Terms and Conditions for Artists

Last updated: April 2024

These Terms and Conditions ("Terms") govern the use of sesh (also referred to as the “App”), including sesh features and functionalities such as Communities, Sessions, APIs and Streaming Parties (“Services”), by Artists (as defined in Section 1 below).

PLEASE READ THESE TERMS CAREFULLY BEFORE CLICKING ON THE ACCEPT BUTTON AS THEY AFFECT YOUR LEGAL RIGHTS AND OBLIGATIONS, INCLUDING, BUT NOT LIMITED TO, YOUR DATA PROTECTION OBLIGATIONS.

If any provision of these Terms is determined by a court to be unlawful, void, or for any reason unenforceable, then that provision is deemed severable from these Terms and shall not affect the validity and enforceability of any remaining provisions.

This document has been drafted in English and is provided to Artists in different languages, based on their geographic location. In the event of disputes or litigation, all versions shall be deemed authentic, but for legal purposes the text in English is to be given priority of interpretation.

  1. Definitions
Artist shall mean an individual or group engaged in the creation, performance, and production of music, owning an Artist Account and a Community of Fans in sesh (also referred to as “you” or “your”).
Artist Account shall mean an account owned by an Artist in sesh.
Artist Content shall mean any material uploaded by an Artist within his/her Community or using the Services, including any photos, videos, audio, livestream material, data, comments, hashtag, images, emojis, GIFs, memes, and any other material whatsoever.
Artist Data shall means any information relating to an Artist when signing up and using sesh.
Content shall mean any Content in sesh, whether Fan Content or Artist Content.
Community shall mean where a virtual space owned by an Artist, in which Artist Content is offered to Fans and where Fans can engage with one another through interactions.
Fan shall mean an individual owning a User Account in sesh and who has requested COLKIE to join a Community to view the Artist Content within the Community.
Fan Account shall mean an account owned by a Fan in sesh.
Fan Content shall mean any material uploaded in sesh by a Fan, including any photos, videos, audio, livestream material, data, comments, hashtag, images, emojis, GIFs, memes, and any other material whatsoever.
Fan Data shall means any information relating to a Fan when signing up and using sesh.
Session shall mean an online space created by the Artist within his/her own Community, in which temporary Artist Content is offered to Fans or a specific group of Fans.
User(s) shall mean any user of sesh, either Fan or Artist.
User Account shall mean any account created by an individual in sesh, either Fan or Artist.

  1. About these Terms 

By assenting to these Terms, you agree to be legally bound by these Terms, which will constitute a contract between you and COLKIE TECHNOLOGY S.L., with Company Number B05387345 and registered office at Calle General Asensio Cabanillas 27, 28003 - Madrid ("COLKIE", “we”, “us” or “our”). Our User Terms and Conditions of Use and Community Guidelines forms part of this Terms and you agree to them when accepting these Terms.

The individual, company or other legal entity accepting these Terms on behalf of you, represents and warrants that he or she has full authority to bind you to this Terms.

If you are accepting these Terms on behalf of a company or other legal entity, you represent and warrant that you are authorized to do so and have the authority to bind such entity to these Terms, in which case the words “you” and “your” as used in these Terms shall refer to such entity.

IF YOU DO NOT AGREE TO OR CANNOT COMPLY WITH ALL THE TERMS - OR IF THE INDIVIDUAL ACCEPTING THESE TERMS ON BEHALF OF YOU DOES NOT HAVE AUTHORITY TO BIND YOU -, THEN YOU WILL NOT BE AUTHORIZED TO ACCESS OR USE YOUR ARTIST ACCOUNT AS WELL AS YOUR COMMUNITY IN SESH.

THESE TERMS ARE BINDING AS OF THE DATE THAT YOU ACCEPT THEM.

  1. Contact Details 

sesh is operated by COLKIE. To contact us with any questions about the use of sesh, please email us at support@joinsesh.app . If you are unable to contact us by email, please write to us at the following address: C / General Asensio Cabanillas 27, 28003, Madrid, Spain.

  1. How can I get an Artist Account and a Community in sesh

4.1 Artist Account application requirements

In order to get an Artist Account, you must first create a User Account on sesh. 

To convert your User Account into an Artist Account, you need to submit your application for an Artist Account on our Artist Registration Page. We will require you to provide us your name, email address and link to your Spotify Account. 

