, device event information (e.g., crashes, browser type), and the page you’ve viewed or engaged with before or after using the Platform. This personal data is essential for our service and is therefore either based on contractual purposes or on legitimate interest if no contract exists. Please be aware that we need log data as we are under contractual obligation to track use of content by our content providers.
Location Data – When you use certain features of the Platform, we may collect personal data about your general location. Physical locations collected through our Platform are associated with non-personally identifiable data including but not limited to device type, browser type, operating system. We use such personal data to deliver personalized location-based services or content. In some instances, you may be permitted to allow or deny such use of your device’s location, but if you choose to deny such use, we may not be able to provide you with the applicable personalized services or content. We use this personal data to provide you with location-based services (such as advertising and personalized content). Most mobile devices allow you to control or disable the use of location services for applications in the device’s settings. Such use of personal data is based on your consent, either within our Platform or within your device where you provided your consent when prompted.
Device Information – We collect personal data from and about the devices you use, including how you interact with the Platform and information about the device itself, such as the hardware model, operating system, IP addresses, cookie information, device settings, mobile carrier information, mobile device and advertising identifiers, apps installed, browser type, language, battery level and time zone. This information allows us to recognize and associate your activity, and provide personalized content and advertising, consistently across all of your devices. Such use of personal data is based on your consent given either within our Platform or within your device.
Software Development Kits (“SDK”) - We may use third parties including our business partners and service providers who use mobile SDKs to collect personal data and information related to how mobile devices interact with the Platform. An SDK is computer code that app developers can include in their apps to enable ads to be shown, personal data to be collected and related services and functionality to be implemented. We may use this technology, for instance, to analyze how you interact with Materials and advertisements and to enable analytics or other features through mobile devices. However, such use will be based on your consent.
Single-Sign Ons – If you sign up for SoundCloud through a third party application such as Facebook, Google or Apple, you authorize us to collect your authentication information, such as your username and encrypted access credentials, and other personal data available through the third party application account, including the following personal data:
Service Providers and Business Partners – We may also receive personal data about you from our service providers and business partners, including companies that assist with payment processing, analytics, advertising, marketing, data processing and management (e.g. to measure ad quality and responses to ads, and to display ads that are more likely to be relevant to you, including for SoundCloud products) account management, hosting, customer and technical support, content moderation, and other services which we use to personalize your SoundCloud experience. We explain in more detail why and how we use this personal data below.
Android IDs - We collect your Google Android’s Advertising ID (“AAID”). You can reset these numbers through the settings of your device’s operating system (we do not control this). Such identifiers will only be used for further analysis subject to your consent.
Apple IDs - We collect your Apple Identifier for Advertising (“IDFA”). You can reset these numbers through the settings of your device’s operating system (we do not control this). Such identifiers will only be used for further analysis subject to your consent.
Cross App Tracking on Apple Devices - Starting with iOS 14.5, iPadOS 14.5, and tvOS 14.5, we will need to receive your permission through the AppTrackingTransparency framework to access and track you through your device’s advertising identifier (see above “IDFA”). Tracking refers to the act of linking user or device data collected from our app with user or device data collected from other companies’ apps, websites, or offline properties for targeted advertising or advertising measurement purposes. Tracking also refers to sharing user or device data with data brokers. The use of such tracking is subject to your consent and therefore may only be exercised by us with such consent. Apple allows the ID for Vendors (IDFV) to be used for analytics across apps from the same content provider (us). The IDFV may not be combined with other data to track a user across apps and websites owned by other companies unless we have been granted permission to track by you. For further information on how we use the SKAdNetwork for attribution tracking please refer to the documentation that Apple provides here.
Payment Processing In the Apple App and Google Play Store - Payment processing services within the relevant Apps and App Stores enable SoundCloud to process payments. SoundCloud does not process or store credit card details, and uses only the information necessary to execute the transaction with the financial intermediaries handling the transaction. Even though we never have access to raw unencrypted card details of a card holder, some of these services may also enable the sending of timed messages to you, such as emails containing invoices or notifications concerning your payment.
We use the personal data we collect from you for a range of different business purposes according to different legal bases of processing and subject to the choices you make in your Settings. We do this with the help of automated systems and decision making. Please be aware that when we refer to automated decision making, we will not use any profiling that produces legal effects concerning you or, similarly, significantly affects you. Automated decisions are concerned with content that may be more relevant for you than other content. We use your personal data to:
Operate and maintain your SoundCloud account, and to provide you with access to and use of the Platform. Your email address and password are used to identify you when you log into the Platform. Your device-IDs are used to ensure that you are in control of the devices that have access to your Subscription.
Identify you as the creator of the Tracks that you upload, the comments that you post and/or the other contributions that you make to the Platform.
Provide creators with stats and insights about users’ listening behavior of their Tracks, (i.e. streaming and downloading their Tracks or following their profiles).
Conduct surveys and research, test features in development, and analyze the information we have to evaluate and improve products and services, develop new features, and conduct audits and troubleshooting activities.
