Privacy Policy
Last updated: April 2, 2026
1. Data Controller
The data controller is VOID MUSIC GROUP (VOID.AUDIO), a simplified joint-stock company (Société par Actions Simplifiée, SAS) registered in France under SIREN 992 576 322, SIRET 992 576 322 00018, with its registered office at 25 Rue de Ponthieu, 75008 Paris, France.
Business activity: Sound recording and music publishing (NAF/APE code 59.20Z).
For any inquiries regarding this policy or the exercise of your rights, you may contact us at: privacy@void.audio.
2. Legal Framework
This Privacy Policy is governed by Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (the “General Data Protection Regulation” or “GDPR”), French Law No. 78-17 of January 6, 1978, as amended (the “Informatique et Libertés” law), and the guidelines and recommendations of the Commission Nationale de l’Informatique et des Libertés (CNIL).
3. Data Collected
We may collect the following categories of personal data:
- Contact information: name, email address, telephone number, postal address
- Account information: login credentials, artist name, profile data (for users of the Artists Platform at artists.void.audio)
- Financial information: bank details (IBAN, BIC), invoicing information, royalty payment records
- Technical data: IP address, browser type, operating system, pages visited, access timestamps
- Communication data: content of messages sent via our contact form or email
4. Purposes and Legal Basis
Your personal data is processed for the following purposes:
| Purpose | Legal Basis (Art. 6 GDPR) |
|---|---|
| Providing our distribution, label, and licensing services | Performance of a contract |
| Managing the Artists Platform accounts and royalty payments | Performance of a contract |
| Responding to inquiries via the contact form | Legitimate interest |
| Sending service-related communications | Legitimate interest |
| Compliance with legal and tax obligations | Legal obligation |
| Website analytics and improvement | Consent (cookies) / Legitimate interest (essential analytics) |
5. Data Retention
Personal data is retained only for as long as necessary to fulfill the purposes described above:
- Contract-related data: for the duration of the contractual relationship, plus the applicable statute of limitations (5 years under Article 2224 of the French Civil Code)
- Financial and accounting data: 10 years from the end of the fiscal year, in accordance with Article L123-22 of the French Commercial Code
- Contact form inquiries: 3 years from the last contact
- Technical/analytics data: 13 months maximum (in accordance with CNIL guidelines)
6. Data Recipients
Your personal data may be shared with the following categories of recipients, strictly on a need-to-know basis:
- Our distribution and technology partners (e.g., Create Music Group, Label Engine, RouteNote) for the purpose of delivering music to digital service providers
- Payment service providers for processing royalty payments
- Hosting providers (our website and platform infrastructure)
- Legal and accounting advisors, where required
- Public authorities, where required by law
We do not sell, rent, or trade your personal data to third parties for marketing purposes.
7. International Transfers
Some of our service providers may be located outside the European Economic Area (EEA). In such cases, we ensure that appropriate safeguards are in place in accordance with Chapter V of the GDPR, including Standard Contractual Clauses adopted by the European Commission, or adequacy decisions.
8. Your Rights
In accordance with the GDPR and the Informatique et Libertés law, you have the following rights:
- Right of access (Art. 15 GDPR): obtain confirmation of whether your data is processed and access a copy
- Right to rectification (Art. 16 GDPR): correct inaccurate or incomplete data
- Right to erasure (Art. 17 GDPR): request deletion of your data, subject to legal retention requirements
- Right to restriction (Art. 18 GDPR): restrict processing in certain circumstances
- Right to data portability (Art. 20 GDPR): receive your data in a structured, commonly used format
- Right to object (Art. 21 GDPR): object to processing based on legitimate interest
- Right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal
- Right to define post-mortem directives regarding the retention, erasure, and communication of your data after your death (Art. 85 of the Informatique et Libertés law)
To exercise any of these rights, please contact us at privacy@void.audio. We will respond within one month of receiving your request, as required by Article 12(3) of the GDPR.
You also have the right to lodge a complaint with the CNIL: www.cnil.fr, 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07.
9. Cookies
Our website uses strictly necessary cookies for its operation. We may also use analytics cookies to understand how visitors interact with the site, subject to your consent in accordance with Article 82 of the Informatique et Libertés law and CNIL guidelines on cookies and trackers.
You may manage your cookie preferences at any time through your browser settings.
10. Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction, in accordance with Article 32 of the GDPR. These measures include encryption of data in transit (TLS), access controls, and regular security assessments.
11. Modifications
We reserve the right to update this Privacy Policy at any time. Any material changes will be communicated through our website. The date of the last update is indicated at the top of this page.
12. Contact
For any questions or requests regarding this Privacy Policy:
VOID MUSIC GROUP (VOID.AUDIO)
25 Rue de Ponthieu, 75008 Paris, France
Email: privacy@void.audio