Privacy Policy

This Privacy Policy explains how MOSH OÜ (“MOSH!”, “we”, “us”) processes personal data through mosh.ee and in connection with our Drum & Bass distribution, releases, artist booking, events, demo review, DJ sets, and promotional activities. It also explains your rights under the EU General Data Protection Regulation (“GDPR”).

1. Information we collect

Promo List applications

When you apply to join the MOSH! Promo List, we collect the DJ or artist name, real name, promotional email address, country, city, professional role, the Instagram, SoundCloud, or website link you provide, your consent, the submission date, and our internal review status.

We use this information to assess whether the applicant is a relevant DJ or radio representative, to contact approved applicants, and to arrange private access through the MOSH! Promo portal. Applying does not provide automatic access. Applications are reviewed by a person and are not subject to automated decision-making.

Demo submissions

Demo submissions are currently made through an external Label Engine page. Depending on what you submit, this may include your artist and contact details, audio, private links, social profiles, location, and message. We use the information available to us to listen to the demo, assess a possible release or distribution relationship, and contact you about next steps. Label Engine also processes information under its own privacy terms when you use its service.

Booking enquiries and booking administration

For artist booking we may process artist, promoter, client, company, business code or personal ID where required for contracting, VAT or tax number, postal address, contact-person details, event and venue information, timetable, travel and hotel arrangements, performance and booking fees, agreement status, invoice status, and payment progress. We use these details to prepare and perform the booking, coordinate logistics, invoice the client, maintain accounting records, and resolve disputes.

Artist and general enquiries

If you contact us through an artist page or by email, we may collect your name, email address, company or promoter name, proposed event date and location, budget, and message so that we can respond and follow up on your request.

Website and security data

Our hosting and security systems may process technical data such as IP address, browser and device information, requested URL, referrer, and date and time of access. This is used to deliver the website, prevent abuse, diagnose errors, and maintain security. MOSH Insights records only aggregate actions such as smartlink, demo, EPK, booking, and Promo List clicks; it does not store visitor IP addresses, email addresses, cookies, or individual visitor profiles.

2. Why we process personal data

Depending on the activity, we rely on one or more of the following legal bases:

• Consent: for Promo List applications and promotional email where consent is requested. You may withdraw consent at any time.
• Contract and pre-contractual steps: to respond to a booking or distribution request, negotiate terms, and perform an agreed service.
• Legal obligation: to comply with accounting, tax, record-keeping, and authority requirements.
• Legitimate interests: to operate and protect the website, review voluntarily submitted professional enquiries, communicate about ongoing industry relationships, prevent fraud, and establish or defend legal claims. We balance these interests against your rights.

3. Promotional communication

We send promotional music or Promo List invitations only where there is a valid legal basis. An application is not a guarantee of acceptance. After approval, you receive a MOSH! email-verification request; confirming the address activates the subscription. Every direct promotional email should provide a way to stop future messages, and you can withdraw consent at any time by contacting us.

We do not sell or rent Promo List or demo-submission data. We do not use Promo List applications for automated profiling or automated decisions.

4. Cookies and external services

Necessary cookies remember your language and privacy choices and support WordPress security. Google Analytics through Site Kit is optional and remains blocked until you choose Analytics. You can withdraw that choice at any time through Cookie Settings in the footer. Details and lifetimes are listed in our Cookie Info.

YouTube and Spotify players load only after you press Play. Label Engine opens only as an external site for demo submissions; MOSH! promo delivery uses our own private portal. When you interact with an external platform, that provider may receive your IP address, device details and usage information and may set its own cookies. Its own privacy terms apply.

5. Who receives personal data

Access is limited to people and providers who need the information for the purposes described above. Recipients may include:

• MOSH! team members and the relevant booked artist;
• website hosting, maintenance, security, email, and form providers;
• Label Engine and other distribution or promotional delivery providers;
• accounting, invoicing, payment, legal, contract, and logistics providers;
• promoters, venues, travel providers, or other booking partners where coordination requires it; and
• public authorities where disclosure is required by law.

