GEA LEGAL // POLICY DOCUMENTATION v2.4
COMPLETE PRIVACY & DATA GOVERNANCE POLICY
Effective Date: November 4, 2026 | Last Updated: November 2026
ARTICLE 01Data Controller & Entity Identification
This Privacy Policy governs all websites, subdomains, web applications, and digital services operated by Global EDM Authority (GEA).
- Corporate Data Controller: Jacques Maurice Julie t/a Global EDM Authority
- Swedish Corporate Reg. No.:
19880121-6816 - EU VAT Identification:
SE8801216816 (Godkänd för F-skatt, Bolagsverket Certified) - Asia-Pacific Operations Reference:
PH-2026-GEA-0881 (Nabunturan, Davao Region, Philippines) - Data Protection Desk Email:
office@globaledmauthority.com
ARTICLE 02Categories of Data Collected
Depending on which GEA services you utilize, we collect and process the following specific data categories:
- Contact & Identity Telemetry: Legal name, artist/DJ alias, email address, phone number, residential/business address, government-issued tax IDs (for royalty reporting).
- Musical Composition & Sound Recording Metadata: Track titles, ISRCs, ISWCs, CWR work details, songwriter/publisher split ratios, PRO affiliations (e.g., ASCAP, BMI, PRS, STIM), and CMO records.
- Audio Assets & Stems: Unreleased master recordings, stems, mixing project files, and press assets submitted via Demo Drop, Mixing/Mastering, or Release Slate forms.
- Financial & Payout Telemetry: Bank account details (IBAN/SWIFT), Wise identifiers, GCash/Maya phone references, invoice history, and tax withholding documentation.
- Technical & Analytics Data: IP addresses, browser fingerprinting, device telemetry, referral URLs, and cookie tokens via GA4/RankMath optimization.
ARTICLE 03Legal Basis & Processing Purposes
We process your personal data strictly under valid legal bases set forth in Article 6 of the EU GDPR:
- Contract Performance (Art. 6(1)(b)): Executing Publishing Administration agreements (70/30 split), Neighboring Rights collection (80/20 split), Mixing/Mastering deliverables, PR distribution campaigns, and Artist Management retainers.
- Legal Obligation Compliance (Art. 6(1)(c)): Fulfilling Swedish tax law requirements (F-skatt accounting, VAT reporting, financial record retention for 7+ years) and international anti-money laundering (AML) controls.
- Legitimate Business Interests (Art. 6(1)(f)): A&R scouting review, platform cyber-security enforcement, fraud prevention, and performance telemetry analysis.
- Explicit Consent (Art. 6(1)(a)): Delivering weekly newsletter intel dispatches (via
Newsletter application) and marketing updates. Consent may be revoked instantly at any time.
ARTICLE 04Data Sharing & International Disclosures
GEA never sells, rents, or monetizes your personal data. Disclosures are made exclusively to authorized third-party infrastructure partners necessary to fulfill our contracts:
- PROs & CMOs: Registration of works with societies including ASCAP, BMI, PRS, SoundExchange, PPL, STIM, and global Mechanical Licensing Collectives.
- Digital Service Platforms (DSPs): Delivery of audio files and metadata to Spotify, Apple Music, Beatport, Amazon Music, and social video networks.
- PR & Syndication Outlets: Press release distribution to accredited electronic dance music media portals and Google News syndication channels.
- Financial Gateways: Settlement routing via Wise, ZenPay, Stripe, GCash, Maya, and institutional SWIFT banking channels.
- Cloud & Hosting Partners: Hostinger VPS infrastructure, Cloudflare DNS security, and cloud transfer platforms (WeTransfer, Dropbox, Google Drive).
ARTICLE 05Cross-Border Data Transfers
Because GEA maintains dual operational infrastructure across the European Economic Area (EEA) and the Asia-Pacific region (Philippines), your data may be transferred internationally:
- All cross-border transfers between Sweden, the Philippines, and global server nodes are protected under Standard Contractual Clauses (SCCs) approved by the European Commission.
- Data processing in the Philippines complies with Republic Act No. 10173 (Philippine Data Privacy Act of 2012) and National Privacy Commission (NPC) mandates.
ARTICLE 06Data Retention & Storage Lifespans
We store personal data only as long as required for legal, accounting, or operational fulfillment:
- Financial & Royalty Records: Retained for 7 years following the end of the calendar year to satisfy Swedish corporate accounting laws (Bokföringslag).
- Publishing & Master Metadata: Retained for the active duration of the copyright administration agreement plus 3 years to resolve retroactive Black Box claims.
- Audio Stems & Mix Projects: Stored securely during project execution and archived for 90 days post-master delivery unless extended storage is contracted.
- Newsletter & Marketing Subscribers: Retained until the user executes an opt-out/unsubscribe command.
ARTICLE 07Your Sovereign Data Rights
Under EU GDPR, CCPA/CPRA, and Philippine Data Privacy law, you possess enforceable data rights:
- Right to Access & Portability: Request a complete copy of all personal data, ISRC catalogs, and financial accounting held by GEA in a machine-readable JSON/CSV format.
- Right to Rectification: Request instant correction of inaccurate metadata, writer splits, or contact details.
- Right to Erasure ("Right to be Forgotten"): Request full deletion of your personal data, subject to statutory tax record retention requirements.
- Right to Restrict or Object: Object to processing based on legitimate interests or revoke marketing/newsletter consent instantly.
ARTICLE 08Cookie Policy & Web Telemetry
Our website utilizes minimal essential and analytical cookies to ensure system stability and performance:
- Essential Cookies: Session state, security tokens, and form processing mechanisms.
- Analytical Telemetry: Google Analytics (GA4) with IP anonymization enabled to monitor traffic trends and user experience without tracking individual profiles.
- Cookie Controls: You may adjust browser settings to reject non-essential cookies without degrading core site functionality.
EXERCISE YOUR DATA RIGHTS OR REQUEST A PRIVACY AUDIT
To submit a formal Data Subject Access Request (DSAR), request catalog deletion, or query our data protection framework, reach our Data Protection Officer directly.
