Last updated: September 2026
This Privacy Notice explains how CUE Artists (“CUE”, “we”, “us”) collects and uses personal data when you visit cueartists.eu, submit an application, book a programme or contact us. We process personal data in line with the EU General Data Protection Regulation (GDPR) and the Maltese Data Protection Act.
1. Data controller
CUE Artists is the data controller for the personal data described in this notice. You can reach us through the Contact page.
2. What data we collect
- Application and booking data — name, email address, phone number, age confirmation, location, musical background, links to your music or social profiles, and the answers you give in the application form.
- Payment data — invoicing details and payment confirmations. Card details are handled by our payment provider and are never stored by CUE.
- Communication data — emails, messages and call notes exchanged with you.
- Programme data — attendance, session notes, feedback and development records created during your programme.
- Website data — technical information such as IP address, browser type, pages visited and cookies (see our Cookie Policy).
3. Why we use your data and on what legal basis
- To review your application and deliver your programme — necessary for the performance of a contract, or to take steps at your request before entering one.
- To invoice, take payment and keep accounting records — necessary to meet our legal obligations.
- To answer enquiries and provide support — our legitimate interest in running the service.
- To send programme updates, news and offers — only with your consent, which you can withdraw at any time using the unsubscribe link or by contacting us.
- To keep the website secure and improve it — our legitimate interest; analytics cookies are used only with your consent.
4. Who we share data with
We share data only where needed to run CUE: with our tutors (for the programme you join), our hosting, email, form and payment providers, and professional advisers. Some providers may process data outside the EEA; where they do, we rely on EU Standard Contractual Clauses or an adequacy decision. We never sell personal data.
5. How long we keep data
- Applications that do not lead to a booking: up to 12 months, then deleted.
- Booking, programme and communication records: for the duration of the programme and up to 5 years afterwards.
- Invoices and accounting records: as required by Maltese tax law (currently 10 years).
- Marketing consent: until you withdraw it.
6. Your rights
You have the right to access, correct or erase your personal data, to restrict or object to its processing, to data portability, and to withdraw consent at any time. To exercise these rights, contact us through the Contact page. You also have the right to lodge a complaint with the Office of the Information and Data Protection Commissioner (IDPC) in Malta or your local supervisory authority.
7. Children
Our programmes are open to applicants aged 16 and over. Applicants under 18 require the consent of a parent or legal guardian, whose contact details we may also process for that purpose.
8. Changes to this notice
We may update this notice from time to time. The latest version is always published on this page.