Legal

Privacy and Cookies Policy

Last updated

  1. 1Legal framework
  2. 2Data controller identification
  3. 3Who we are
  4. 4What categories of personal data do we collect?
  5. 5Personal data provided by other users
  6. 6Purposes and legal basis for processing
  7. 7With whom we share your data
  8. 8International transfers
  9. 9Retention period
  10. 10Rights of the data subject
  11. 11How to exercise such rights
  12. 12Automated decision-making
  13. 13Security measures
  14. 14How to be informed about potential changes to our Privacy Policy
  15. 15Contacts

BECKSTAGE values the protection for your personal data and is committed to respecting your Privacy.

In this Privacy Policy, we explain how we collect and process the personal data of all individuals who access, browse or use our website and mobile application (together, the “Platform”), including registered users and individuals whose personal data may be processed in connection with events managed through the Platform.

We have tried to make this Policy as clear and transparent as possible, but if anything is unclear, please contact us at the following email address: hello@beckstage.music.

2Data controller identification

BECKSTAGE TECHNOLOGIES, LDA, with its registered office at Rua Vera Lagoa, 10, 18 A, Lisboa, with the legal person Identification number 519520211 (hereinafter referred to as “BECKSTAGE”) is responsible for the processing of personal data carried out by BECKSTAGE as data controller under the applicable data protection legislation.

Throughout this Policy, references to “we”, “us” or “our” refer to BECKSTAGE.

3Who we are

3.1

BECKSTAGE is a digital platform designed to support the organization and management of concerts and other musical events and to facilitate the coordination of the different professionals and entities involved in such events.

3.2

The Platform enables users, depending on their role and the functionalities made available to them, to create and manage events, invite artists, musicians, technicians and other participants, share logistical and technical information, coordinate responsibilities and assignments, and record information relating to participants and amounts due following an event.

3.3

This Privacy Policy sets out the main information regarding how BECKSTAGE processes personal data in connection with the Platform and the services provided through it.

4What categories of personal data do we collect?

4.1

Personal data is any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier or to one or more elements specific to that person’s physical, physiological, genetic, mental, economic, cultural or social identity.

4.2

Depending on how you use the Platform and on the functionalities made available to you, we may process the following categories of personal data:

  • Identification data: first and last name, username or display name, profile picture, user/account identifier and professional role.
  • Contact data: e-mail address, phone number.
  • Location data: location information (city and country) selected or provided by the User when creating an Account through the Google Places API.
  • Professional and activity data: professional category or role, information relating to your participation in concerts and other events, assigned responsibilities and other professional information made available through the Platform.
  • Technical and usage data: IP address, device type, operating system, browser or application version, access logs, authentication information, security-related information and information regarding your interaction with the Platform.
  • Communications data: information contained in communications exchanged with BECKSTAGE, including communications with our customer support services.
  • Financial and payment data: information relating to amounts due, payments and payment status in connection with events and the use of the Platform.

The categories of personal data actually processed will depend on the Platform functionalities you use, your role and the events in which you participate/promote.

5Personal data provided by other users

5.1

Some personal data processed through the Platform may be provided by another user, including an artist, producer, promoter, event organizer or other participant.

5.2

For example, another user may provide your name, contact details, professional information or information relating to your participation in an event in order to invite you to an event, assign responsibilities to you or coordinate the relevant event.

5.3

Where personal data is provided by another user, we may process such data for the purposes described in this Policy. Where required by applicable data protection law, we will provide the relevant information concerning the source of such personal data.

7With whom we share your data

7.1

In the context of the operation of the Platform, we may share your personal data with service providers and other entities that support us in providing and maintaining the Platform, such as hosting, cloud infrastructure, software, communications, customer support, security, analytics and other technology service providers.

7.2

Where such entities process personal data on behalf of BECKSTAGE, they will only process such data in accordance with our documented instructions and subject to appropriate contractual, technical and organizational safeguards.

7.3

Depending on your role and the functionalities used, certain personal data may also be made available to other users or participants in an event, including artists, musicians, technicians, producers, promoters, event organizers or other professionals involved in the relevant event. The information made available will depend on the purpose of the relevant event, the user’s role, the permissions configured and the functionalities of the Platform.

