Privacy

When you send an enquiry

We store your name, email, phone, company and what you tell us about the event, along with our conversation with you about it. The purpose is to answer you, make an offer and carry out any agreement (GDPR Art. 6(1)(b)). If you are a contact person for a company, the basis is our legitimate interest in following up the enquiry (Art. 6(1)(f)).

The enquiry is deleted 24 months after the last activity. Attachments you send by email are deleted after 12 months, unless they have been added to an agreed booking. If you are a contact person at a client, your details are deleted when they have not been used for 3 years — neither changed nor used for a booking with the company. Contracts and invoicing records are kept for five years, as Norwegian bookkeeping law requires.

The form is protected against bots by Cloudflare Turnstile, which looks at technical information about your browser, not at who you are.

When you receive a personal page from us

If we send you a personal page with proposals (Kjente Opportunities or Kjente Clients), we store the name and email address it was sent to, when the page was first opened, and the answers given on it — with the name of whoever answers, if filled in. The purpose is to follow up the proposals (Art. 6(1)(b) or (f)).

The page stops working when it expires or is withdrawn, and everything about it is deleted 12 months after it expires. The link is personal: whoever has it can see the page and answer.

When you book a call

We store your name, email, phone, company, the time and what you write about the topic of the call. The purpose is to hold the call (Art. 6(1)(b), or legitimate interest under Art. 6(1)(f) when you represent a company).

Available times are read from our calendar — only whether a time is free or busy, never what is in it. The booking is deleted 6 months after the call.

When you apply to work with us

We store your name, stage name, email, phone, where you are based, what you tell us about yourself and the links you send. The purpose is to assess the application and get in touch with you (GDPR Art. 6(1)(b) — steps prior to a possible agreement).

The application is deleted 12 months after it was last changed. If you join the roster, what is needed moves to your profile, and it is not published until you have seen it.

When you work with us as an artist, musician or crew

We store your name, contact details, the jobs you are part of, travel and accommodation, and expenses you report. This is needed to carry out the assignments (Art. 6(1)(b)).

Diet, allergies, a health note and next of kin are filled in by you, and only if you want to. Only you can see the health note, and it is stored encrypted. Allergies are shared with the organiser without names, unless you choose to include your name. The basis is your consent (Art. 9(2)(a)), and you can remove the information yourself at any time on My page.

Passport number and date of birth are only collected when we book a specific trip, are stored encrypted, and are deleted automatically after the trip. We never store national identity numbers, bank account numbers or copies of ID.

The newsletter

If you sign up, your email address is stored with Klaviyo, which sends the newsletter for us. The basis is your consent (Art. 6(1)(a)). You can unsubscribe with the link at the bottom of every email.

Cookies and visitor statistics

The site works without third-party cookies. Only if you say yes in the banner do we load Google Analytics (how the site is used), Google Ads (whether our ads work) or videos and music from YouTube and Spotify. Information about your visit, including your IP address, is then sent to Google and Spotify, also in the United States. You can change your mind at any time with the «Cookies» link at the bottom of the page.

Who processes information for us

We use suppliers that process information on our behalf, under a data processing agreement: Railway (hosting and database, EU), Cloudflare (network, security and file storage, EU), Resend (sending email, EU), Sentry (error reports, Frankfurt), Klaviyo (newsletter) and Fiken (accounting and invoicing). Google is only used after consent, see above.

Several of these are US companies. Where information may be processed outside the EEA, the transfer is based on the European Commission’s standard contractual clauses or the EU–US Data Privacy Framework.

When you are part of an event, we share what is needed with the other parties to the assignment — for example names on the crew list to the organiser, or the organiser’s contact person to the artist. We never sell information.

Security and logs

Only those who need it get access, and everyone who logs in to our systems uses two-factor authentication. We log who did what — never the content of what was changed. The change log is deleted after 24 months, and the log of who viewed personal data after 12 months.

Your rights

You can ask for access to what we hold about you, and get it as a file. You can ask us to correct or delete information, to restrict its use or object to it, and you can withdraw consent at any time. Write to us at the address below, and we will reply within one month.

If you believe we process information about you in breach of the rules, you can complain to the Norwegian Data Protection Authority, Datatilsynet (datatilsynet.no).