Controller
Innovity sàrl-s, 25, Chemin Rouge
L-4480 Belvaux
Luxembourg, hello@stagency.lu. STAGENCY is a trademark of Innovity sàrl-s. Processing complies with Regulation (EU) 2016/679 (GDPR) and the Luxembourg law of 1 August 2018.
Data we process
- Availability enquiries: name, email, phone, company, VAT number, date, place and country of the event, indicative budget, message.
- Engagements: contact details of the organiser and its contacts, contractual and invoicing data.
- Artists: stage name, legal name, contact details, country of residence, tax and VAT status, bank details, administrative documents (A1 certificate, attestations), photographs and audio excerpts, applications.
- Artist and organiser portal accounts: login, email, connection log.
- Technical data: shortened IP address in server logs, chosen language.
Purposes and legal bases
- Answering enquiries and preparing offers: pre-contractual measures.
- Concluding and performing engagements, invoicing, paying fees: performance of the contract and legal obligations (accounting, tax, ten-year retention).
- Compliance checks linked to the event country (withholding tax, VAT, social security): legal obligations.
- Publishing the roster, photographs and audio excerpts: legitimate interest of the agency and the artist's consent.
- Naming an organiser as a reference: legitimate interest, with the right to object at any time.
- Site security, protection against form abuse: legitimate interest.
Recipients
Data is processed by Innovity sàrl-s and, for the needs of an engagement, shared with the parties involved: the artist receives the event details, the organiser receives the contractual documents. Artists' direct contact details are not passed on to organisers and vice versa; communication goes through the agency. Technical providers: site hosting within the European Union, accounting firm. No sale or rental of data.
Backstage accounts
Artists who create a Backstage account entrust us with their stage name, email, country and, if they use these features, the data of their own gigs, repertoire and clients (name, address, email, VAT number). This data is used solely to run the tool for the artist and is neither published nor used for prospecting. Legal basis: performance of the contract (art. 6(1)(b) GDPR). Plan payments go through Revolut; we never see any banking data. The artist can request deletion of the account at any time.
Retention
Enquiries without follow-up: 24 months. Engagements and invoicing documents: ten years (Luxembourg accounting obligation). Artists' administrative documents: until the end of the collaboration plus the legal period. Portal accounts: until deletion. Unsuccessful applications: twelve months.
Your rights
You have the right of access, rectification, erasure, restriction, objection and portability, and the right to withdraw consent at any time. Write to hello@stagency.lu. You may lodge a complaint with the Commission nationale pour la protection des données, 15 boulevard du Jazz, L-4370 Belvaux, www.cnpd.lu.
Security
Password-protected areas, encrypted connections, role-based access rights, change log.
Cookies
See the cookie policy published on this site.