If purchasing a Subscription, to process your account subscription and renewals and to collect your payment with the use of payment verification information.
Send you service updates and notifications about your account, unless you opt out from such notifications.
Respond to you about any comment or enquiry you have submitted.
Enable age restrictions.
The detection and prevention of fraud, spam, abuse, security incidents, and other suspicious activity.
The verification and authentication of your identity to prevent unauthorized or illegal activity.
The enhancement of the safety and security of our products and services.
The conducting of security investigations and risk assessments.
The ability to provide you with customer and technical support.
Personalize Content, Advertising and Marketing - We process your personal data in this case based on your consent. You can revisit your choices in your settings or in our cookie consent tool. This includes:
To improve your experience on the Platform by providing personalized content, recommendations, and features.
To customize the content and measure performance of any email, push notification, or in-app message we may send to you.
To administer sweepstakes, contests, or other promotional activities or events sponsored or managed by SoundCloud or its partners.
To deliver targeted marketing for SoundCloud products on and off the Platform and measure the success of those campaigns. When seeing our ads on third party websites or apps, we or third party services we engage with for this purpose may collect personal data. This personal data includes the information that your browser or mobile app makes available when seeing the ad (e.g IP address, referral URL, browser details, timestamp of request). For example, if a click on our ad converted to an actual purchase of a subscription.
To help us select which ads to show you on behalf of advertisers, as ads are more effective when they are shown to people who are likely to be interested in the product or service advertised. This includes personal data you choose to provide to us (e.g. age and gender) and make available to us when you interact with the Platform (e.g. by listening, liking or creating playlists), as well as device information and general location data. We may also display ads based on the page you’re on or Materials you have recently viewed, searched, or listened to. This allows us to show you ads that will likely be more relevant and interesting to you.
To collect certain personal data such as cookie data and device information, if we engage with third party services such as ad-networks and exchanges that enable us to show you targeted ads. That personal data is used to sync or match users to segments and serve targeted advertising, based on device activity, inferred interests, and general location information.
To combine personal data that we collect about you with personal data from business partners and use it to serve more relevant advertising.
Combine information we collect about you with information from business partners and use it to serve more relevant advertising.
Newsletters - If you register on our website to receive our newsletter, we collect your email address and your name and save this information together with the date of registration and your IP address. You will then receive an email in which you must confirm your decision to subscribe to the newsletter (double opt-in). If you do not confirm your newsletter subscription within 72 hours, it will automatically expire and the personal data will not be processed for sending the newsletter. We will send the newsletter directly using our own system (Braze).Your personal data will not be passed on to third parties or processors. In the case that you do not confirm your subscription within 72 hours, we will delete the personal data that you provided. After successful confirmation, we will save your personal data until you withdraw your consent (unsubscribe from the newsletter) and for technical reasons beyond this for a maximum of 21 days. This processing is based on your consent. By unsubscribing from the newsletter, you can withdraw your consent at any time with future effect.
Market Research Studies - Based on our legitimate interest, from time to time we will ask you to participate in market research studies and surveys or to do research studies based on anonymized and/or pseudonymized data. There is no obligation to participate in our studies. In the case that you do participate, it will be based on the consent you provide when answering the survey. We deem that the use of anonymized and/or pseudonymized data is covered by our legitimate interest as we will only use such analysis to further improve our research and Platform for the benefit of understanding your needs and enhancing your experience. We will only use the data you provide when answering the market study for other reasons, such as customized product recommendations or notifications based on your consent which you provide ahead of your participation in the market study.
Operate and Maintain SoundCloud Direct Monetization - In the event you use the services of SoundCloud Direct, we use the personal data provided by you to operate and maintain your monetization and/or distribution with SoundCloud Direct. The personal data will be used to calculate the eligible revenue to be paid out to you and affect the payments into your PayPal account or any other accepted payment provider.
This section describes how the personal data collected or generated through your use of the Platform may be shared by you or by us.
Through Your Profile – Any personal data in your public profile (other than your email address) will be accessible by other users of the Platform, who may view your profile information, listen to and comment on any of your public Tracks, add themselves to your list of followers, and send you messages. Artist profile owners will be able to see in their statistics that you have listened to the Tracks they uploaded along with a ranking of who listened to their Tracks the most. They will also be able to see how many times you have listened to any of their Tracks, and that you are following them. This is to allow creators to track the popularity of their Tracks. Similarly, if you comment on any Tracks on the Platform, your comments will be available to all users of the Platform together with your profile name and picture. More information is available in the SoundCloud Fan Insights document here.
Service Providers – We use a variety of service providers, some of who may be located outside of the European Economic Area (“EEA”), to provide services to us or to our users on our behalf. These service providers have access to your personal data solely to perform these tasks on our behalf, and are contractually bound to implement appropriate organizational and technical security measures to protect against unauthorized disclosure of personal data, and only to process personal data in accordance with our instructions and to the extent necessary to provide their services to us. We need to share your personal data in order to ensure the adequate performance of our contract with you. For instance, we work closely with service providers in the area of customer service (i.e. help center, content moderation), with technical service providers (e.g. running computer centers) or music service providers (i.e. rights administration) and payment service providers. These service providers may generally only process your personal data on our behalf under special conditions. When using such service providers, we guarantee an adequate level of data protection and will use any contractual and actual safeguards to comply with respective regulations (like the GDPR, Standard Contractual Clauses or the CCPA).
