Last updated:
If you are in the European Economic Area (EEA) or the United Kingdom, the General Data Protection Regulation (GDPR) and the UK GDPR give you rights over your personal data. This page explains how they apply to Spot Downloader. Read it together with our Privacy Policy.
Data controller
Downloaderize is the controller of personal data processed through the Service. Contact: privacy@downloaderize.com.
What we process and why
| Data | Purpose | Legal basis |
|---|---|---|
| Hashed IP, Spotify id of the requested item, outcome, time | Operating the Service, security, abuse prevention, statistics | Legitimate interests (Art. 6(1)(f)) |
| Search words or submitted Spotify link (not stored) | Providing the download you request | Performance of your request (Art. 6(1)(b)) |
| Name, email, message | Responding to your enquiry | Legitimate interests (Art. 6(1)(f)) |
| Privacy request details | Handling and documenting your request | Legal obligation (Art. 6(1)(c)) |
| Analytics / marketing cookies | Measuring and improving the Service and advertising | Consent (Art. 6(1)(a)) |
Your rights
- Access (Art. 15): get a copy of your personal data.
- Rectification (Art. 16): correct inaccurate data.
- Erasure (Art. 17): have your data deleted.
- Restriction (Art. 18): limit how we use your data.
- Portability (Art. 20): receive your data in a machine-readable format.
- Objection (Art. 21): object to processing based on legitimate interests.
- Withdraw consent at any time on the Cookie Preferences page, without affecting earlier processing.
We do not make decisions based solely on automated processing that produce legal or similarly significant effects about you.
A note on pseudonymised logs
Our usage logs store only a salted hash of your IP address. Because we cannot link a hash back to you from the data we hold, we may be unable to locate log entries about you unless you provide the information needed to identify them (GDPR Art. 11).
How to exercise your rights
Use our privacy request form or email privacy@downloaderize.com. We respond within one month (extendable by two months for complex requests, in which case we’ll tell you why). Requests are free unless manifestly unfounded or excessive.
Complaints
You can lodge a complaint with the data protection authority in your country of residence, work or the place of the alleged infringement. In the UK, this is the Information Commissioner’s Office (ico.org.uk). We’d appreciate the chance to resolve your concern first.