When you submit an application for an Artist Account, you confirm that the information which you submit to us is truthful, accurate and complete and that the Spotify Account belongs to you. You also confirm that your User Account was not terminated or suspended by us because you violated User Terms and Conditions of Use and Community Guidelines or any other terms or policies.

You will be allowed to have only one Artist Account on sesh. However, if we block your original Artist Account because someone unlawfully took it over, you can submit an application for a new Artist Account for yourself.

4.2 Verification

We will verify that you are the individual requesting an Artist Account. We may require to you to provide additional information about your career, among others:

  1. music tracks, videos, or any other relevant multimedia creations;
  2. links to your official website, social media profiles, or other online platforms where your work is showcased;
  3. proof of concerts or performances, if available;
  4. testimonials or references from reputable sources within your industry;
  5. evidence of awards, recognition, or achievements related to your artistic career.

4.3 Rejected applications

Your application may be rejected for the following reason(s):

  1. Incomplete or inaccurate information regarding your career.
  2. The information provided doesn't appear authentic or genuine.
  3. Your User Account or its associated Content violates User Terms and Conditions of Use and/or Community Guidelines and/or applicable laws.
  4. Insufficient engagement or following.
  5. Duplicate accounts.
  6. Suspicions of fraudulent activity, including spamming and bot-like behavior.

If you do not meet the above requirements, If there’s a good reason to believe that the information you provide is incomplete or incorrect, or if you don’t cooperate with our requests, we may reject your application.

4.4 Creation of your Community

Once the verification process is completed, we will create a Community in sesh for you. Within the Community assigned to you, you will be able to share Artist Content with your Fans. 

Please note that COLKIE will grant to you a unique access to an external platform in which you will be able to access and process, jointly with us, Fans personal data.

  1. Misuse of sesh  

You agree you will not misuse the app or the Services. You agree you will not:

You also may not do any of the following while accessing or using the app:

It is also a violation of these Terms to facilitate or assist others in violating these Terms, including by distributing products or services that enable or encourage violation of these Terms.

  1. Artist Content

Artist Content shall not be considered in any case confidential. You authorize Fans belonging to your Community to access and view your Artist Content for their own lawful and personal use, and/or in accordance with any other licenses that you eventually grant to them.

6.1 Warranties

You warrant (which means that you make a legally enforceable promise to us) that:

  1. You own the Artist Content (and all intellectual property rights in it) you post, display, upload or publish or you have a valid license to post, display, upload or publish it on the Community assigned to you or in sesh;
  2. Artist Content posted, displayed, uploaded or published by you on sesh comply in full these Terms and our Community Guidelines;
  3. if your Content includes or uses any third-party material, you have secured all rights, licenses, written consents and releases that are necessary for the use of such third-party property in sesh and for the subsequent use of that Content on sesh; and
  4. the Content is of satisfactory quality, taking account of any description and all other relevant circumstances including any statement or representation which you make about the nature of the Content on your account or in any advertising;

You agree that you will be liable to us and indemnify us if any of the warranties is untrue. This means you will be responsible for any loss or damage (including loss of profit) we may suffer as a result of any of the warranties being untrue.

We are not responsible for and do not endorse any aspect of Artist Content posted by you on sesh. We do not have any obligation to monitor any Content and have no direct control over what your Artist Content may comprise.

6.2 Interactions with Fans

When interacting with Fans that have joined your Community, you must not upload, post, display, or publish Artist Content that:

  1. is illegal, fraudulent, defamatory, hateful, discriminatory, threatening or harassing, or which encourages or promotes violence or any illegal activity;
  2. shows, includes or refers to minors; 
  3. shows, includes or refers to other individuals, unless you have written documentation which confirms that all individuals shown or included or referred to in your Artist Content have provided consent to you for the use of their name or images (or other personal information) in sesh;
  4. promotes, advertises or refers to firearms, weapons, goods whose sale, possession or use is subject to prohibitions or restrictions, drugs, self-harm or suicide, bestiality, sex, violence, rape, hypnosis, intoxication, torture, abuse, prostitution;
  5. causes or is calculated to cause inconvenience, or anxiety to anyone or which is likely to upset, embarrass, or cause serious offence;
  6. contains, promotes, advertises or refers to hate speech;
  7. vilifies, humiliates, dehumanizes, excludes, attacks and threatens other individuals;
  8. incite hatred, fear of, or violence against, a group or individual based on race, ethnicity, national origin, immigration status, caste, religion, sex, gender identity or expression, sexual orientation, age, disability, serious disease, veteran status, or any other protected characteristics;
  9. contains or refers to personal, private or confidential information of other people;

