InBar Privacy Policy
1. General provisions
This Privacy Policy sets out and explains how MXF (VšĮ Muzikos eksporto fondas, company code: 303996887, registered office: S. Konarskio g. 2-27, Vilnius, Lithuania), as a data controller, process your personal data when you use the MXF service InBar, mobile and desktop apps and all related sites, tools and other services provided by MXF.
MXF uses the SMS platform TCG Telecom and the hosting service Heroku to provide the InBar service.
MXF process you personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as the GDPR), Law on Legal Protection of Personal Data of the Republic of Lithuania, as well as other legal acts of the European Union and the Republic of Lithuania.
By providing your personal data, you agree that MXF will process them for the purposes, means and procedures provided for in this Privacy Policy and legal acts.
If you do not agree to any of the provisions of the Privacy Policy, you should not use InBar.
2. Personal data we collect from you
Personal information about you is created through your use of InBar. This includes information that you send to InBar, such as your mobile phone number and location, and your interactions with the platform. You are not obliged to provide your personal data to MXF, but in case you fail to provide such data, you might not be able to use InBar or part of its services.
3. Purposes and legal grounds for data processing
MXF may process the personal information created through your use of InBar for the purposes of providing its services.
The legal basis for your personal data processing is your consent (Article 6 (1) (a) of the GDPR) expressed by you when using InBar and MXF`s legitimate interest related to its service provision (Article 6 (1) (f) of the GDPR).
4. Recipients of personal data
MXF may share your personal information with the relevant authorities in the Republic of Lithuania for the purposes of tracing those who may have been infected with the COVID-19 virus. MXF will only share this information for this purpose if lawfully requested to do so.
MXF may share anonymised information created through your use of InBar with The state51 Music Group Ltd, which is located in the United Kingdom. The state51 Music Group Ltd may use this anonymised information about you solely for the purpose of its legitimate interest in analysing the economics of the music industry, and the success and failure of music in domestic and export markets. The state51 Music Group shall store and process your anonymised information on secure technology owned by The state51 Music Group.
The state51 Music Group Ltd may work with select research partners who may be permitted access to anonymised information about you for the purposes of collaborating on research and analysis into the economics of the music industry, and the success and failure of music in domestic and export markets, and the research partners shall only have access to such personal information using secure technology infrastructure owned by The state51 Music Group and shall not be permitted to export your anonymised information. The state51 Music Group shall not share the anonymised information created through your use of InBar with any other third party.
Financial information connected to payments may be collected or stored by a third-party payment processor and is subject to their terms and policies.
MXF will not contract with any third party for the processing of personal data unless they have the appropriate data handling certification and comply with appropriate laws. MXF uses appropriate and legally approved safeguards to ensure the lawful transfer of your personal data outside of the EEA.
5. Children
InBar is not intended for children under the age of 14 years. If you are under this age limit, please do not use InBar and do not provide any personal data to us. We do not knowingly collect personal data from children under 14 years. If it comes to our attention that we have collected personal data from a person under the age of 14, we will delete this information as quickly as possible. If you have reason to believe that we may have collected any such personal data, please immediately notify us by emailing info@inbar.lt.
6. Storage period
We store your personal data for no longer than is necessary for the purposes for which the personal data are processed. The period for which data is stored will depend on the specific nature and circumstances under which the information was collected.
7. Information security
Taking into account the nature, scope, context and purposes of processing as well as the risks of varying likelihood and severity for the rights and freedoms of natural persons, MXF implements appropriate organizational and technical measures to ensure the protection of personal data against accidental or unlawful destruction, alteration, disclosure, and any other unlawful processing.
8. Links to other sites
When using InBar, you may find links to the third-party websites. MXF is not responsible for the content of these websites or the privacy practices used by them. We recommend you to review their privacy policies to find out how they collect and process your personal data.
9. Your rights
You have the following rights related to the processing of your personal data:
- the right to know (to be informed) about the processing of your personal data (right to know);
- the right to access to your personal data and how they are processed (right of access);
- the right to require to rectify or to complete incomplete personal data having regard to the purposes for which the personal data are processed (right of rectification);
- the right to have personal data deleted (‘the right to be forgotten’);
- the right to require to restrict the processing of personal data (right to restrict processing);
- the right to transmit personal data (right to data portability);
- the right to object to the processing of personal data;
- the right to withdraw your consent freely and without interruption at any time, without affecting the lawfulness of processing based on consent before its withdrawal;
- the right not to be subject to a decision based solely on automated processing, including profiling;
- the right to submit a complaint to the State Data Protection Inspectorate of the Republic of Lithuania.
You can apply to MXF for the exercise of the above listed rights either verbally or in writing, by submitting a request in person, by post to S. Konarskio g. 2-27, Vilnius, Lithuania or by email at info@inbar.lt.
Your rights shall be exercised in accordance with the provisions of the GDPR and the legal acts of the Republic of Lithuania.
10. Contacts
If you have any questions about this Privacy Policy, you can contact us by writing to us at the address S. Konarskio g. 2-27, Vilnius, Lithuania or emailing info@inbar.lt.
11. Changes to this Privacy Policy
MXF reserves the right to unilaterally amend and / or supplement this Privacy Policy. All changes will be announced by posting the revised Privacy Policy on the website inbar.lt and such Privacy Policy shall take effect from the day of announcement.
Please be sure to periodically check this page to ensure that you are aware of any changes to this Privacy Policy. Your continued access to or use of InBar after the effective date of such changes will be subject to the revised Privacy Policy.
Last Amended: 5th September 2020.
This privacy policy is declared in Lithuanian and English.
In case of contradictions between the English and Lithuanian texts, the Lithuanian text shall prevail.