You are reading this because an artist has listed you as one of their contacts on The Artist Passport, because you appear in a document they uploaded, or because an owner of the artist, or someone working on it through an app the artist connected, added your address to get the artist's activity by email. You did not create an account with us, and you may not have known this until now.
This notice tells you what we hold, why, who can see it, and how to change or remove it. You can do that at any time, without an account, and we will not ask you to justify it.
Who we are
Stagent B.V., trading as TAP (The Artist Passport), registered in the Netherlands under Chamber of Commerce number 75826216, at Keizersgracht 520H, 1017 EK Amsterdam, The Netherlands.
We decide what happens with the data described here, which under the GDPR makes us a controller. For details an artist supplies about you, we and the artist are joint controllers. What that means in practice is set out in Shared responsibility.
Where your details came from
We did not go looking for you. Your details reached us in one of these ways:
- An artist, or someone on that artist's team, entered them so that promoters and venues can reach the right person.
- An app an artist already uses, such as a booking system, sent them to us on that artist's instruction.
- They appear in a document an artist uploaded to their profile, such as a rider.
- An owner of the artist, or someone working on it through an app the artist connected, added your address to get the artist's activity by email.
The artist's page shows which artist listed you. If you ask, we will tell you exactly which account entered your details and when.
What we hold about you
| What | Shown to | Why |
|---|---|---|
| Your name, the organisation you work for, your role and, for an agent, the territories you book in | Anyone visiting the artist's pages | So it is clear who represents the artist |
| Your email address and phone number | Anyone visiting the artist's pages, and approved callers who have accepted our API conditions of use | So the artist can be reached about their work |
| Anything an artist wrote about you in a rider | Everyone who can open the artist's EPK, and approved callers under our API conditions of use. Where the artist closes the EPK, only someone holding a link the artist handed out | So a promoter can put the show on the way the artist needs it |
| Your email address, when it was added for the artist's activity by email, and whether you confirmed or stopped it | The artist's owners and the people working on it through an app the artist connected, on the artist's Activity page. Never the public, never the API | So the mail reaches the address that was chosen for it, and only after you confirm or ask us yourself |
| Anything an artist wrote about you in a booking note | Everyone who can open the artist's EPK. Where the artist closes the EPK, only someone holding a link the artist handed out | So a promoter knows what to arrange before the show |
We do not build a profile of you, we do not track what you do elsewhere, and we do not sell or rent your details to anyone.
Why we are allowed to hold it
We rely on legitimate interests, which is one of the grounds in Article 6(1)(f) of the GDPR.
Our interest is straightforward. A live artist is a moving target: management changes, agents change, phone numbers change. When a promoter works from a stale contact sheet, the wrong person gets the call and the artist loses the booking. A single register that the artist itself keeps current fixes that, and being reachable in it is normally in your interest too, because it is how work finds you.
Your details are on the artist's pages, where a promoter finds them without asking. So what we weigh against your interests is that openness, not a private register. Four things hold the balance.
Only a way to reach you at work. How to contact you about this artist, and nothing else. No home address, no private number, no date of birth, nothing about you beyond that.
One page at a time. TAP publishes no directory of artists, so there is no list of contacts to walk. A reader arrives at one artist's page. Search engines are allowed on a published page unless the artist turns them off, so treat what is on it as findable, and an artist can close its EPK to everyone except someone holding a link it handed out.
Off by default for the artist's own team. A member who wants to be reachable switches it on themselves.
Out on request. We take you off at once, without asking why, and we do not make you wait for the artist to agree. If you tell us the balance falls the other way for you, we act on it rather than argue about it.
An address added for the artist's activity by email rests on a different ground. We mail it the changes only after someone at the address confirms, so for that mail we rely on your consent, under Article 6(1)(a) of the GDPR, and the link at the foot of every mail withdraws it. An agency that works on artists through an app connected to them can also ask us itself to add one of its addresses to those artists. That request is its consent: we add the address without a mail asking to confirm, mail the owners of each artist that we did, and keep the request for as long as the address gets the mail. Holding the address for the 7 days in which we ask, and keeping it on the artist's list marked as stopped once you withdraw, rest on our legitimate interest in asking once and in not mailing an address that said no: while it stands, the address cannot be added again.
Who can see it
- Visitors to the artist's pages see your name, the organisation, your role and, where you are an agent, the territories you book in, with your email address and your phone number, each one a link that opens the reader's mail or dials the number. The EPK offers your card as a file to save as well. How far a page reaches is the artist's own setting: an EPK can be closed to everyone except someone holding a link the artist handed out.
- Callers we have approved can retrieve your contact details through our API. A page hands one contact to one reader; the API hands whole artists to a system, over and over, which is why that route is the one we gate. They must accept our API conditions of use first, which limit them to reaching the artist about their work and forbid resale and building a copy of the register. Using your details to sell you something is a breach of those conditions, and we cut off access when it happens.
- Anyone reading the artist's pages can also write to you through the message form under Contacts, without seeing more than the pages already show. They pick what the message is about and it reaches the contacts listed for that role: bookings reach agents, press reaches the publicist, and so on. You receive their name, their address and what they wrote, and your answer goes straight back to them. We pass it on and keep no copy of what they wrote; what we record is that a mail went to your address and the subject line it carried.
- The artist that listed you sees everything they entered, and in its stats how many times a day visitors clicked your email address, your phone number, your website or Save contact on your entry: a count per contact, never who clicked.
- An assistant the artist connects, such as Claude or ChatGPT, sees what the artist or its team could see about you in the editor, each time they ask it something, for as long as they keep it connected.
Approved callers are listed in Who receives register data.
Our conditions require callers to delete contact details within 24 hours and take a fresh copy, so a correction reaches them on their next read. We cannot reach into someone else's systems, so we do not promise that every copy disappears. We promise that we require it.
How long we keep it
For as long as the artist keeps you listed. When the artist removes you, or removes their profile, your details go with it.
An address added for the artist's activity by email gets one mail asking you to confirm, and nothing else until you do, unless you asked us to add it yourself. If nobody confirms within 7 days, we delete it. Once confirmed, it stays until an owner or the person who works on the artist through an app removes it, or until an owner disconnects the app through which it was added. Stop it from the link at the foot of any mail, without an account: the address then stays on the artist's list marked as stopped, so they can see you did, until they remove it. Stopping it before you confirm keeps it marked as stopped in the same way. The artist's Activity page keeps a line naming the address each time it was added, confirmed, stopped or removed, for as long as the artist exists, like every other change to the artist.
If you ask us to remove you, we do it and we record that you asked, so that the same details do not reappear the next time the artist syncs from another system.
What you can do
You do not need an account for any of this, and none of it costs anything.
- Correct something. Tell us and we will fix it, or point you to the artist if it is theirs to change.
- Ask what we hold. We will send you everything, and tell you where it came from.
- Object, or be removed. Say the word and you come off the artist. We do not ask why.
- Tell us it is not you. If someone with your name has been listed by mistake, we take it down.
Write to help@tap.fm and tell us which artist listed you.
You also have the right to ask us to restrict what we do with your details, and to receive a copy in a machine-readable form.
If you are under 16
We do not expect anyone under 16 to be listed as a professional contact. If that has happened, tell us and we will take the entry down.
If you are not happy with how we handled it
Tell us first, so we can put it right. You can also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, at autoriteitpersoonsgegevens.nl.