6.3 Corrective Actions

We reserve the right, but we are not obligated, to moderate or review your Artist Content to verify compliance with these Terms and/or any applicable law. However, please note that we may decide to take any of the actions listed below if we determine that your Artist Content, and/or your Artist Account and/or activity on the App violates these Terms: 

  1. send you a warning message;
  2. request you to correct your Artist Content;
  3. correct, demote, hide or remove your Artist Content from the app;
  4. restrict your Artist Account by blocking your access to sesh, or
  5. notify local authorities about your activity if there is a threat to someone’s life or safety.

6.4 Blocking your Artist Account

We reserve the right to temporarily block your Artist Account in the following cases:

When we say that we “block” your Artist Account, we mean that, without needing to obtain any consent from you and without giving any prior notice to you, we will temporally disable access to your Artist Account. If we block your Artist Account, you may request a review of our decision by contacting us at support@joinsesh.app

We will not be responsible for any loss suffered by you arising from the block of your Artist Account or any other steps which we take in good faith to investigate any suspected non-compliance or unlawfulness of your Artist Content.

6.5 Termination

We reserve the right in our sole discretion to terminate your Artist Account and definitively remove your Community, as well as the Artist Content published therein, without prior notice, in the following cases:

  1. you have or may have seriously or repeatedly breached any part of these Terms or attempt or threaten to breach any part of these Terms in a way which has or could have legal consequences for us or serious consequences for Users;
  2. you have created risk or possible legal exposure for us;
  3. unlawful conducts; 
  4. prolonged inactivity; or
  5. you have caused or your activity is reasonably likely to cause us to suffer a loss or that otherwise harms the reputation for us or sesh.

We can investigate any suspected or alleged misuse, abuse, or unlawful use of sesh and cooperate with law enforcement agencies or authorities in such investigation.

We can disclose any information or records in our possession or control about your use of sesh to law enforcement agencies or authorities in connection with any law enforcement investigation of any suspected or alleged illegal activity, to protect our rights or legal interests, or in response to legal process.

In all such cases, the Terms shall terminate, including, without limitation, your license to use the Services, except that the following sections shall continue to apply: Privacy, Content, Disclaimer, Limitation of Liability and Misuse of the Services. If you believe your Account was terminated in error you can send an email to support@joinsesh.app .

  1. Intellectual Property

You confirm that you own all intellectual property rights in your Artist Content or that you have obtained all necessary rights to your Artist Content which are required to grant licenses in respect of your Artist Content to us in any territory in which sesh is accessible.

You agree to grant us a license under all your Artist Content to perform any act restricted by any intellectual property right (including copyright) in such Artist Content, for any purpose reasonably related to the provision and operation of sesh. Such acts include to reproduce, make available and communicate to the public, display, perform, distribute, translate, and create adaptations or derivative works of your Artist Content, and otherwise deal in your Artist Content. The license which you grant to us is perpetual, non-exclusive, worldwide, royalty-free, sublicensable, assignable and transferable by us.

  1. Your license

We give you a personal, worldwide, royalty-free, non-assignable and non-exclusive license to use the app and the Services. This license has the sole purpose of enabling you to use and enjoy the benefit of the Services as provided on sesh, in the manner permitted by these Terms or applicable laws. 

The App is protected by copyright, trademark, and other laws. Nothing in the Terms gives you a right to use sesh trademarks, logos, domain names, other distinctive brand features, and other proprietary rights, without our permission. 

All right, title, and interest in and to the Services (excluding Artist Content and Fans Content) are and will remain our exclusive property.

  1. Data Protection

9.1 Processing of Artist Data

In relation to the processing of your Artist Data under this Terms, the data controller under the General Data Protection Regulation (EU) 2016/679 (“GDPR”) is COLKIE TECHNOLOGY S.L., with Company Number B05387345 and registered office at Calle General Asensio Cabanillas 27, 28003 – Madrid.

