Privacy Policy

1. Introduction

This Privacy Policy explains how personal data is processed when you use StageContract, a digital engagement contract service for musicians. We are committed to protecting your privacy and ensuring transparency about how your data is handled.

2. Data Controller and Processor

3. What Personal Data We Process

When you interact with StageContract as a musician signing a contract, the following personal data may be processed:

• •Name (first and last name)
• •Email address
• •Phone number
• •Personal identification number (personnummer)
• •Home address (street, city, postal code)
• •Bank account details (account number, bank name)
• •Digital signature (drawn or click-to-sign)
• •IP address and browser information (for audit trail)
• •Contract-related data (position, fee, project details)

4. Legal Basis for Processing

Personal data is processed based on the following legal grounds under the General Data Protection Regulation (GDPR):

For audit trail data (IP address, browser information), processing is based on Article 6(1)(f) - legitimate interests of ensuring the integrity and non-repudiation of signed contracts.

5. Data Retention

Personal data is retained for the duration of the contractual relationship between you and the organisation. Signed contracts and their associated audit trails are retained as long as necessary to fulfil legal obligations and to establish, exercise, or defend legal claims. When the data is no longer needed, it will be securely deleted or anonymised.

6. Data Sharing and Transfers

Your personal data may be shared with the following categories of recipients:

• •The organisation (data controller) that sent you the contract
• •Cloud infrastructure providers (for hosting and storage)
• •Email service providers (for sending contract notifications)

We do not sell your personal data. Data transfers outside the EU/EEA are safeguarded by appropriate measures such as Standard Contractual Clauses (SCCs).

7. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

To exercise your rights, please contact the organisation that sent you the contract (as data controller), or reach out to us directly.

8. Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. This includes encryption in transit (TLS), encryption at rest, access controls, and regular security assessments. All signed documents are protected with SHA-256 hash verification to ensure document integrity.

9. Contact

If you have questions about this privacy policy or wish to exercise your rights, please contact us:

You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) if you believe your data has been processed in violation of the GDPR.