Last updated: 11 June 2026. This privacy notice explains how Lyrium processes personal data in relation to the website, the platform, forms, Artist and Professional profiles, contact requests, reviews, payments and service communications.
1. Data controller
The Data Controller and Lycnos di Fois Alessandro, Via Don Mosetto, 59, 10015 Ivrea (TO), Tax Code FSOLSN59M29B354H, VAT No. 12208440011, Turin Chamber of Commerce, REA no. TO - 1318099, hereinafter referred to as "Lyrium" or "the Data Controller".
Contact details for privacy enquiries and support: the Lyrium Support Centre as published on the website, the service email address indicated in the forms and communications, and the certified email address (PEC) alessandro.fois@pec.it. For non-privacy-related operational emergencies, please use the WhatsApp contact details provided in the Help Centre.
No Data Protection Officer has been appointed, as there is currently no legal obligation to do so. Any updates will be published on this page.
2. Roles and stakeholders
Lyrium processes data relating to visitors, applicants, organisers, artists, professionals, representatives of artistic groups, registered users, reviewers, suppliers, contributors and people who contact customer support.
When an artist receives the applicant’s data in order to respond, provide a quote or manage a potential commission, the artist acts as a data controller for any processing carried out after receipt. Lyrium does not control such subsequent processing, except to the extent necessary for technical management, workflow testing, security and the protection of rights.
3. Data processed
Lyrium may process identification and contact details, account details, technical credentials, browsing data, security logs, data relating to the Artist/Professional profile, images, audio, video, links, artistic categories, regions, professional information, tax or payment details to the extent necessary, messages, event requests, reviews, preferences, consents, data relating to orders, memberships, Basic unlocks, email notifications, support and reports.
The applicant may enter details relating to the event: venue, date, type of occasion, artistic preferences, message, contact details and any other information relevant to the request. Irrelevant information, unnecessary sensitive data or third-party data provided without authorisation must not be included.
4. Purposes and legal bases
Data is processed to provide the Lyrium service, enable registration and login, publish and manage Artist and Professional profiles, receive and send contact requests, manage membership plans, unlock Basic access, payments, service communications, reviews, support, security, abuse prevention, logs, accounting and tax obligations, the protection of rights and the technical improvement of the platform.
The legal bases are, depending on the circumstances: performance of the contract or pre-contractual measures; legal obligations; the Data Controller’s legitimate interest in security, platform management and the protection of rights; and the data subject’s consent for optional processing, such as non-essential promotional communications or non-technical cookies.
5. Artist and Professional Profiles and public data
The Artists and Professionals profiles are public or publishable spaces. The information entered or approved by the artist may be made visible in accordance with the active plan: artist’s name, description, images, repertoire, media, territories, categories, technical information, and any contact details or direct channels where provided for in the chosen plan.
The artist must only publish data, images and materials for which they hold the relevant rights, consents and authorisations. If the artist includes data relating to team members, collaborators or third parties, they must be authorised to do so and remain responsible for its accuracy.
6. Contact requests
The data provided by the applicant is used to process the request and may be shared with the selected artist and, if the applicant opts for this option, with other compatible artists automatically identified by the platform in accordance with the service’s rules.
Under the Basic plan, the artist may initially receive a notification that does not include the applicant’s full details; the full details may be provided once the relevant restriction has been lifted. Under the Premium plans, requests are processed in accordance with the policy of the active plan.
7. Payments, membership and technical services
Payments can be processed via WooCommerce and the relevant payment providers active on the website, including any PayPal, WooPayments, Stripe or other configured payment gateways. Lyrium processes the technical order identifiers, amounts, payment status, plan, technical specifications, due dates and data required for accounting purposes. Full card or payment method details are managed by the payment providers in accordance with their respective privacy policies.
8. Email communications and notifications
Lyrium sends technical and service-related emails regarding registration, confirmation, enquiries, account unblocking, payments, membership, expiry dates, reviews, support, security and account management. Unnecessary promotional communications are sent only to the extent permitted by law and, where required, with prior consent or the option to opt out.
9. Reviews and evaluative content
Lyrium may invite the applicant to leave a review of the interaction or service provided. Where published, reviews may include the applicant’s name or identifying details within the limits set out in the form and the review rules. Lyrium may moderate, restrict or remove content that is unlawful, abusive, irrelevant or harmful.
10. Recipients of the data
The data may be disclosed to authorised staff, consultants, technical suppliers, hosting providers, email services, anti-spam services, translation tools, payment gateways, WooCommerce and its components, public authorities where required, artists to whom requests are addressed, and parties necessary for the management of the service.
Data is not sold. The publication of the Artist/Professional profile and the transmission of data to the recipients of the request take place because they are necessary for the service chosen by the data subject.
11. Transfers outside the EEA
Some technical service providers may have their headquarters or infrastructure outside the European Economic Area. In such cases, the transfer takes place, where necessary, on the basis of adequacy decisions, standard contractual clauses, additional measures or other conditions set out in Articles 44 et seq. of the GDPR.
12. Storage
Data is retained for as long as is necessary for the purposes for which it is collected. Account and profile data is retained for the duration of the relationship and for the subsequent period necessary to comply with legal obligations, provide evidence of the relationship, ensure security and protect rights. Tax, order and payment data is retained in accordance with the applicable accounting and tax regulations. Technical logs and security data are retained for periods proportionate to the prevention of misuse and the protection of the service. Enquiries, reviews and communications may be retained to provide evidence of communication history, quality assurance, customer support and the protection of rights.
13. Rights of the data subject
The data subject may request access, rectification, erasure, restriction, objection, data portability where applicable, withdrawal of consent without affecting previous processing, and information regarding the processing. The request may be sent to the contact details set out in this privacy notice. Lyrium may request information necessary to verify the identity of the data subject.
The data subject may lodge a complaint with the Data Protection Authority, in accordance with the procedures set out at www.garanteprivacy.it.
14. Cookies and technical tools
The website uses technical cookies that are necessary for its operation, security, navigation, login, preference management, language settings, shopping basket and checkout. These cookies do not require prior consent, but are described in this policy.
Cookies or tools from WordPress, Enfold, WooCommerce, TranslatePress, email services, anti-spam services, payment gateways and necessary technical components may be present. Examples: WordPress login cookies, test cookies, interface preferences, WooCommerce session cookies, shopping basket cookies, language cookies, cookie banner selection cookies and security cookies.
15. Analytical, marketing and third-party cookies
Any non-anonymised analytics cookies, marketing cookies, profiling cookies, map cookies, embedded videos, social media widgets, advertising pixels, heatmaps or similar tools are used only if enabled in the website’s settings and, where required, subject to the user’s consent via a banner or preferences panel. In the absence of consent, they must remain disabled, except in cases equivalent to technical cookies under the applicable legislation.
Simply continuing to browse the site, scrolling or closing the banner does not constitute valid consent for non-technical cookies. You can change your preferences using the cookie tools available on the website or via your browser settings.
16. Managing cookies via your browser
You can delete or block cookies via your browser. Disabling technical cookies may prevent you from logging in, making payments, selecting a language, using the shopping basket, filling in forms or using other essential functions.
17. Updates
Lyrium may update this policy in response to technical, regulatory or organisational developments. The version published on this page supersedes previous versions from the time of publication, subject to any mandatory requirements.