We will process your Artist Data for the following purposes: 

  1. To enable the creation of your Artist Account.
  2. To allow us to provide the Services to you and host your Artist Content.
  3. To ensure compliance with, and enforce, these Terms.
  4. To contact you regarding updates, services, and promotions, including by SMS, provided you have opted in for such communications. You can opt out of receiving SMS at any time through the provided channels.

The legal basis is the performance of a contract (these Terms) which you are party or (Art. 6 of GDPR).

Your Artist Data will be kept for as long as the contractual relationship is maintained. Upon such period, we will keep your Artist Data blocked and prevented from being processed, except for the provision to the judges and courts, the Public Prosecutor's Office or the competent Public Administrations, in particular the data protection authorities, for the enforcement of possible liabilities arising from the processing and only during the statutory period of limitation.

We may share Artist Data with third-party service providers when such data is necessary for them to provide a service to us. We have a contract in place requiring these vendors to keep Artist Data confidential and not to use it other than in accordance with COLKIE specific instructions.

As data subject, you have the following rights regarding the processing of your Artist Data:

If you wish to exercise any of the aforementioned rights, you can at any time directly contact COLKIE by sending the appropriate request at the following addresses:

- Calle General Asensio Cabanillas 27, 28003 – Madrid.

- privacy@joinsesh.app 

Finally, if you are concerned about the way we have processed your Artist Data, you may complain to the supervisory authority (Agencia Española de Protección de Datos www.aepd.es).

9.2 Processing of Fan Data

We will assign a Community to you and transfer Fan Data to you as part of the Services. 

When you use the App and conduct processing activities involving Fan Data as data subjects, some of those data processing operations are carried out as joint controllers together with us in the sense of Art. 26 para. 1 sentence 1 of GDPR. Data processing activities carried out jointly carried out with us are described in our Privacy Policy. 

By accepting these Terms, you agree to the responsibilities for compliance with the obligations set out within the “Joint Controllership Agreement” incorporated as an Annex to these Terms.

9.3 Other processing activities

You will be allowed to carry out other processing operations regarding Fan Data as independent data controller. You agree that such independent processing activities are not covered by these Terms and that you are solely responsible for compliance with GDPR and other data protection laws.

If required by applicable data protection or privacy laws, you must have a privacy policy in place and inform Fans. 

Data processing activities carried out by us independently are described in our Privacy Policy. 

Regarding U.S. fans, you will not collect, share or otherwise use the personal information/data of any User fan under the age of 16 without following the applicable federal or state laws in the United States regarding obtaining the consent of the fan and/or their parent or legal guardian.

9.4 Compliance with CPRA requirements

Pursuant to the CPRA and the final regulations enacted by the California Privacy Protection Agency (called "regulations”), the Parties agree as follows:

