1. Who is responsible?
PSG Music, trading as PSG Music Publishing, is the controller for personal data collected through this website. Dutch Chamber of Commerce number: 24366305. Privacy questions and requests can be sent to info@psgmusic.nl.
2. What data do we process?
When a brief is submitted, we process only the information needed to assess and answer it.
- Name, email address and optional company or production.
- Project type, deadline, music request, intended use and optional budget information.
- The content and technical file details of an optional uploaded brief.
- Limited technical and security data processed by the hosting provider to deliver the site and prevent abuse.
3. Purposes and legal bases
We use briefing data to answer enquiries, curate music, check rights and availability, discuss a possible licence and secure the website.
Depending on the situation, processing is based on steps taken at your request before a contract, performance of a contract, a legal obligation or our legitimate interests in business communication, security and proper administration. The required checkbox confirms that this statement has been read; it does not replace a lawful basis.
4. Briefs and other people’s data
The sender must be authorised to share information and any personal data about colleagues, creators, cast, clients or other participants. Do not upload identity documents, bank details, medical information, children’s data or other sensitive or unnecessary personal data.
Personal data about third parties is used only for the relevant brief. Where required, PSG assesses whether that person must be informed directly under GDPR Article 14. Non-public personal data is not published without an appropriate legal basis or permission.
5. Recipients, hosting and transfers
Only authorised people within PSG can access briefs. The website uses OpenAI Sites and infrastructure provided by sub-processor Cloudflare for hosting, database and file storage. These providers process data to deliver and secure the service under their agreements.
For processing outside the European Economic Area, the applicable provider documentation states that safeguards such as adequacy decisions and Standard Contractual Clauses are used. Personal data is not sold.
6. Retention and deletion
A brief that does not become an active project is retained in the protected briefing environment for no more than 12 months. Expired briefs are automatically cleaned up during system maintenance events, including a new submission or opening the briefing inbox. PSG can delete a brief earlier.
Data relating to active projects, licences or agreements is kept only as long as needed for performance, rights administration, disputes or statutory record keeping, then deleted or anonymised.
7. Cookies, video and external services
The website does not place its own marketing or tracking cookies and does not run its own visitor profiling. Strictly necessary technical storage may be used for hosting or secure sign-in.
YouTube videos load only after the visitor presses the video button and use the privacy-enhanced youtube-nocookie.com player. Playing audio or opening an external link may connect to YouTube/Google, Apple, [untitled], Spotify, Shazam or the linked source. From that moment, the third party’s privacy policy also applies.
If non-essential analytics, advertising or tracking technologies are added later, PSG will request valid prior consent and visitors will remain free to refuse.
8. Professional credits, names and logos
Professional credits and company information are limited to relevant, verifiable information from public sources, PSG records or rights holders. PSG aims to keep these references accurate and current.
Third-party names, brands, logos, videos and other materials remain the property of their respective owners and are used only to identify work, credits or collaborations. Corrections, source enquiries or reasoned removal requests can be sent to info@psgmusic.nl.
9. Your rights and security
You may request access, correction, deletion, restriction, portability or object to processing. Where processing is based on consent, consent can be withdrawn. PSG may request reasonable identification and will respond within the legal period. You may also complain to the Dutch Data Protection Authority.
Briefs and files are kept in protected storage. The inbox and downloads require an authorised sign-in, and downloads are not publicly cached. No security measure is absolute, but PSG limits access and processing to what is necessary for the purpose.