DivoraRecords ← Back to the site
Legal

Privacy notice

How Divora Records handles your personal data when you visit divorarecords.com, send us a demo or a message, or take part on our Discord server. We keep it short and only collect what we need.

Last updated 5 October 2026  ·  Divora Records AB

The short version

01

Who we are

Divora Records AB (Swedish company, org. no. 559424-9293) is the controller for the personal data described here. That means we decide why and how it is used, and we are responsible for it under the EU General Data Protection Regulation (GDPR).

Questions about your data go to info@divorarecords.com.

02

What we collect and why

Here is everything we handle, what it is for, the legal basis in the GDPR, and how long we keep it.

Visiting the website

What
Your IP address, browser type, the page you asked for and the time. Every website receives this to be able to show you the page.
Why
To deliver the site and keep it safe from abuse. Our host Netlify handles this for us.
Legal basis
Legitimate interest (Art. 6(1)(f)): running a working, secure website.
How long
Netlify keeps these server logs for a short period for security and operations. We do not keep or analyse them.

Demo submissions Form

What
First and last name, artist or project name, email, Discord username (optional), genre, the music links you send, and anything you write about your music. Netlify also records your IP address and browser details with the submission to filter spam.
Why
To listen to your music, get back to you and, if it is a fit, talk about working together.
Legal basis
Steps you ask for before a possible agreement (Art. 6(1)(b)), and our legitimate interest in finding new artists (Art. 6(1)(f)).
How long
Up to 12 months after our last contact, then deleted from our inbox and from Netlify. If we start working together, see "Artists, guardians and A&R partners" below.

Contact form and email Form

What
Your name, email address and message, or whatever you include in an email to us. Form messages also carry your IP address and browser details, which Netlify uses to filter spam.
Why
To answer you.
Legal basis
Legitimate interest (Art. 6(1)(f)): replying to people who contact us.
How long
Up to 12 months after the conversation ends, unless it leads to an agreement, then deleted from our inbox and from Netlify.

Do you have to give us this?

No law requires you to contact us. Fields marked with a star are needed to review your demo or answer you, and without them we cannot reply. Optional fields can be left empty.

Under 18?

Please involve a parent or guardian before you send us anything. Any agreement with someone under 18 needs a guardian's approval.

03

Artists, guardians and A&R partners

This part is for everyone who signs an agreement with us: artists, the legal guardians of artists under 18, A&R scouts and referral partners. Your agreement points here for how we handle your data.

Signed artists and guardians Agreement

What
Legal and stage name, address, email, country of residence, age where it matters (artists under 18), the guardian's name, address and email, signatures, payment and tax details, royalty statements, and our messages with you. Sales and streaming figures come to us from our distributors and the streaming platforms.
Why
To sign and run the agreement, release and promote the music, register it with distributors, platforms and collecting societies, account for and pay royalties, follow tax, accounting and sanctions rules, and handle any dispute.
Legal basis
The agreement (Art. 6(1)(b)), legal obligations such as bookkeeping, tax and sanctions rules (Art. 6(1)(c)), and our legitimate interest in establishing or defending legal claims (Art. 6(1)(f)).
How long
For as long as the agreement runs, then up to 10 years after it ends, the general Swedish limitation period for claims. Accounting records are kept for 7 years after the end of the year they belong to, as the Swedish Bookkeeping Act requires.

A&R scouts and referral partners Agreement

What
Name and alias, address, email, payment and tax details, the releases you brought in, and the commissions, fees and statements under your agreement.
Why
To run the agreement and pay you correctly.
Legal basis
The agreement (Art. 6(1)(b)) and legal obligations such as bookkeeping and tax rules (Art. 6(1)(c)).
How long
The same as for artists: the agreement's term, then up to 10 years, and accounting records for 7 years.

The details in your agreement are needed to sign it and pay you, and payment and tax details are also required by Swedish tax and bookkeeping rules. Without them we cannot sign the agreement or pay royalties.

Your stage name, credits and release details are public once a release is out, because platforms and distributors show them. Your legal name, address and payment details are not published.

