PRIVACY POLICY
Last updated: February 23, 2026
1. Introduction
BassWav (“BASSWAV”, “we”, “us”, or “our”), operates the website basswav.com and related services. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website, submit demos, attend events, or interact with our services.
We are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR — EU 2016/679), the Dutch Implementation Act (Uitvoeringswet AVG — UAVG), and other applicable data protection legislation.
2. Data Controller
The data controller responsible for your personal data is:
3. Personal Data We Collect
We may collect the following categories of personal data:
3.1 Data you provide directly
- Demo submissions: Artist name, email address, track title, genre, demo link (e.g., SoundCloud/Dropbox URL), bio, and how you found us.
- Event registration: Name, email address, phone number (if required for ticketing).
- Contact inquiries: Name, email address, message content.
- Newsletter: Email address (only if you opt in).
3.2 Data collected automatically
- Technical data: IP address, browser type and version, operating system, device type, screen resolution.
- Usage data: Pages visited, time spent on pages, referring URL, click patterns.
- Cookies: See our Cookie Policy for details.
3.3 Data from third parties
- Streaming platforms: Publicly available data from Spotify, SoundCloud, YouTube (e.g., play counts, follower counts) for artists on our roster.
- Social media: Publicly available profile information when you interact with our social media accounts.
4. Legal Basis for Processing (GDPR Article 6)
We process your personal data based on the following legal grounds:
Consent (Art. 6(1)(a)): When you submit a demo, sign up for our newsletter, or accept non-essential cookies. You may withdraw consent at any time.
Contract (Art. 6(1)(b)): When we process data necessary to perform a contract with you (e.g., artist agreements, event tickets).
Legitimate interest (Art. 6(1)(f)): For website analytics, fraud prevention, improving our services, and direct marketing to existing contacts (with opt-out option).
Legal obligation (Art. 6(1)(c)): When required by Dutch or EU law (e.g., tax records, legal disputes).
5. How We Use Your Data
- Review and respond to demo submissions
- Communicate with you about events, releases, and label news
- Process event registrations and ticket purchases
- Improve our website and user experience
- Analyze website traffic and usage patterns
- Prevent fraud and ensure website security
- Comply with legal obligations
6. Data Sharing and Third Parties
We do not sell your personal data. We may share data with:
- Service providers: Hosting (Vercel), email services, analytics platforms, ticketing systems — all bound by data processing agreements.
- Streaming platforms: When distributing releases (Spotify, Apple Music, SoundCloud, etc.).
- Event partners: Venues and co-promoters for event logistics.
- Legal authorities: When required by law or to protect our legal rights.
7. International Data Transfers
Some of our service providers may be located outside the European Economic Area (EEA). When we transfer personal data outside the EEA, we ensure appropriate safeguards are in place, including:
- EU-US Data Privacy Framework (for US-based providers)
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Adequacy decisions by the European Commission
8. Data Retention
We retain your personal data only as long as necessary:
9. Your Rights (GDPR Articles 15-22)
Under the GDPR, you have the following rights:
Right of Access
Request a copy of your personal data
Right to Rectification
Correct inaccurate or incomplete data
Right to Erasure
Request deletion of your data ("right to be forgotten")
Right to Restriction
Restrict processing of your data
Right to Data Portability
Receive your data in a structured, machine-readable format
Right to Object
Object to processing based on legitimate interest or direct marketing
Right to Withdraw Consent
Withdraw consent at any time without affecting prior processing
Right to Lodge a Complaint
File a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens)
To exercise any of these rights, contact us at info@basswav.com. We will respond within 30 days.
10. Security Measures
We implement appropriate technical and organizational measures to protect your personal data, including:
- HTTPS encryption for all data in transit
- Access controls and authentication for internal systems
- Regular security assessments
- Data minimization — we only collect what we need
11. Children's Privacy
Our services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at info@basswav.com and we will promptly delete such data.
12. Changes to This Policy
We may update this Privacy Policy from time to time. The updated version will be indicated by an updated “Last updated” date. We encourage you to review this page periodically. Continued use of our website after changes constitutes acceptance of the updated policy.
13. Contact
If you have any questions about this Privacy Policy or our data practices, contact us:
You also have the right to lodge a complaint with the Dutch Data Protection Authority:
Autoriteit Persoonsgegevens
autoriteitpersoonsgegevens.nl