Service providers are expected to use personal data only for the agreed service and to protect it appropriately.

6. International transfers

Label Engine states that personal data may be processed in the United States or Canada. Google and other media or infrastructure providers may also process data outside the European Economic Area. Where the GDPR requires safeguards, the relevant transfer must rely on an adequacy decision, the EU Standard Contractual Clauses, or another lawful mechanism. Contact us to request information about safeguards relevant to your data.

7. How long we keep data

We keep personal data only for as long as it is reasonably needed for the stated purpose, legal obligations, and possible legal claims. Our normal retention approach is:

• Promo List applications that are not invited: up to 12 months;
• approved Promo List contacts: until consent is withdrawn or the promotional relationship ends, with inactive records reviewed periodically;
• demos not selected for release: up to 12 months, unless discussions continue or a longer period is agreed;
• booking and general enquiries that do not become a contract: up to 24 months;
• routine correspondence: up to 24 months, unless needed for an active relationship or legal claim;
• contracts, invoices, accounting source documents, and related records: generally seven years where required by Estonian law; and
• technical logs: for the period reasonably necessary for security, troubleshooting, and the hosting provider’s configured retention schedule.

Data may be deleted sooner when it is no longer needed, or retained longer where law, an active dispute, or the establishment or defence of legal claims requires it.

8. Your rights

Subject to the GDPR and any applicable limitations, you may:

• request access to your personal data and a copy of it;
• ask us to correct inaccurate or incomplete data;
• ask for deletion of data;
• ask us to restrict processing;
• object to processing based on legitimate interests or to direct marketing;
• receive data you provided in a portable format where the right applies; and
• withdraw consent at any time, without affecting processing already carried out lawfully.

Send a request to booking@mosh.ee. We may need to verify your identity before acting on a request. We normally respond within one month, as required by the GDPR.

9. Complaints

Please contact us first so that we can try to resolve the issue. You also have the right to complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), Tatari 39, 10134 Tallinn, Estonia, email info@aki.ee, website aki.ee/en, or to another competent supervisory authority in your country.

10. Security and children

We use reasonable organizational and technical measures to limit unauthorized access, alteration, disclosure, or loss of personal data. No internet service can be guaranteed completely secure, so please avoid sending unnecessary sensitive information through ordinary forms or email.

Our professional demo, booking, and Promo List forms are intended for adults. If you are below the age at which you may provide consent under applicable law, use the service only with the involvement of a parent or legal guardian.

11. Changes to this policy

We may update this policy when our services, providers, or legal obligations change. The current version and its update date will always be published on this page. Material changes may also be communicated through the website or directly where appropriate.

MOSH Promo portal and campaigns

For DJ and Radio promo we process the application details listed above, selected segments, consent and status history, the source of a manually requested invitation, campaign delivery records, portal access, release and track downloads, file format, optional rating and private comment. For an unlisted campaign we initially know only the DJ nickname or Radio name and selected role supplied by the visitor. If that visitor later applies by email, the application is manually reviewed and, if approved, access is activated after email confirmation.

Private access uses a random personal link followed by a necessary secure session cookie. Tokens are stored only as non-reversible hashes. The session lasts up to 30 days and is revoked immediately when a campaign is closed or consent is withdrawn. We do not use an email open pixel. A short-lived non-reversible network identifier may be used only to rate-limit abuse; IP addresses are not kept in promo activity records.

We rely on consent for direct promo email and on our legitimate interests in securing requested access, preventing unauthorized redistribution, recording operational delivery and understanding professional release feedback. Campaign email is sent through the SMTP provider configured by MOSH!, and private files are stored with our hosting infrastructure. Individual promo activity is normally kept for up to 24 months. Unconfirmed or rejected applications are normally deleted after 12 months. Feedback is anonymized when a recipient is erased; a non-reversible suppression record may remain to prevent further email.