04

The Spotify player

You can play our releases on the site through Spotify's player. Nothing from Spotify loads until you press Allow & play, and "No thanks" simply closes the player. After that, Spotify AB (Sweden) receives your IP address and device information and may set its own cookies, some of which are used for tracking and advertising. Spotify decides how it uses that data, as described in Spotify's privacy policy and cookie policy.

Legal basis: your consent (Art. 6(1)(a) GDPR and the Swedish Electronic Communications Act's cookie rules). We remember your yes on your device so we do not ask on every song. You can take it back here at any time:

Withdrawing stops the player from loading on our site. Cookies Spotify has already set can be removed in your browser settings.

05

Cookies and storage

Our website sets no cookies and uses no analytics, advertising pixels or social media plugins. Fonts and images are served from our own site, so no font or image service sees your visit.

The only thing we store in your browser is one small item in local storage, divora-spotify-ok, and only after you allow the Spotify player. It holds just the date you said yes, no ID. It lapses after 12 months, when we ask again, and you can remove it sooner by withdrawing above or clearing your browser data. If you choose "No thanks", nothing is stored.

06

Our Discord server

Discord itself is run by Discord Inc. under Discord's privacy policy. In our own server, our bots use your Discord username, user ID, server roles and the messages and files you post in our channels to run the community: release announcements, roles, levels, tickets and our tournaments.

  • Tournaments. When you enter, we use your track file, artist name, song title and Discord account to run the bracket, and post entries, match-ups and results publicly in the server. To keep voting fair, we only count votes from Discord accounts that are at least one month old. We check this from the account's creation date, which is part of every Discord user ID.
  • Prizes. If you win, we ask for the details needed to pay you and keep the payment records as accounting law requires.
  • Levels and tickets. We use third-party bots for these (Lurkr for levels and Ticket Tool for tickets). They follow their own privacy policies.

Legal basis: the tournament rules you accept when you enter (Art. 6(1)(b)), and our legitimate interest in running a fair, safe community (Art. 6(1)(f)). Tournament records are kept until the tournament is settled and prizes are paid, and then for up to 12 months, apart from payment records.

07

Who gets your data

Only the people at Divora who handle demos, messages and the community can see your data. We never sell it or share it for advertising. We use these services to run things:

NetlifyHosts the website and handles the server logs (Netlify, Inc., USA).
Netlify FormsReceives what you send in our forms, screens it for spam (with Akismet) and emails it to our inbox (Netlify, Inc., USA).
Google WorkspaceOur email, where form submissions and emails end up (Google).
SpotifyOnly if you allow the player. Spotify AB is responsible for its own processing.

For artists, guardians and A&R partners we also share what each task needs with our music distributors and the streaming platforms (release details and credits), our royalty accounting and payment providers (such as Wise), collecting societies, and our accountant and legal advisers, who are bound by confidentiality.

Some of these services handle data in the USA. Netlify (including Netlify Forms) and Google are certified under the EU-US Data Privacy Framework, which the EU recognises as giving adequate protection. Where another service is used, the transfer must be protected by an adequacy decision or the European Commission's Standard Contractual Clauses. Email us if you want details.

We may also share data if the law requires it, for example with authorities.

08

Your rights

Under the GDPR you can, free of charge:

See itGet a copy of the data we have about you.
Fix itHave wrong or incomplete data corrected.
Delete itHave your data erased when we no longer need it.
Limit itAsk us to restrict how we use it.
ObjectSay no to uses based on our legitimate interest.
Take itGet data you gave us in a portable format.

Where we rely on your consent, like the Spotify player, you can withdraw it at any time. Email info@divorarecords.com and we will answer within one month.

You can also complain to the Swedish privacy authority, IMY.

We do not use your data for automated decisions or profiling. Everything is sent over encrypted connections (HTTPS), and access is limited to the people who need it.

09

Contact and changes

Controller
Divora Records AB
Org. no. 559424-9293 · Registered office: Alvesta
Furulundsvägen 9, 342 35 Alvesta, Sweden
Privacy questions

If we change how we handle data, we update this page and the date at the top. For bigger changes that affect you directly, we will tell you.