Privacy & Data Protection Statement (GDPR)

We take the protection of your personal data very seriously. This document explains how we handle, store, and secure your information, and under which circumstances data may be visible to others.

1. General Principles

• Your personal data is only used for the purposes for which you provided it.

• We apply strict technical and organizational measures to protect your information against loss, misuse, or unauthorized access.

• We never sell or hand over your data to third parties without your explicit consent, unless legally required.

2. Public Data (EPK)

When you create and publish content in your Electronic Press Kit (EPK), you choose which information is made publicly visible. This data is intended to be shared with external viewers (such as promoters, venues, or press contacts). Everyone who has access to your EPK link can see this information.

• Examples of public data: band biography, photos, music links, press quotes, rider details, etc.

• You remain in full control over what you publish. Information not included in the EPK stays private.

3. Security of Private Data

All other data you provide (such as contact details, login information, or unpublished drafts) is treated as private. To secure this data, we apply a layered security model:

• Authentication: only registered and verified users can access their own data.

• Row-level authorization: every data request is automatically checked to ensure users can only access their own records.

• Encrypted storage and transfer: data is stored securely in modern databases and always transmitted over encrypted connections (HTTPS/TLS).

• Access policies: our system enforces strict rules directly at the data layer, so even if an attacker were to bypass the application, the underlying database would still only return what the user is authorized to see.

4. Your Rights

Under the AVG/GDPR, you have the following rights:

• Access: you can request insight into the data we hold about you.

• Correction: you can update or correct your personal data.

• Deletion: you can request that we remove your data from our systems.

• Portability: you can request an export of your data in a structured format.

5. Contact

If you have questions about this statement or your rights, please contact us at:
? legal@wayland-management.nl