Privacy.

Version 2.0 · Effective 2026-09-09 · Last updated 2026-09-09

This notice explains how Zime Media AB processes personal data in connection with this website and with enquiries, demos and business correspondence sent to us. It is provided under Articles 12 to 14 of the General Data Protection Regulation (EU) 2016/679.

1. Who is responsible

The controller is Zime Media AB, a Swedish aktiebolag, organisation number 559511-6509, registered seat Helsingborg, Sweden. Business address: Järnvägsgatan 7, Helsingborg, Sweden.

Privacy contact: privacy@zimemusicgroup.com. We have not appointed a Data Protection Officer, as we are not required to do so.

2. What we process

• Enquiries you send us — name, email address, company or artist name, enquiry type, any link you include and the content of your message.
• Email and social correspondence — whatever you choose to include when you write to us at one of our published addresses or channels.
• Demo and A&R submissions — see section 5.
• Technical data — IP address, browser and device information and requested pages, processed by our hosting provider in server logs to deliver the site and protect it against attack and abuse.
• Consent record — your cookie choices, the time of the choice and the policy version, stored in your own browser.

We do not run analytics, advertising or profiling technology on this site, so we hold no analytics identifiers, marketing identifiers or behavioural profiles. We do not ask for and do not want special-category data (health, political opinions and similar), national identity numbers, passport details, banking details or passwords.

3. Why we process it, and on what legal basis

4. Contacting us

This website has no contact form and stores no messages. You contact us directly, by email or through the channels we publish. When you write to us, we process the information you choose to send: your name, your email address and the content of your message. We use it only to read, answer and handle your enquiry. We do not sell your data, do not add you to any marketing list because you wrote to us, and do not publish anything you send.

5. Demos, music submissions and A&R

This website has no upload portal and no submission database. Artists, producers, songwriters and their representatives may nevertheless send music and information voluntarily, using the contact details we publish or other channels such as email or social media.

Such a submission may contain:

• artist, producer or project name, and a legal name if you choose to give one;
• email address, and a phone number if you provide one;
• social media profiles and artist or project information;
• song titles, track metadata, private streaming or download links, audio files and artwork;
• songwriter and producer credits, and information about any existing label, publisher, distributor or representative you choose to share;
• the contents of your message and our correspondence with you.

Purposes. Reviewing the music, A&R evaluation, deciding whether we want to work with you or the track, contacting you about the submission, discussing a possible recording, licensing, distribution, publishing or marketing relationship, keeping reasonable internal A&R records, avoiding reviewing the same submission repeatedly, and documenting previous business communication where necessary. We may keep appropriate information so a track, artist or sender can be considered again for future opportunities within the retention period. That is not permission to send you unrelated marketing: newsletters and promotional messaging are handled separately and only where the applicable direct-marketing rules allow.

Legal basis. Legitimate interest in reviewing business and creative opportunities, and steps taken at your request before a possible contract. Consent is used only where a separate purpose specifically requires it.

Where it is stored. Submissions and related correspondence are held in the systems we use for email, cloud storage, internal A&R organisation and business communication. These providers act as processors for us under a data processing agreement, and store the data within the EU/EEA. Access is limited to the people who need it for these purposes.

Third-party links you send. If you share a Dropbox, Google Drive, WeTransfer, SoundCloud, Spotify or other third-party link, that service processes personal data under its own privacy practices, which we do not control. We do not embed or load third-party tracking content on this site because such a service is mentioned.

Intellectual property. Sending music to us for consideration does not, by itself, transfer ownership or any intellectual property rights in the submitted material. No copyright, master ownership, publishing right, exclusive licence or songwriter right is assigned by making a submission. Any rights arrangement would require a separate written agreement.

Please do not send national identity numbers, passport or banking details, health information, passwords or other sensitive information. We only need what is relevant to evaluating and discussing the submission.

6. Job applications and recruitment

This website has no application upload form. Applications and expressions of interest reach us by email or through another channel you choose, including any application address published on a specific job page.