  1. The Parties prohibit each other from selling or sharing personal information they collect pursuant to this Terms. 
  2. The Parties agree that the specific purposes for which the parties to this Terms shall process personal information, are as follows:
  1. To let users interact and post their contents within a Community.
  2. To record and rate the number of interactions users make within the Community, award them with exclusive content and other rewards and deliver them such rewards.
  3. To collect personal data related to users on external music streaming Apps (such as Spotify) and enable them to participate to Streaming Parties.
  4. To manage the purchase and shipment of Products that the user purchase through the app.
  1. The Parties agree to limit their use of any user’s personal information that they collect pursuant to this Terms for any purpose other than purposes expressly described in this Terms. 
  1. The Parties agree not to retain, use or disclose any user’s personal information they collect pursuant to this Terms for any commercial purpose other than the purposes specified in this Terms, unless expressly permitted by the CPRA or the regulations. 
  2. The Parties agree not to retain, use, or disclose the personal information that they collect pursuant to this Terms outside the direct business relationship between the Parties, unless expressly permitted by the CPRA or the regulations. For example, the Parties are prohibited from combining or updating personal information that it collects pursuant to this Terms  with the personal information that it receives from another source or collects from its own interaction with the consumer, unless expressly permitted by the CPRA or the regulations. 
  3. The Parties agree to comply with all applicable sections of the CPRA and the regulations, including—with respect to the personal information that it collects pursuant to this Terms to provide the same level of privacy protection as required of Businesses by the CPRA and the regulations. For example, this Terms requires the Parties to cooperate with each other in responding to and complying with consumers’ requests made pursuant to the CPRA, and to implement reasonable security procedures and practices appropriate to the nature of the personal information to protect the personal information from unauthorized or illegal access, destruction, use, modification, or disclosure in accordance with California Civil Code section 1798.81.5
  4. The Parties agree to grant each other the right to take reasonable and appropriate steps to ensure that other Party to this Terms, uses the personal information that it collects pursuant to this Terms in a manner consistent with the business’s obligations under the CPRA and the regulations. Reasonable and appropriate steps may include ongoing manual reviews and automated scans of a Party or a service provider’s system and regular internal or third-party assessments, audits, or other technical and operational testing at least once every 12 months.  
  5. The Parties agree to notify each other Party after it makes a determination that it can no longer meet its obligations under the CPRA and the regulations. 
  6. The Parties agree to grant each other Party the right, upon notice, to take reasonable and appropriate steps to stop and remediate any unauthorized use of personal information. 
  7. For example, one Party may require the other Party or any service provider or contractor to provide documentation that verifies that they no longer retain or use the personal information of consumers that have made a valid request to delete with the business. 
  8. The Parties agree to assist and enable each Party to comply with consumer requests made pursuant to the CPRA.
  1. Each of the Parties, and any and all service providers or contractors that subcontracts to provide services to the Parties, shall have a written contract with that complies with the CPRA and the regulations, including binding all service providers and contractors to all of the terms set forth in this Terms subsection (a) above. 
  2.  Whether a Party conducts due diligence of the other Party to this Terms, or any service providers and contractors factors into whether the Party has reason to believe that a Party, service provider or contractor is using personal information in violation of the CPRA and these regulations. For example, depending on the circumstances, a Party that never enforces the terms of the contract nor exercises its rights to audit or test the other Party or a service provider’s or contractor’s systems might not be able to rely on the defense that it did not have reason to believe that the service provider or contractor intends to use the personal information in violation of the CPRA and these regulations at the time the Party disclosed the personal information to the service provider or contractor.

  1. Account Deleting

You may delete your Artist Account at any time and free of charge by using the Account Configuration section in the App.

Once your Artist Account and the Community assigned to you has been deleted, you will not have access to your former Artist Account, your Artist Content and Fan Data. 

You will receive an email confirmation upon the successful deletion of your Artist Account. 

Once your Artist Account has been deleted, we may deal with your Artist Content in any appropriate manner in accordance with these Terms and the Joint Controllership Agreement and you will no longer be entitled to access your Artist Content.

  1. Disclaimer

Your access to and use of your Artist Account, the App, the Services, the Fan Data or any Content are at your own risk. You understand and agree that the App and the Services are provided to you on an “AS IS” and “AS AVAILABLE” basis. 

COLKIE make no warranty or representation and disclaim all responsibility and liability for:

  1. the completeness, accuracy, availability, timeliness, security or reliability of the App, of the Services, of Fan Data or of any Content; 
  2. any harm to your computer system, loss of data, or other harm that results from your access to or use of the App, of the Services, of Fan Data or of any Content; 
  3. the deletion of, or the failure to store or to transmit, any Artist Content and other Content maintained, uploaded or published by you in the Community; and 
  4. whether the Services will meet your requirements or be available on an uninterrupted, secure, or error-free basis. No advice or information, whether oral or written, obtained from COLKIE or through the App or the Services, will create any warranty or representation not expressly made herein.

  1. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, WE SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS OR REVENUES, WHETHER INCURRED DIRECTLY OR INDIRECTLY, OR ANY LOSS OF DATA, USE, GOODWILL, OR OTHER INTANGIBLE LOSSES, RESULTING FROM 

  1. YOUR ACCESS TO OR USE OF OR INABILITY TO ACCESS OR USE THE APP OR THE SERVICES; 
  2. ANY CONDUCT OR CONTENT OF ANY THIRD PARTY ON THE SERVICES, INCLUDING WITHOUT LIMITATION, ANY DEFAMATORY, OFFENSIVE OR ILLEGAL CONDUCT OF FANS, OTHER ARTISTS OR THIRD PARTIES; 
  3. ANY ARTIST CONTENT OBTAINED FROM THE APP; 
  4. MATERIAL AND IMMATERIAL DAMAGES CAUSED EXCLUSIVELY BY YOU BREACHING THE JOINT CONTROLLERSHIP AGREEMENT ANNEXED HEREIN; 
  5. MATERIAL AND IMMATERIAL DAMAGES CAUSED EXCLUSIVELY BY YOU BREACHING THE GDPR OR OTHER DATA PROTECTION LAWS OR REGULATIONS WHEN CONDUCTING INDEPENDENT FAN DATA PROCESSING ACTIVITIES.
  6. UNAUTHORIZED ACCESS, USE OR ALTERATION OF YOUR ARTIST CONTENT.

