Privacy and Cookies Policy
Last updated: March 3, 2026
1. Framework
This Privacy and Cookies Policy governs how KORDIA PORTUGAL, LDA (“KORDIA”) uses and protects information provided by the user during registration and navigation on the Platform.
By registering, the user declares to have read, understood, and accepted to be bound by this Policy and KORDIA's Terms and Conditions.
KORDIA commits to respecting the obligations imposed by the Personal Data Protection regime and current legal principles.
Personal Data Protection regime refers to Regulation (EU) 2016/679 ('GDPR'), Law No. 58/2019, the ePrivacy Directive, and other complementary legislation.
The information collected ensures simple, secure, and functional navigation, maintaining the quality of the Platform's features.
In compliance with Article 13 of the GDPR, KORDIA provides the necessary information for the user to understand the processing of their data.
Please note that while the Platform may be used by legal entities (companies or bands), KORDIA may process personal data of individuals associated with such entities.
2. Authorization for Personal Data Processing
The request for registration and account creation signifies conscious and express acceptance for personal data to be processed by KORDIA under the terms described herein.
When processing is based on consent, it may be withdrawn at any time without affecting the lawfulness of processing carried out before its withdrawal.
3. Information and Processing of Personal Data
Depending on the features used, KORDIA may process the following categories of personal data:
Identification and Contact
Name (including legal name), profile picture, email, and, where applicable, phone number and address.
Profile Data (Musician)
Stage name, type, location, biography, and portfolio content (video links and photographs).
Quotes and Bookings
Date, time, type and location of the event, agreed conditions, and interaction history.
Communication
Messages and media exchanged in the internal Chat and communications with Support.
Reviews and Feedback
Ratings and comments submitted by users after events.
Moderation
Information and communications related to safety reports and appeals.
Technical Data
IP address, browser type, device, language, and operational metrics.
Financial Data and Payments
KORDIA integrates a payment service provider (Stripe). KORDIA does not store raw bank data or card numbers, processing only transaction identifiers and data necessary for invoicing (such as NIF/VAT).
Special Categories of Data
KORDIA does not intend to collect sensitive data (Art. 9 GDPR). If the user voluntarily shares such data via Chat, it should be limited to what is strictly necessary.
4. Purpose and Use of Data
Processing is carried out based on the following legal grounds:
- Contract performance: Account management, operational communications, and booking notifications.
- Legal obligation: Compliance with tax obligations and retention of billing documentation.
- Consent: Non-essential cookies and newsletter subscriptions.
- Legitimate interests: Security verification, moderation, and fraud prevention.
Communication to Third Parties
KORDIA uses subcontractors for hosting, authentication, email, and payments, who access only the strictly necessary data.
Data Retention
Billing data is retained for 10 years as required by law. Moderation and security records are kept for the period necessary to defend rights and comply with the DSA.
5. Data Subjects' Rights
The User may, at any time, exercise their rights with KORDIA.
5.1 Access, Rectification, or Modification
Right to consult and update profile data, subject to technical or legal validations when necessary.
5.2 Objection and Restriction
Right to object to processing based on legitimate interests for reasons related to their particular situation.
5.3 Portability
Right to receive data in a structured, machine-readable format to transmit to another controller.
6. Profiling and Automated Decisions
KORDIA uses automated mechanisms to sort search results, recommendations, and technical security.
No exclusively automated decisions producing significant legal effects without human intervention are made, except those necessary for contract performance.
7. Data Protection Officer
For any questions or exercise of rights, you may contact our Officer via email:
suporte@kordia.pt8. Policy Modifications
KORDIA may modify this Policy at any time to reflect legislative or technical changes. The user will be informed at the next login after significant changes.
9. Applicable Law and Jurisdiction
This Policy is governed by Portuguese and European legislation. Portuguese courts have exclusive jurisdiction to resolve disputes relating to its interpretation or enforcement.