GDPR Compliance

ArtistHub ("we", "our", or "us") complies with the EU General Data Protection Regulation (GDPR) and applicable data protection laws. This page outlines how we meet those obligations for the CRM at https://artisthub24.com. The CRM is hosted in the EU (Germany).

For a plain-language overview of organisation isolation, access control, backups, and hosting, see Security & Compliance.

1. Lawful Basis for Processing

We process personal data only where we have a lawful basis:

• Contract: Processing necessary to provide the Service and perform our contract with you.
• Legitimate interests: Improving our services, security, and fraud prevention where balanced against your rights.
• Consent: Where we ask for your consent (e.g. marketing, non-essential cookies). You may withdraw consent at any time.
• Legal obligation: Where we must process data to comply with the law.

2. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your data in certain circumstances.
• Right to restrict processing: Request that we limit how we use your data in certain cases.
• Right to data portability: Receive your data in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time.
• Right to lodge a complaint: You may lodge a complaint with a supervisory authority (e.g. in your country of residence).

To exercise any of these rights, contact support@artisthub24.com with the subject "GDPR Request".

3. Data We Process

We process the categories of data described in our Privacy Policy, including account data, artist and contact data, and usage information. We do not sell your personal data.

4. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes set out in our Privacy Policy, or as required by law. When data is no longer needed, we securely delete or anonymise it.

5. Security Measures

We protect personal data with encrypted backups, email-code 2FA, secure sessions, and access by role. The CRM is hosted in the EU (Germany).

6. International Transfers

Where we transfer personal data outside the European Economic Area, we ensure appropriate safeguards are in place (e.g. adequacy decisions, standard contractual clauses) in accordance with GDPR.

7. Contact & Data Protection

For questions about our GDPR compliance or to exercise your rights:

• Email: support@artisthub24.com
• Subject: GDPR Compliance Inquiry