  1. How we may change these Terms:

We may change any part of these Terms from time to time. We will give you reasonable advance notice of such changes and the date that they will come into force. 

The changes will only apply to our relationship going forward. 

You may stop using the App before the changes take effect. Once any updated Terms are in effect, you will be bound by them if you continue to use sesh.

We may make urgent changes without telling you beforehand in the following circumstances:

  1. to reflect changes in laws and regulatory requirements, where such changes do not allow or require us to give reasonable notice to you; and
  2. to address an unforeseen and imminent danger deriving fraud, malware, spam, data breaches or other cybersecurity risks.

  1. Disputes

These Terms are governed by Spanish Law.  

In the event of any dispute, controversy, or claim arising out of or relating to this agreement, its interpretation, performance, breach, termination, or validity, the parties shall endeavor to resolve it amicably. If an amicable resolution is not achieved within a reasonable period, all disputes, controversies, or claims shall be submitted to the exclusive jurisdiction of the courts of Madrid (Spain), expressly waiving any other jurisdiction that may apply.

If you are resident in the EEA, you can also raise the dispute with an alternative dispute resolution body via the EU Commission’s Online Dispute Resolution (ODR) App.

ANNEX - JOINT CONTROLLERSHIP AGREEMENT AMONG COLKIE AND THE ARTIST

This Joint Controllership Agreement (“Agreement”) is incorporated to and forms part of the Terms. This Agreement will enter into force as of the Community in assigned to the Artist (“Agreement Effective Date”).

COLKIE and the Artist are sometimes referred to herein individually as a "Party" and collectively as the "Parties".

This Agreement is based on the following fact: 

  1. The Artist will be able to access and process Fan Data since a Community is assigned to him/her by COLKIE in sesh. 
  2. The Artist AND COLKIE will jointly determine the purposes and means of the processing of Fan Data carried within the Community. 

The purpose of this Agreement is to comply with Article 26 of GDPR. In the case that parts of this Agreement are invalid, void or unenforceable, this shall not affect the effectiveness of the remaining parts of this Agreement. The Parties commit themselves to replace the invalid provision with a legally admissible provision that comes closest to the intention of the invalid provision and best meets the requirements of GDPR.

  1. Scope of this Agreement

This Agreement sets out the allocation of respective roles, responsibilities and practical arrangements between the Parties for compliance with their respective data protection obligations under GDPR, when carrying out processing operations of Fan Data in sesh as joint controllers.

The joint controllership relationship is limited to data processing operations where Parties jointly determining purposes and means of processing in the meaning of Art. 26 of GDPR. Namely, such data processing operations are the one indicated in the Privacy Policy as conducted by COLKIE and the Artist as Joint Controllers.

  1. Definitions

For the purposes of this Agreement, the definitions laid down in Article 4 and 9 of GDPR, respectively, shall apply. Additionally the following definitions shall also apply:

-“Third Country” shall mean any country that is not a member of the European Union or the European Economic Area or any international organization;

-“Data Protection Laws” shall mean the GDPR as well as other provisions of EU Member State’s national law applicable to a relevant Party, passed in relation to personal data protection, including in particular the provisions of the given Controller’s national law;

-“Standard Contractual Clause” shall mean the standard data protection clauses for the transfer of personal data to processors established in third countries which do not ensure an adequate level of data protection, as described in Article 46 of the GDPR and approved by the European Commission Decision (EU) 2021/914 of 4 June 2021 on standard contractual clauses for the transfer of personal data to third countries pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council as may be amended or replaced by the European Commission from time to time.

  1. Joint controllers 

For the purpose of this Agreement, the Parties act collectively as Joint Controllers, and each of them as a Joint Controller, pursuant to Article 28 of Article 26 of GDPR in relation to the processing activities jointly carried out in sesh. 

