How we handle your personal data
How we handle your personal data
When we talk about ‘user account’, account’, ‘user name’, ‘member’ or ‘membership’, this refers to having a user account at Nonstop2k.
Wherever we talk about anonymizing your data this means we remove your personal data, such as email and IP address, but we keep a log of what happened. For instance when someone unsubscribes we will know that someone unsubscribed, but not who because we remove that e-mail address.
When you use our website we collect general user data, such as your IP Address and time stamp of action, type of device, browser and other technical data. We also log which MIDI files are downloaded, which previews are listened to and what people search for.
We use this data to see how our website is used, what people search for, what content is popular, to detect or prevent abuse, to limit access, to prevent duplicate downloads of premium members, for debugging or to improve our website.
We keep server logs for no longer than 1 week, unless required to analyze suspicious activity. MIDI search history is anonymized after 1 year. Download history is anonymized after 1 year if you have an account and deleted for other users. If your account is removed the download history is deleted after 1 year as well. MIDI Preview play history is anonymized after 2 weeks. Failed login attempts are kept until successful login. Ratings and favorites are tied to your account. They become anonymous when your account is removed. MIDI reports or suggestions are kept until they are processed, which is generally within 1-2 weeks, but it may take longer in busy periods.
When suspicious activity is detected we could keep certain data for as long as required to prevent abuse.
When you create an account at Nonstop2k we require a uniquely identifiable name (your user name) and a password. Both are of your own choosing. We also require a valid e-mail address and store the IP address. An account allows you to benefit from additional content and to use certain features, such as rating and adding MIDI files to your favorites, and gives you the opportunity to purchase premium access. Your email address will be used to identify you as the owner of the account. If your account has email notifications turned on, we will use it to email you notifications about your account, such as when your premium membership expires.
We keep this data for as long as your account is active and in use. When an account is not used for 2 years we will remove it and its data. Incomplete registrations are removed monthly.
In your account you may choose to save optional information, such as social media accounts. This will be available on your profile page and is solely for your own benefit or promotion of your music. Nonstop2k does not need this to function, nor we do we use it other than on your profile page. We keep it until you alter or delete it, or your account is removed. The data that can be saved is: your SoundCloud, snapchat, instagram or twitter account, website, occupation or interests.
When you make a purchase in our shop we require the following information to complete the transaction: User name (if you order a premium membership), first name, last name, company name (optional), country, address, post/zip code, city, e-mail address and EU VAT number (required for EU businesses only). Your IP address is also logged.
The data will be saved to our database when you proceed to PayPal. If you do not complete your payment the data is removed after 1 month. If you complete the transaction Dutch tax administration requires us to keep this data for 7 years.
When you upload a MIDI we collect the data you fill out in the MIDI upload form. For guests this will be anonymous, except for the general IP logging in the server logs. If you are logged into your user account when you upload a MIDI we will also store your user name. We use it to show you are the creator of a MIDI. Your user name is tied to the MIDI, when your account is removed we will keep your user name as creator.
When you request a MIDI via any MIDI request page your IP is logged. If you have a user account the ID for this account is logged as well. We use it so you can only request a MIDI once and to avoid abuse. You have the option to get a notification about your MIDI request. If you submit your email address here and choose the maximum notification period, this email address will be used to notify you about that particular request once: upon completion of the MIDI, or upon reaching the maximum notification period. After reaching the maximum notification period your email address, IP and user ID are removed for this request. It is possible to make several requests, email address and notification period are tied to the request itself. This means that if request A expires and the data is removed, you will still be notified about request B if you chose to receive a notification.
Currently there is no way to leave a comment on our website or to make a post in the forum. Forum posts posted in the past will not be removed unless they break our terms of service or forum rules. Each topic and its posts are seen as a journalistic, academic or artistic expression. Removal of a post disturbs the discussion and interferes with the freedom of expression. However when a user account is removed the author data is anonymized.
When you subscribe to our newsletter we collect your first name, e-mail address and IP address. If you are not logged into your account at Nonstop2k we require you to verify your e-mail address. We will use this data to send you our newsletter in which we inform you about new MIDI releases, information about our website or music production or product offers. You can unsubscribe for our newsletter at any time by clicking the unsubscribe link at the bottom of each newsletter e-mail.
We keep this data for as long as your subscription is active. If you do not verify your e-mail address your subscription will not become active and we will remove your data after 1 month. When you unsubscribe we anonymize your data after one year. We also keep the log of unsubscribing and the log of your original consent for one year after unsubscribing.
When you contact us via our website we collect the data you fill out in the form (name, e-mail address, reason for contacting and your message) and use it to answer your question. We also collect your IP address to detect abuse and prevent spam. Google reCAPTCHA is used to check if you are a human and not a robot, this keeps the spam away too. We analyze this data to understand why people are contacting us.
When you e-mail us directly we have the information that is in your e-mail and use that to reply.
We anonymize the data in our database after 1 year. E-mail conversations are removed after 1 year. If you are a MIDI maker we will keep our e-mail conversations for as long as you are part of the team.
Some parts of our website require the use of third parties for it to function correctly. We will describe each of these below:
On every MIDI download page we show a Facebook Page plugin. It allows you to interact with our Facebook page and community. It doesn’t place any cookies, but Facebook will know that your IP requests this feature. You may disable the Page plugin on the cookie page.
We only give your data to a third party when it is necessary to fulfill a contract or when we are required by law. Some third parties handle your data for us, for instance our webhost. When this is the case we have a Data Processing Amendment. We never sell your data to anyone.
You may choose to opt out for Google analytics on all websites. To do so you can use a browser addon by Google.
Vimexx is our webhost and makes sure you can reach Nonstop2k. Our data is stored on their servers and they are responsible for keeping the servers secure. There is a Non Disclosure Clause in our contract and they are bound not to share our data with others, unless required by law.
Our data collection is based on three lawful bases for processing. When you order in our store this is contract. We need your data to complete your purchase and send you an invoice.
The lawful basis when you subscribe to our newsletter is consent. By subscribing you give us permission to use the data you submit.
In all other cases we have a legitimate interest. The details for this are described in the previous paragraphs for specific situations in which data collection occurs.
Your data is stored in several databases which are hosted on our webserver in the European Union. We periodically create encrypted backups of our data bases. Our Google Analytics data is stored on Google’s servers, which may be located in another country then where you are from. Google complies with certain legal frameworks relating to the transfer of data, such as the EU-US and Swiss-US Privacy Shield Frameworks, ensuring the equivalent level of protection with EU law.
You are in charge of your data. Therefore you may ask us for an overview or a copy of your information. You may also ask us to correct or delete your personal data. Where we have asked for your consent to process your data you may withdraw this at any time.
There are two exceptions where you can't make use of these rights:
If you wish to make use of any of these rights please contact us. To be sure it is really you we will ask you to verify your identity. We also do this if you use a third party service.
For questions or complaints about the way we handle your data you can contact us and select the privacy option. If you are not satisfied with how we deal with your personal data you can file a complaint at the Dutch Data Protection Authority or the authority in your own country.
That's us: Nonstop2k. We are registered at the chamber of commerce of Rotterdam, The Netherlands. Our registration number is: NL 66998344 and our VAT number is NL001102999B62.
The best way to contact us is via our contact page, but you can also e-mail us directly: firstname.lastname@example.org.
Written letters may be sent to: Nonstop2k, Oude Binnenweg 63 A, 3012 JA, Rotterdam, The Netherlands