No public evidencediscogs and GDPR
CertReports found no public GDPR evidence for discogs as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
- Kind
- listing
- Issued or listed
- 27 Jan 2017
- Expires or valid through
- 7 Aug 2027
- Scope
- We practice privacy by design and only collect and process that information which is necessary to provide the Service or meet Our legitimate business needs. We conduct risk assessments on Our processing activities to ensure they do not cause undue harm to individuals. Generally, We collect the following categories of personal information from Service users: (1) Identity and Contact Information: (a) To provide the Service, including account registration, buying, selling, contributing, etc. (this information is shared with Operating Systems and platforms; Email service providers; and Parties to a transaction (if using the marketplace)), and (b) When provided with a job application, it is used to consider Your employment with Us or, if employed, to provide benefits or comply with legal reporting obligations (Job application information is not shared; Employee benefit information is shared with benefits providers and regulators, as applicable); (2) Personal and Company Information, Contact Information, Bank Details and Commercial Information of Sellers for legal purposes, to report Your taxpayer information to relevant tax authorities and comply with Our tax obligations (information is shared with Tax authorities and regulators, as applicable, and Seller Verification Service Providers) (3) Commercial Information to provide the Service related to transactions (information is shared with Operating Systems and platforms; Email service providers; and Parties to a transaction (if using the marketplace)); (4) Technical Information to provide the Service, including personalization and performance/ analytics to improve the Service (information is shared with Operating Systems and platforms); (5) Geolocation Information to provide the Service, including personalization and targeted advertising (this information is shared with Operating Systems and platforms, and with analytics and advertising networks if You allow performance, targeting, or social media cookies - this constitutes a “sale” under California Privacy Rights Act); (6) Professional and Educational Information to consider Your employment with Us (this information is not shared outside the company); (7) Inferred Information to provide the Service, including personalization and targeted advertising (this information is shared with Operating Systems and platforms, and with analytics and advertising networks if You allow performance, targeting, or social media cookies - this constitutes a “sale” under California Privacy Rights Act); (8) Browsing Information to personalize targeted advertising (this information is shared with analytics and advertising networks if You allow performance, targeting, or social media cookies - this constitutes a “sale” under California Privacy Rights Act); (9) Contest and Giveaway Contact Information to provide contests and giveaways (this information is not shared unless explicitly disclosed in contest or giveaway terms, in which case information may be shared with disclosed partners supplying the prizes); and (10) Artist Information to provide the Service, including archiving artist information about publicly distributed music releases (information is shared with cloud service providers). Please reference the "Information Collected" <https://support.discogs.com/hc/en-us/articles/360009334513-Privacy-Policy#informationcollected> and "Information Sharing and Disclosure" <https://support.discogs.com/hc/en-us/articles/360009334513-Privacy-Policy#informationsharing> for detailed charts.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 17 Sep 2026 | Zink Media, LLC d/b/a Discogs: Active: EU-US Certification, SW-US Certification, UK Extension Certification | Live pagesha256 7cf14a9fcf |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is discogs GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the Consumer apps category) whose GDPR row is verified or vendor-stated, ranked by similarity.
No Consumer apps vendor has GDPR evidence in the index yet.