The processing activities performed by the Artist, as part of his/her remit and out of the scope of the use of sesh and/or a Community of sesh, fall outside the scope of this Agreement. 

  1. Responsibilities, roles and relationship towards data subjects 

In order to guarantee compliance with applicable data protection rules, each of the Parties shall comply with the general principles of applicable Data Protection Laws, including, among other, Article 5 of GDPR and  the California Consumer Rights Act at California Civil Code Section California Code, Civil Code - CIV § 1798.100, et seq, and the 2023 Final Regulations by the California Privacy Protection Agency (CPRA). 

Colkie intends to allow only U.S. user fans age 16 and older to join the sesh app. If at any time, the Artists or its agents and/or employees have reason to believe there is a U.S. user fan under the age of 16, it will immediately notify Colkie.

4.1 Provision of information to Data Subjects

COLKIE has published a Privacy Policy to ensure that users’ fans are informed of the details of the processing activity jointly carried out in sesh. Artist shall procure to have such Privacy Policy available to users’ fans, when required by applicable law.

As regards the activities out of the scope of this Agreement, Artist is solely responsible to comply with its obligations as an individual data controller to inform users’ fans about the processing of their personal data.

4.2 Handling of Data Subject requests

Parties agrees that the Point of Contact with respect of Data Subjects requests is COLKIE. Notwithstanding with the above, any Data Subjects may exercise their rights under GDPR in respect of and against each of the Parties. 

The Parties shall cooperate and, when so requested, provide each other with swift and efficient assistance in handling any Data Subject requests in accordance with the following steps:

  1. When a Party receives a Data Subject request, it must check whether the request concerns a processing operation carried out in sesh.
  2. If the request falls under a processing activity carried out in sesh as per sesh Privacy Policy, then the Parties shall agree handle the request together. Exchanges with the Data Subject(s) shall be handled solely by the Party receiving the Data Subject request, whilst the other Party shall cooperate upon request of the Party directly involved. 
  3. If the receiving Party finds that the request concerns a processing operation which belong to the Party as solely data controller, it shall forward the request to that other Party. The request shall be forwarded by using secure means of transmission and without undue delay, at the latest within five working days of its receipt. Within the same deadline, the receiving Party shall inform the Data Subject about forwarding the request and also clearly state to which Party has the request been forwarded.

4.3 Management of security incidents, including personal data breaches

The Parties shall handle security incidents, including personal data breaches, in accordance with their internal procedures and applicable legislation. 

The Parties shall in particular provide each other with swift and efficient assistance as required to facilitate the identification and handling of any security incidents, including personal data breaches, linked to the joint processing. 

The Parties shall notify each other of the following within the scope of this Agreement: 

  1. any risks that are reasonably likely to result in damage to the availability, confidentiality and/or integrity of the personal data undergoing joint processing; 
  2. any security incidents actually or potentially affecting personal data that are linked to the joint processing operation; 
  3. any personal data breach (i.e. any breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to personal data undergoing joint processing), the likely consequences of the personal data breach and the assessment of the risk to the rights and freedoms of natural persons, and any measures taken to address the personal data breach and mitigate the risk to the rights and freedoms of natural persons; 
  4. any breach of the technical and/or organizational safeguards of the joint processing operation. 

Each Party is responsible for managing all security incidents, including personal data breaches, that occur as a result of an infringement of that Party’s obligations under this Agreement and GDPR. 

The responsible Party/ies shall document the security incident (including personal data breaches) and notify the other Parties without undue delay and at the latest within 48 hours after becoming aware of a security incident (including a personal data breach). The Party responsible for managing a personal data breach incident shall create and maintain appropriate records of the incident and notify it to the competent national supervisory authority without undue delay and, where feasible, not later than 72 hours after having become aware of the personal data breach, unless the personal data breach is unlikely to result in a risk to the rights and freedoms of natural persons. The Party responsible shall inform the other Parties of such notification. 

The Party, responsible for the personal data breach, shall communicate that personal data breach to the Data Subjects concerned if the personal data breach is likely to result in a high risk to the rights and freedoms of natural persons. The Party responsible shall inform the other Parties of such communication. The communication to the Data Subjects referred to the previous paragraph shall not be necessary if any of the conditions listed in Article 34(3) of GDPR are met. 

