DRAFT — pending legal review
→ Legal
Privacy Policy
This policy explains how we handle your personal data under the EU General Data Protection Regulation and Malta's Data Protection Act (Cap. 586).
1.Who is responsible
The controller of your personal data is FGF Stall Ltd., Registered office — address TBA, Malta, producing Malta's Superstar at The Room, by Jungle Joy. You can reach us at hello@example.com.
2.What we collect
Application: name and stage name, email, phone, date of birth, locality, occupation and hometown, social links, details about your act and your story, contract disclosures, availability, the photos and video you upload or link, and the consents you give.
Minors: if you are 16 or 17, we also collect your parent or guardian's name, email and phone number, and their consent.
Newsletter: your email address, the time of your consent, your confirmation status, and a hashed IP address.
Technical: server logs and basic security data when you visit the site.
3.Purposes and legal bases
Reviewing your application and contacting you about callbacks and the show — steps prior to a contract at your request, Art. 6(1)(b) GDPR.
Publishing photos, video and audio of you — your consent, Art. 6(1)(a) GDPR (and Art. 9(2)(a) where special category data is visible).
Newsletter — your consent, Art. 6(1)(a) GDPR, using double opt-in.
Keeping your application on file for future shows — your separate consent, Art. 6(1)(a) GDPR.
Site security, spam and abuse prevention, and defending legal claims — our legitimate interests, Art. 6(1)(f) GDPR.
4.How long we keep it
Applications, including photos and video, are deleted six months after the show, unless you were shortlisted or selected (kept for the duration of any contractual and tax obligations), or you consented to us keeping your application on file for 24 months. Newsletter data is kept until you unsubscribe, plus a short record of the unsubscribe itself. Consent records and server logs are kept only as long as needed to prove compliance or protect the site.
5.Who processes data for us
We use carefully selected providers under data processing agreements: our database, storage and authentication provider (Supabase), our transactional email provider, our website hosting and content delivery provider, and — only if you accept non-essential cookies — a Meta Pixel for measuring the reach of our ads. We do not sell your data.
6.International transfers
Some providers may process data outside the EU/EEA. Where that happens, transfers are covered by an adequacy decision or by the European Commission's Standard Contractual Clauses with additional safeguards. Write to hello@example.com for a copy of the relevant safeguards.
8.Your rights
You have the right of access, rectification, erasure, restriction, data portability and objection. Where processing is based on consent, you can withdraw it at any time with effect for the future — separately or all at once — by emailing hello@example.com; newsletter emails also carry an unsubscribe link. Withdrawal does not affect processing carried out before it.
You may also lodge a complaint with the Office of the Information and Data Protection Commissioner (IDPC), Floor 2, Airways House, High Street, Sliema SLM 1549, Malta.
9.Contact
For anything about your data, write to hello@example.com or to FGF Stall Ltd., Registered office — address TBA, Malta.