Privacy Policy

Through this privacy policy, Whalebone Interactive AB (publ) (“Whalebone”, “we”, “us” and/or “our”) wish to inform you, as a user of our services (“You” and/or “Your”) about our processing of personal data and protection of privacy, and the principles that governs our use of personal data in our Whalebone application and web service (the “Service”).

Here You can read about our what measures we take to protect Your integrity and which rights You have in connection with our processing of Your personal data. Protecting Your privacy and complying with applicable data protection legislation is important to us.

For all processing of personal data described in this privacy policy, Whalebone Interactive AB (publ) acts as controller of personal data, within the meaning of the EU General Data Protection Regulation (the “GDPR”), if nothing else is stated herein. If You wish to contact us regarding our processing of personal data, our contact information is found herein below (section 7).

1. Personal data which we collect

When You create an account and begin to use the Service, we ask You for Your name (birth and/or artist), email address, location, username and password. There is no obligation or legal requirement for You to provide the data. However, it is necessary for us to collect and save the data in order for You to be able to set up a user account on the Service, and for us, to administer Your account. If You do not wish to provide the personal data, You are welcome to sue the Service without a user account.

As an option You may choose to provide additional data to Your account such as, telephone number, profile picture, website address and links to social media sites where You have a profile/account. Further, if You use the alternative to create Your account and sign in on the Service via Facebook, then we will collect and save also such data that You have provided on Facebook, including Your Facebook id and Facebook profile.

By using the Service, additional user generated content will be created and saved, such as role, preferred genres, votes, plays, users following You, Your followed users, playlists, tracks and comments, and including a unique authentication id.

Using the Service also entail that we – using cookies – receive and save information regarding Your web browser, Your device’s ID number and the IP number used. We use cookies in order to enhance Your use and experience of the Service, such as to enabling us to remember Your sessions. This requires that You have allowed the use of cookies in the Service. The first time You use the Service, we will ask for Your permission to use cookies. If You want to change Your provided option in this regard, You can do so at any time by adjusting Your web browser instructions.

If You do not choose to create a user account for the Service, we will not collect or process any personal data about You other than user generated data through cookies, if You have allowed use of cookies. Please see our cookie policy for further information.

2. How collected data is used, purposes, and legal basis for the processing

The personal data which You submit to us is used to register and administer Your user account, including, but not limited to, uploaded music, for example so that we can communicate with You and provide news, feedback, changes, updates, evaluations, analyses and investigations, as well as other matters which are relevant to and improve Your use of the Service. Collected and saved data may also be used for analysis and statistics for the purpose of improving, maintaining, and protecting the Service. The legal basis for this purpose is the agreement between You and us which is concluded when You set up Your account, as we need to carry out the processing of personal data to administer the account and to perform our parts of the agreement.

To the extent You provide us with additional, not required, personal data, such as telephone number, profile picture, website address and links to social media sites where You have a profile/account, including Facebook profile data, the legal basis for the processing of such data is Your consent. This consent can be revoked or limited at any time by changes in Your user settings or unsubscribing from e-mails.

We want to keep our users updated on news and other interesting information regarding or relating to our Service. For this reason, we provide information through newsletters and text messages. You can choose to subscribe to the receivers’ list for these send outs. If so, we will use Your e-mail address and/or telephone number for this purpose. By subscribing, You provide Your consent to this processing of Your personal data. You can always notify us, at any time, that You no longer want to receive such emails or text messages, i. a. by clicking on the deregistration link in each respective communication we send You, whereby this processing of Your personal data will stop.

3. Recipients who can review personal data

We use the personal data solely within our own organisation to administrate, operate and develop the Service, and do not sell, trade or otherwise transfer personal data. However, it may be transferred to and shared with other recipients, such as other group companies or service providers or other companies with which we cooperate, e.g. personal data processors who we retain to process personal data. In such events, all transfers of the personal data are regulated though agreements to secure the protection and integrity of our users’ personal data. The personal data is stored in MongoDB Atlas with Amazon Web Services (AWS) in Ireland. In particular, developers will be able to access the data, and so also administrators handling developer access.

We do not transfer collected personal data to a third country, i.e. any country outside of the EU/EEA. However, transfer may take place if, for example, we have retained a processor to carry out certain processing. Transfer of personal data to a third country always requires a legal basis for such transfer.

4. Length of time that the data is stored

Personal data is saved for as long as You have an account and a user relationship to the Service and to us. However, Your account and data may be erased if no meaningful usage of the account has taken place and a period of 12 consecutive months has elapsed.

If You wish to close Your user account, You can easily do it in the account settings while You are logged in.

When Your account has been closed, we will erase Your personal data without delay and no later than required from time to time under applicable data protection legislation, or an order of a court or public authority. Your data may be stored otherwise for a longer time if we are subject to applicable legislation requiring us to continue to store the data.

5. Information regarding Your rights under the General Data Protection Regulation

According to the provisions of the EU General Data Protection Regulation (GDPR), You have rights including the following:
– To obtain, free of charge and upon request, access to, and a copy of, the personal data about You which is processed (Article 15);
– To have inaccurate information rectified or incomplete data completed (Article 16);
– To request, in those cases and subject to the conditions stated in the GDPR, erasure of Your personal data (Article 17);
– To obtain restriction of such processing which involves Your personal data (Article 18);
– To object to the processing which takes place (Article 21); and
– To receive and transfer such personal data which You have provided to us in accordance with what is known as the right to data portability (Article 20).

6. Revocation of consent, deregister from receiving newsletters and other mailouts

To the extent we process personal data, and this is based on You consent, You are entitled to revoke Your consent at any time.

You can always deregister from receiving newsletters or other mailouts by notifying us at any time, or by clicking on the deregistration link in each respective communication we send You.

7. Revocation of consent, deregister from receiving newsletters and other mailouts

Whalebone Interactive AB (publ) operates and is responsible for the Service and is the controller for the processing of personal data which takes place.

Whalebone Interactive AB (publ), Swedish companies reg. no: 559050-3099
Postal address: Skeppargatan 55, 114 59 Stockholm, Sweden
Responsible officer at the company: Stanislav Izotov, email:

8. Right to submit a complaint

If You are dissatisfied or have any criticism of the processing of personal data which is carried out, You are always entitled to submit a complaint to the Swedish Data Protection Authority, or to any other relevant supervisory authority. For contact information and other information about the Swedish Data Protection Authority, we refer to the authority’s website

9. Changes to this privacy policy

We may come to make changes and amendments to this privacy policy over time. When these changes and/or amendments are material we will inform You in a manner we see appropriate to ensure that You have received the information. This may be through sending You an email, through an information notice in the Service, or in another manner. We encourage You to read such notices carefully.

10. Applicable law

We are a Swedish company domiciled in Sweden. This privacy policy shall be construed in accordance with the laws of Sweden and the from time to time applicable mandatory EU legislation, unless consumer protection legislation demands otherwise.

Contact us

If You have questions or would like more information regarding the processing of personal data which takes place, You are welcome to contact us; see contact information in the footer below.

Last Edited on 2019-10-16