An application may contain:

• name and contact details;
• CV and cover letter;
• employment history and education;
• portfolio, work samples, playlists or other links you share;
• LinkedIn or other profile links;
• any other information you volunteer during the recruitment process, including notes from interviews and references you put us in touch with.

Purposes. Assessing your application, communicating with you about it, running interviews and reference conversations, and documenting the recruitment decision.

Legal basis. Steps taken at your request before entering a contract (Art. 6(1)(b)), and our legitimate interest in evaluating candidates and documenting a recruitment process (Art. 6(1)(f)). If you ask us to keep your application on file for future openings, that is based on your consent (Art. 6(1)(a)), which you can withdraw at any time.

Access and storage. Applications are held in access-controlled business systems and seen only by the people involved in the recruitment. CVs and application material are never published, and we do not share them outside the company except with providers acting as processors for us.

Retention. Application material is deleted 6 months after the recruitment closes, which covers the period for a discrimination claim. If you ask us to keep your application on file for future openings, we keep it on that basis until you withdraw your consent.

Please do not send your national identity number, banking details, health information or any other sensitive data with an application. We do not need it to assess you. Your rights in section 10 apply in full to recruitment data.

7. Who receives your data

We do not sell personal data. We share it only with service providers acting as processors under a data processing agreement, and only as needed:

• website hosting and content delivery;
• email provider;
• cloud storage used for A&R material and business documents;
• accounting and administration;
• distribution, publishing administration and royalty partners, where a business relationship exists;
• professional advisers, and public authorities where the law requires it.

Each of these providers is bound by a data processing agreement, may only act on our instructions, and is chosen so that the data is stored within the EU/EEA. If you want to know which provider handles a specific part of your data, write to privacy@zimemusicgroup.com and we will tell you.

8. Transfers outside the EU/EEA

Our email and storage accounts are configured to keep data within the EU/EEA, and we do not routinely transfer personal data outside it. If a provider ever needs to process data outside the EU/EEA, for example for support, that transfer relies on a valid mechanism: an adequacy decision, the EU-US Data Privacy Framework where the provider is certified, or Standard Contractual Clauses with supplementary measures. We update this section if that changes.

9. How long we keep it

• Enquiries and correspondence: deleted 24 months after the last contact, unless an ongoing business relationship or a legal obligation requires longer
• Demo and A&R submissions: deleted 24 months after the latest interaction, unless discussions, an agreement, an existing business relationship or a legal claim require longer
• Contract, accounting and royalty records: 7 years, as required by the Swedish Accounting Act (bokföringslagen).
• Server logs: kept by our hosting and content delivery provider for a short period, for security and reliability only
• Consent record: stored in your browser until you withdraw it or clear your browser storage.

10. Your rights

You have the right to access your personal data, to have it corrected or erased, to restrict or object to processing (including objecting to processing based on legitimate interests), and to data portability where applicable. Where processing is based on consent, you may withdraw it at any time without affecting processing already carried out. To exercise a right, write to privacy@zimemusicgroup.com. We may need to keep certain information despite an erasure request, for example because of an existing contract, ongoing negotiations, accounting obligations or legal claims, and we will tell you if that applies.

You may also lodge a complaint with the Swedish supervisory authority, Integritetsskyddsmyndigheten (IMY), or with the authority in your country of residence.

11. Automated decision-making

We do not carry out automated decision-making or profiling that produces legal or similarly significant effects within the meaning of Article 22 GDPR. Demos are reviewed by people.

12. Security

The site is served over HTTPS with security headers and a content security policy. Submissions and files are handled in access-controlled business systems and shared only with those who need them.

13. Cookies

See the Cookie Policy, or open Cookie Settings to change or withdraw your consent.

14. Updates

We update this notice when our processing changes. The version and dates are shown at the top. Where a change is significant, we will make it clear on the website and, where appropriate and where we have your contact details, tell you directly. Company details are on our company information page.