PRIVACY POLICY

This Privacy Policy explains how Auditiams Compliance & Risk Ltd ("Auditiams", "we", "us", "our") collects and uses personal data when you visit audent.auditiams.com (the "Website"), the website for AUDENT, the Auditiams entertainment hub, which presents talents, entertainment companies, management agencies and booking agents and offers the Ads Manager, Booking Solution and Reputation Control Live products.

Auditiams Compliance & Risk Ltd is a company registered in Cyprus under registration number HE 428549, with its registered office at Nikou Patichi 59, Limassol, 3070, Cyprus. We are the controller of the personal data described in this policy.

Contact for privacy matters: info@auditiams.com, or by post to the address above, marked "Data Protection".

This policy covers the public Website. If you create an account and sign in to the AUDENT platform, the platform terms and any privacy information provided within the platform also apply to that use.

We process personal data in accordance with the EU General Data Protection Regulation (EU) 2016/679 ("GDPR") and the Cyprus Law providing for the Protection of Natural Persons with regard to the Processing of Personal Data and for the Free Movement of such Data (Law 125(I)/2018).

Information you give us:

►Public browsing of talent and company profiles, ad slots and offer pages: technical and usage data only, unless you contact someone.►Booking and offer enquiries sent through the website: your name, company, email, phone number, event details (date, location, type, budget) and your message.►Sign-up details entered on the website by talents, management agencies, booking agents and entertainment companies: name, stage or company name, email, country and role.►Newsletter subscriptions: email address, name and preferences.►Communications: emails, chat messages and other correspondence you send us, including any information you include.

Information collected automatically:

►Technical data: IP address, browser type and version, device type, operating system, time zone and language settings.►Usage data: pages visited, links clicked, referring website, time spent on pages and approximate location derived from your IP address.►Cookie and local storage data: see our Cookie Policy.

We do not intend to collect special categories of personal data (such as health data or data revealing racial or ethnic origin) through the Website. Please do not include such data in forms or messages unless it is necessary.

►Passing your booking or offer enquiry to the talent, agency or company you chose — Data used: Enquiry data — Legal basis (GDPR Art. 6): Steps prior to entering into a contract at your request; legitimate interest in operating the hub►Creating an account at your request — Data used: Sign-up data — Legal basis (GDPR Art. 6): Performance of a contract (or steps prior to it)►Sending news, offers and event updates — Data used: Email, name, preferences — Legal basis (GDPR Art. 6): Consent (you can withdraw at any time)►Operating, securing and improving the Website, preventing fraud and abuse — Data used: Technical and usage data — Legal basis (GDPR Art. 6): Legitimate interest in running a secure and effective website►Complying with legal obligations and responding to lawful requests from authorities — Data used: Any relevant data — Legal basis (GDPR Art. 6): Legal obligation►Establishing, exercising or defending legal claims — Data used: Any relevant data — Legal basis (GDPR Art. 6): Legitimate interest

Where we rely on legitimate interests, we have balanced those interests against your rights. You can ask us for more information about that assessment.

We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.

We share personal data only where necessary, with:

►Talents, management agencies, booking agents and entertainment companies you contact through the website. They receive your enquiry and use it as independent controllers under their own privacy notices.►Service providers acting on our behalf, including Cloudflare (content delivery and website security) and Render (website hosting), and providers of email delivery and IT support. They process data only on our instructions under a data processing agreement.►Other companies in our group, where needed to respond to your request or provide a service you asked for.►Professional advisers such as lawyers, auditors and insurers, under a duty of confidentiality.►Public authorities, regulators, courts or law enforcement, where required by law or to protect our rights.►A buyer or successor in the event of a merger, acquisition or sale of all or part of our business, subject to confidentiality.

We do not sell your personal data.

Some of our service providers are located outside the European Economic Area (EEA). Where we transfer personal data outside the EEA, we make sure it is protected, either because the European Commission has decided the country provides an adequate level of protection, or by using the European Commission's Standard Contractual Clauses together with any additional safeguards needed. You can ask us for a copy of the relevant safeguards.

►Enquiries and correspondence that do not lead to a contract — Retention period: 2 years after our last contact with you►Newsletter and marketing preferences — Retention period: Until you unsubscribe or withdraw consent, plus a suppression record so we do not contact you again►Website logs and security data — Retention period: 12 months►Data needed for legal claims — Retention period: Up to 6 years after the relevant event, or longer if proceedings are ongoing

We use appropriate technical and organisational measures to protect personal data, including encryption in transit (HTTPS), access controls, regular security updates and staff confidentiality obligations. No transmission over the internet is completely secure, so we cannot guarantee the security of data you send to us online.

Under the GDPR you have the right to:

►Access the personal data we hold about you and receive a copy.►Have inaccurate data corrected and incomplete data completed.►Have your data erased in certain circumstances.►Restrict our processing in certain circumstances.►Receive your data in a portable format and have it transmitted to another controller, where processing is based on consent or contract and carried out by automated means.►Object at any time to processing based on our legitimate interests, and to direct marketing.►Withdraw your consent at any time, without affecting processing carried out before withdrawal.

To exercise your rights, contact us at info@auditiams.com. We may ask you to verify your identity. We will respond within one month, which may be extended by two further months for complex or numerous requests; we will tell you if this applies.

You also have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection in Cyprus (www.dataprotection.gov.cy) or with the supervisory authority in the EU country where you live or work. We would appreciate the chance to address your concerns first.

The Website is intended for adults and businesses. It is not directed at anyone under 18, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

The Website may contain links to third-party websites. We are not responsible for their privacy practices; please read their privacy policies.

We may update this policy from time to time and will publish the current version on this page. Where changes are significant, we will take reasonable steps to bring them to your attention.

Auditiams Compliance & Risk Ltd, Nikou Patichi 59, Limassol, 3070, Cyprus. Registration number HE 428549. Email: info@auditiams.com.