SPECIAL NOTE TO UK RESIDENTS

We collect, use and are responsible for certain personal data about you. When we do so we aresubject to the UK General Data Protection Regulation (UK GDPR). We are also subject to the
EU General Data Protection Regulation (EU GDPR) in relation to goods and services we offer toindividuals and our wider operations in the European Economic Area (EEA).

Transferring your personal data out of the UK
To deliver services to you, it is sometimes necessary for us to share your personal data outside theUK, eg:•with our offices or other companies within our group located outside the UK;•with your and our service providers located outside the UK;•if you are based outside the UK ;•where there is a European and/or international dimension to the services we are providing toyou.

Under data protection law, we can only transfer your personal data to a country or internationalorganisations outside the UK where:•the UK government or, where the EU GDPR applies, the European Commission has decided
the particular country or international organisation ensures an adequate level of protectionof personal data (known as an ‘adequacy decision’);•there are appropriate safeguards in place, together with enforceable rights and effective
legal remedies for data subjects; or•a specific exception applies under data protection law.

These are explained below.
Adequacy decision
We may transfer your personal data to certain countries, on the basis of an adequacy decision. Theseinclude:•all European Union countries, plus Iceland, Liechtenstein and Norway (collectively known as
the ‘EEA’);•Gibraltar; and•Andorra, Argentina, Canada, Faroe Islands, Guernsey, Israel, Isle of Man, Japan, Jersey, NewZealand, Switzerland and Uruguay.

The list of countries that benefit from adequacy decisions will change from time to time. We will
always seek to rely on an adequacy decision, where one exists.
Other countries or international organisations we are likely to transfer personal data to do not havethe benefit of an adequacy decision. This does not necessarily mean they provide poor protection for
personal data, but we must look at alternative grounds for transferring the personal data, such as
ensuring appropriate safeguards are in place or relying on an exception, as explained below.
Transfers with appropriate safeguards
Where there is no adequacy decision, we may transfer your personal data to another country orinternational organisations ​if we are satisfied the transfer complies with data protection law,
appropriate safeguards are in place, and enforceable rights and effective legal remedies are available
for data subjects.
The safeguards will usually include using legally-approved standard data protection contract clauses.
In relation to transfers to our overseas offices or other companies within our group, the safeguards
may instead include legally binding rules and policies.
Transfers under an exception
In the absence of an adequacy decision or appropriate safeguards, we may transfer personal data toa third country or international organisation where an exception applies under relevant dataprotection law, eg:•

you have explicitly consented to the proposed transfer after having been informed of thepossible risks;•

the transfer is necessary for the performance of a contract between us or to takepre-contract measures at your request;•the transfer is necessary for a contract in your interests, between us and another person; or•the transfer is necessary to establish, exercise or defend legal claims.

We may also transfer information for the purpose of our compelling legitimate interests, so long as
those interests are not overridden by your interests, rights and freedoms. Specific conditions apply tosuch transfers and we will provide relevant information if and when we seek to transfer yourpersonal data on this ground.
Further information
If you would like further information, please ​go ​to ​https://www.believemusic.com/contact/
You have the right to make a complaint at any time to the Information Commissioner's Office (ICO),
the UK supervisory authority for data protection issues (​www.ico.org.uk)​ . We would, however,appreciate the chance to deal with your concerns before you approach the ICO so please contact us
in the first instance.