4.4 Responsibility for the security of processing

Each party shall implement appropriate technical measures to ensure the security of processing personal data in sesh pursuant to Article 32 of GDPR. 

Access to personal data stored in the secure domain of sesh undergoing joint processing shall only be allowed to authorized staff/personnel/authorized users of the Parties, for the purposes of administering the data carry out the processing operation. 

4.5 Processors

For some purposes of processing of Fan Data there are third parties involved that act as processors on behalf of the Parties. It is the responsibility of both Parties to ensure compliance with applicable laws (particularly, the GDPR) when appointing a processor. 

Artist hereby grants the right to COLKIE to decide to change and add processors in the name of the Parties and grant the right to COLKIE to enter into contractual agreements in the name of both Parties where this is required under applicable laws (particularly, the GDPR). 

Already existing contractual agreements between COLKIE and third parties shall also apply to the processing of Fan Data in scope of the joint controllership of the Parties.

  1. Other responsibilities 

Without prejudice to obligations of Joint Controllers that may be applicable under GDPR or national laws applicable to the Parties, Parties shall be responsible for the following: 

  1. Recording of the processing operation; 
  2. Ensuring that the Fan Data undergoing processing are adequate, accurate, relevant and limited to what is necessary for the purpose; 
  3. Ensuring a transparent information and communication to Data Subjects of their rights; 
  4. Facilitating the timely exercise of the rights of Data Subjects; 
  5. Handling of Data Subjects’ requests in accordance with the procedure adopted;
  6. Deciding to restrict the application of, or derogate from Data Subject rights, where necessary and proportionate, in accordance with internal rules adopted by the Party in compliance with GDPR and U.S. state and federal laws
  7. Ensuring privacy by design and privacy by default; 
  8. Identifying and assessing the lawfulness, necessity and proportionality of transmissions and transfers of Fan Data; 
  9. Carrying out a data protection impact assessment, where necessary; 
  10. Carrying out a prior consultation with the competent national supervisory authority, where needed; 
  11. Where Fan Data are transferred outside the EEA/UK, take appropriate safeguards to require that Fan Data remain protected according to GDPR, including:
  1. Ensuring that persons authorized to process Fan Data have committed themselves to confidentiality or are under an appropriate statutory obligation of confidentiality; 
  2. Cooperating with the competent national supervisory authority, on request, in the performance of his or her tasks. 

  1. Cooperation 

Each Party, when so requested, shall provide a swift and efficient assistance to the other Party in execution of this Agreement, while complying with all applicable requirements of GDPR, the CPRA and regulations, and other applicable national or state rules on data protection. 

  1. Liability

The liability of the Parties for breaches of this Agreement, is generally governed by applicable data protection laws (particularly, GDPR). COLKIE is not liable for material and immaterial damages caused exclusively by the Artist breaching this Agreement or applicable laws (particularly, the GDPR) and has the right to seek compensation for such damages from the Artist. In case a supervisory authority or data subject seeks compensation from COLKIE for a breach of applicable laws caused exclusively by the Artist, COLKIE has the right to receive from the Artist an adequate compensation, at least in the amount COLKIE paid towards supervisory authorities and data subjects.

  1. Acknowledgement of this agreement by Fans 

In compliance with applicable data protection legislation, a resume of the statements contained in this Agreement will be displayed in sesh through a hyperlink contained in sesh Privacy Policy. 

  1. Commencement and termination

This Agreement shall become effective upon getting an Artist Account and acceptance of these Terms and is concluded for an indefinite period and at least as long as the Parties carry out processing of Fan Data as joint controllers. 

Each of the Parties has the right to terminate this Agreement. Artist may terminate this agreement by closing the Artist Account. 

Upon termination of Terms with COLKIE, this Agreement shall also be terminated. 

COLKIE may terminate this Agreement in accordance with the Terms.

  1. Amendments

Within the limits of applicable laws, for any amendment to this Agreement Artist will be informed before the amendment takes effect or, in the event of a more substantial amendment (for example, amendments that increase obligations, impact on main functionalities of the App), by email before the amendment takes effect. 

If the Artist disagree with any of the proposed amendments, he/she may choose to delete his/her Artist Account.