backstagein

Privacy policy

Last updated: 9 October 2026

This policy explains how we process personal data on Backstagein in line with the General Data Protection Regulation (EU) 2016/679 (GDPR) and Slovak Act No. 18/2018 Coll. on the protection of personal data.

1. Controller

Dmytro Krutii, podnik zahraničnej osoby, Wilsonovo nábrežie 145/48, 949 01 Nitra, Slovakia, IČO 57000786. Contact for all privacy questions: krutiidmytro@gmail.com.

2. What we collect and why

  • Account data: name, email address, password (stored only as a hash), role, phone number and, if you provide it, your Instagram username. Purpose: creating and running your account. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
  • Profile data you publish as an artist, crew member or company: names, stage name, city, date of birth, gender, rank, education, specialisation, biography, availability calendar, company details and contacts, photos and videos. Purpose: showing your profile in the public catalogue so others can find and book you. Legal basis: performance of a contract (Art. 6(1)(b) GDPR). Profiles are visible to visitors of the site; some details (such as surnames and company contacts) are shown only to signed-in users.
  • Marketplace listings and messages you send to other users. Purpose: letting users buy, sell and talk to each other. Legal basis: performance of a contract.
  • Marketing emails: news, tips and offers, only if you agreed to receive them. Legal basis: consent (Art. 6(1)(a) GDPR), which you can withdraw at any time in your account settings.
  • Technical data: IP address, browser type and session data, kept to keep you signed in, protect forms against abuse and investigate security incidents. Legal basis: our legitimate interest in running a secure service (Art. 6(1)(f) GDPR).

We do not sell personal data and do not use it for automated decision-making or profiling.

3. Who processes data for us

  • DigitalOcean, LLC – server hosting and backups; data is stored in the Frankfurt, Germany data centre.
  • Resend, Inc. – sending emails such as address confirmation and notifications.

Both providers are based in the United States. Transfers rely on the EU–US Data Privacy Framework and/or the European Commission's standard contractual clauses.

When you open a video from YouTube or Vimeo on a profile, the player is loaded from that service only after you click it, and the service receives your IP address. The map page loads map tiles from OpenStreetMap, which also receives your IP address. These services process data under their own privacy policies.

4. How long we keep data

  • Account, profile, listings and messages – while your account exists.
  • You can delete your account at any time in your account settings ("Delete my account"). Your profile, calendar, photos, videos, auditions and listings are erased immediately. Your name, email, phone and Instagram are kept, hidden from everyone, for 30 days to deal with possible fraud or disputes (legitimate interest, Art. 6(1)(f) GDPR) and are then erased. Messages you already sent remain visible to the other participants of the conversation, signed as "Deleted user".
  • Server backups are kept for up to 30 days and then overwritten.
  • Data we must keep by law (for example accounting records) – for the period required by law.

5. Cookies

We use only cookies that are strictly necessary for the site to work: a session cookie that keeps you signed in, a security token that protects forms (XSRF-TOKEN) and, if you tick "Remember me", a cookie that keeps you signed in longer. Your light or dark theme choice is saved in your browser's local storage. We do not use analytics or advertising cookies, so we do not ask for cookie consent.

6. Your rights

You have the right to:

  • access the personal data we hold about you and receive a copy;
  • have inaccurate data corrected (most of it you can edit yourself in your account);
  • have your data erased – you can delete your account yourself in your account settings;
  • restrict processing or object to processing based on legitimate interest;
  • data portability;
  • withdraw consent to marketing emails at any time;
  • lodge a complaint with the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov SR), Hraničná 12, 820 07 Bratislava, dataprotection.gov.sk.

To exercise these rights, write to krutiidmytro@gmail.com. We reply within one month.

7. Age

The service is intended for people aged 16 and over.

8. Changes

We may update this policy. The date at the top shows the latest version; we will email you about significant changes.

Create account