7.4

We may also communicate your personal data to third parties:

  • where this is necessary for the performance of a contract;
  • where required to comply with a legal or regulatory obligation;
  • where necessary to establish, exercise or defend legal claims; or
  • where you have provided your consent, where consent is the applicable legal basis.

8International transfers

We may transfer your personal data outside the European Union or the European Economic Area (“EEA”) where necessary for the purposes described in this Policy. Where such transfers take place, we will ensure that the applicable requirements under European data protection law are met, including by relying, where applicable, on an adequacy decision, the European Commission’s Standard Contractual Clauses or another lawful transfer mechanism. Where required by applicable law, we will provide information on the relevant safeguards and on how to obtain a copy of them or where they have been made available.

9Retention period

9.1

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law.

9.2

The retention period will depend on the nature of the data and the purpose for which it is processed. In particular, personal data relating to user accounts, events, event participation, communications and amounts due may be retained for as long as necessary to provide the Platform and maintain the relevant records, and thereafter for any additional period required to comply with legal obligations or to establish, exercise or defend legal claims.

10Rights of the data subject

10.1

We seek to ensure that personal data processed by us is accurate, up to date and complete, taking into account the purposes for which it is processed.

10.2

Subject to the applicable legal requirements and limitations, you may exercise the following rights:

Right to be informed
You have the right to obtain clear, transparent, and easily understandable information about how we use your personal data.
Right of access
You have the right to request confirmation as to whether we process your personal data and, where applicable, to obtain access to such data and to certain information about its processing.
Right to rectification
You have the right to request the rectification of inaccurate personal data and the completion of incomplete personal data.
Right to erasure
You may request the erasure of your personal data where the applicable legal requirements are met. This right is not absolute and may be subject to legal exceptions.
Right to object
You may object to the processing of your personal data where the applicable legal requirements are met, including where your data is processed on the basis of our legitimate interests or for direct marketing purposes.
Right to withdraw consent
Where processing is based on your consent, you have the right to withdraw that consent at any time. The withdrawal of consent does not affect the lawfulness of processing carried out before such withdrawal.
Right to data portability
Where applicable, you have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format and to transmit it to another controller, in accordance with the applicable legal requirements.
Right to restriction of processing
You may request the restriction of the processing of your personal data in the circumstances provided for by applicable data protection legislation.
Right to lodge a complaint with the national data protection authority
You also have the right to lodge a complaint with the competent supervisory authority. In Portugal, the competent authority is the Comissão Nacional de Proteção de Dados (“CNPD”). Further information is available at www.cnpd.pt.

11How to exercise such rights

11.1

You may exercise your rights by contacting us using the contact details provided in the “CONTACTS” section below.

11.2

When submitting a request, we may ask you to provide additional information necessary to confirm your identity and to process your request securely.

11.3

We will respond to your request within the period required by applicable data protection legislation.

12Automated decision-making

BECKSTAGE does not currently use personal data to make decisions based solely on automated processing that produce legal effects or similarly significantly affect individuals.

13Security measures

13.1

We implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, unauthorised access and other unlawful forms of processing, taking into account the nature, scope, context and purposes of the processing and the risks involved.

13.2

These measures may include, where appropriate, access controls, authentication mechanisms, encryption, logging, backup procedures, confidentiality measures and other security safeguards.

13.3

We maintain procedures designed to identify, assess and respond to personal data breaches and other security incidents and regularly review our technical and organizational measures.

14How to be informed about potential changes to our Privacy Policy

14.1

Our practices regarding the processing of personal data may change from time to time. Accordingly, this Policy may be updated when necessary.

14.2

We recommend that you review this Policy periodically. Where required by applicable law, we will inform you of material changes through appropriate means, which may include email, notifications through the Platform or other communications.

15Contacts

15.1

If you have any questions regarding this Privacy and Cookies Policy, would like to obtain further information about the processing of your personal data, or wish to exercise your rights as a data subject, please contact BECKSTAGE at:

BECKSTAGE TECHNOLOGIES, LDA.Address: Rua Vera Lagoa, 10, 18 A, LisbonE-mail: hello@beckstage.music
15.2

For requests relating to personal data processed by BECKSTAGE on behalf of one of its business customers, we may direct your request to the relevant customer, as data controller, where appropriate.

Terms and Conditions →