Legal

Privacy Policy

Last updated: 16 October 2026

This is a plain-language summary of how we handle your data. It does not replace formal legal terms — for specific questions, reach us at info@touringmate.com.

Overview

TouringMate is a touring intelligence and GEMA auditing platform operated by Tribe Music Group AG ("we", "us"). This policy explains what data we collect, why, and the rights you have. We handle your data in a transparent way and in line with both the EU General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (FADP).

Who we are (Controller)

The controller responsible for your personal data is Tribe Music Group AG (operating the TouringMate brand), Altgasse 43, CH-6340 Baar, Zug, Switzerland, company number CHE-443.757.160. For any privacy matter, contact us at info@touringmate.com.

Data we collect

We collect the account details you provide (such as name and email, with passwords stored only as a hash), the artist and tour information you enter, and the GEMA statement files (ABR CSVs) you upload for auditing. We also collect basic technical and log data — such as IP address, browser type and timestamps — needed to operate and secure the service.

Trying TouringMate without an account

You can try TouringMate at app.touringmate.com/start without signing up. For this trial we store the artist you pick, the GEMA statement you upload and the matches you make, linked to a random trial ID instead of an account. Your browser keeps that ID in its local storage so you can come back to your trial. To prevent abuse, we count trial sessions per IP address; that count is deleted after one day. If you sign up, your trial moves to your new account. If you don't, the trial ID expires after 14 days and we delete the trial data, including the uploaded statement, within about two weeks of the trial starting.

Bot protection (Cloudflare Turnstile)

To stop automated abuse of the trial, we use Cloudflare Turnstile, provided by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. When you start a trial, Turnstile checks in your browser whether you are a human. For this, Cloudflare processes your IP address and technical information about your browser and device. We do not use Turnstile for advertising or tracking, and we only receive the result of the check. The legal basis is our legitimate interest in protecting the service from abuse (Art. 6(1)(f) GDPR). Cloudflare may process this data in the USA; Cloudflare is certified under the EU-US and Swiss-US Data Privacy Frameworks. See Cloudflare's privacy policy at cloudflare.com/privacypolicy.

How we use your data

Your data is used solely to provide the service: matching your tour calendar against GEMA payouts, generating reports and claim documents, and supporting your account. We do not sell your data to third parties.

Legal basis

We process your account, artist, tour and GEMA statement data to perform our contract with you (Art. 6(1)(b) GDPR / Art. 31(2)(a) FADP). We process technical and log data to keep the service reliable and secure on the basis of our legitimate interest (Art. 6(1)(f) GDPR). We retain accounting records to comply with our legal obligations (Art. 6(1)(c) GDPR).

Where your data is stored

Tribe Music Group AG is based in Switzerland and your data is stored in Switzerland. Switzerland and the EU/EEA each recognise the other as providing an adequate level of data protection, so transfers between them are treated as equivalent to domestic transfers and need no additional safeguards.

Service providers & sub-processors

To run the service we rely on a small number of carefully vetted providers (such as our hosting and infrastructure partners) who process data on our behalf as sub-processors, bound by data processing agreements. They may only use your data to provide their service to us, never for their own purposes. We do not sell personal data.

Storage & security

Your financial data is encrypted in transit (TLS) and at rest, access is granted on a least-privilege basis, and we apply appropriate technical and organisational measures to protect it. If you suspect unauthorised access to your account, contact us immediately at info@touringmate.com.

How long we keep your data

We keep account, artist and tour data for as long as your account is active and for a reasonable period afterwards in case of legal claims. Billing and accounting records are kept for 10 years as required by the Swiss Code of Obligations (Art. 958f). Technical and log data are kept for a limited period and then deleted or anonymised.

Cookies

This website uses only strictly necessary cookies required to make the site work. We do not use advertising or third-party tracking cookies, and we do not run analytics that profile you, so no cookie consent banner is required. If we ever introduce non-essential cookies, we will update this policy and obtain your consent first where the law requires it.

Your rights

Under the GDPR and the FADP you have the right to access, correct, export and delete your personal data, to restrict or object to certain processing, and — where processing is based on consent — to withdraw that consent at any time. To exercise any of these rights, contact us at info@touringmate.com.

Complaints

If you believe we have handled your data unlawfully, you may lodge a complaint with a supervisory authority. In Switzerland this is the Federal Data Protection and Information Commissioner (FDPIC, edoeb.admin.ch). In Germany it is the data protection authority (Landesdatenschutzbehörde) of your federal state.

Contact

Tribe Music Group AG (TouringMate)
Altgasse 43, CH-6340 Baar, Zug, Switzerland
Company number: CHE-443.757.160
Email: info@touringmate.com