Rightsholders - The Platform allows you to listen to a variety of Tracks, including licensed streaming content. We share personal data with rightsholders that license Tracks to us to help them understand how the Tracks that they provide are performing, including insights about general or individual user listening trends and preferences; this can possibly include your public profile details as well as basic usage data (for example interactions with Tracks). We share this personal data based on our legitimate interest, as our contracts with these rightsholders state that they will be granted these insights. Their interest prevails over your legitimate interest in the safekeeping of your public profile information and basic usage data.
Collecting Societies - Due to legal obligations, we are obliged in many countries around the world to transmit pseudonymized or anonymized usage data to collecting societies.
Advertising – We share the personal data collected about you, in hashed, aggregated, or de-identified forms with advertisers and advertising service providers and business partners in order to serve ads based on interests of respective segments and to measure the reach and effectiveness of those ads, including whether a user took an action(e.g. purchased a product). We may also share cookie data and device identifiers with service providers for data matching purposes, in order to improve ad targeting. You can find a detailed overview of our advertisers here.Please be aware that where such personal data of yours is identifiable, we will only use it with your consent.
Social Media – For users outside of the EU/EEA and where permissible under applicable law we may share your email address (in hashed form, so that it does not identify you) with Facebook in order to target you with ads for SoundCloud products on Facebook and on third party websites and applications in the Meta Audience Network. For users within the EU/EEA this is only permissible with your explicit consent. We also allow Facebook and other social media platforms to collect personal data through cookies and similar technologies like pixels in order to serve ads for SoundCloud on those third party websites and apps and drive users to our Platform. In order to measure the effectiveness of and optimize these marketing campaigns, these technologies track activity taken across devices after a user sees a SoundCloud ad, in order to determine performance metrics like sign ups, visits to the Platform, and purchases. Any questions regarding how these social media platform service providers process your personal data should be directed to them.
Aggregated Data – We may also share aggregated and anonymized personal data (personal data about our users that we render in such a way that it no longer identifies or references an individual user) and other pseudonymized personal data for regulatory compliance, industry and market analysis, demographic profiling, marketing and advertising, and other business purposes.
Third Party Applications – If you choose to connect your SoundCloud account to other apps or social networks such as Facebook, you may be sharing certain personal data with these apps or networks. Materials that you share with social media networks will appear on your timeline (or similar functions) as well as in news feeds that may be viewed by the public or by certain followers, subject to the terms and conditions of such social media networks. In the case of connected apps, you will need to provide the app developer with full access to your SoundCloud account in order to upload and download Tracks, or comment on, favorite, or repost Tracks from within the app. This means sharing your public information, plus access to your private Tracks. SoundCloud is not responsible for these other apps or networks, so please make sure you only connect your account with apps or services that you trust. For information on how to control the personal data that you share, and how to disconnect your account from these apps, please see the Your Choices and Controls section below. If you do not want this information shared with such social media networks or other Third Party Applications, please change your SoundCloud Settings on our Platform or in those networks.
Use of Your Name and Other User Identifiers in Sharing Links - When sharing personal data from our platform on other platforms, especially social media platforms like Facebook or Instagram, we may use your pseudonymized data. If a user clicks on your shared link and is lead to our platform, the user will be presented with a banner telling the user that you (in this context, your profile name will be displayed) are using SoundCloud and/or that you shared this link, and the user will then be asked if they want to follow you. Such use by us is considered a legitimate interest as it enriches our user experience and the way our users connect with each other. As we assume that you share links responsibly with people whom you want to interact with, we also assume that your interest in the safekeeping of your personal data is not affected, especially since we only use pseudonymized data within the link itself. Please be aware that your shared link may be shared further by other parties.
Protecting our Rights – We may disclose your personal data if we feel it is necessary in order to protect or defend our legitimate rights and interests, or those of our users, employees, directors, officers, or shareholders, and/or to ensure the safety and security of the Platform and/or the SoundCloud community.
Targeted Communications & Advertising - Here you will find a list of external advertising partners with whom we cooperate and share personal data (often in aggregated or de-identified forms) for analytics, targeted communications and targeted advertising purposes, should you have consented and not turned these toggles off in your settings. Any such consent will be gained through our cookie consent tool or via your settings in your account.
SoundCloud Direct - In the event you choose to grant other users access to your SoundCloud Direct account, or in the event you set up our Split Pay feature, some personal data, such as your name and email address, will be available to those users. Additionally, if you use SC Planner, your SC Planner profile will be visible to other users in the “Leaderboard” section of the App, unless you elect to make your profile invisible in your settings.