Preamble

Nosh Productions, operator of the website www.backstagepro30.com, attaches particular importance to protecting the personal data of its visitors and students. This Privacy Policy describes how personal data is collected, processed, stored and protected, in accordance with Regulation (EU) 2016/679 of 27 April 2016 ("GDPR") and the amended French Data Protection Act (Loi Informatique et Libertés).

1. Data Controller

The controller of personal data collected via the website www.backstagepro30.com is:

F. Pelissou (sole proprietor), trading as Nosh Productions.

Nosh Productions

Email: contact@backstagepro30.com

Registered place of business: Mitspe 19 Street, Haifa 320000, Israel

Israeli Osek Patur registration number: 340903707

Postal/correspondence address: Nosh Productions, CDV273231, 9 rue Notre Dame de Lorette, 75009 Paris, France - Phone: +33 1 86 98 27 70

2. EU Representative (Article 27 GDPR)

As the data controller is established outside the European Union and processes data relating to individuals residing in the EU, it has appointed a representative established in the European Union, in accordance with Article 27 GDPR: contact@backstagepro30.com

3. Personal Data Collected

Nosh Productions collects the following categories of personal data:

3.1 — Data collected when browsing the website

• IP address, connection data, browsing information (pages viewed, length of visit).

• Data collected by cookies (see Section 8).

3.2 — Data collected when enrolling in the programme

• Identity: surname, first name, date of birth.

• Contact details: postal address, email address, phone number.

• Professional information: professional status, artistic experience, current projects, expectations of the programme.

• Billing data: billing name and address.

• Enrolment and payment history.

3.3 — Data collected during sessions

• Notes taken by the Instructor during sessions (guidance, advice, action plans).

• Documents and works shared by the Student for educational purposes (with their consent).

4. Purposes of Processing

Personal data is processed for the following purposes:

• Managing enrolment and performing the educational services contract.

• Personalising the teaching and providing individual educational follow-up.

• Issuing invoices and managing accounts.

• Communications about the programme (session reminders, educational materials, administrative information).

• Handling any complaints and managing business relationships.

• Complying with legal obligations (retention of accounting records, handling GDPR requests).

• With explicit consent: sending further marketing communications.

5. Legal Bases for Processing

The processing of personal data is based on the following legal grounds:

• Performance of the contract between the Student and the Instructor (Article 6(1)(b) GDPR), for managing enrolment, the educational service and invoicing.

• Legal obligation (Article 6(1)(c) GDPR), for accounting and tax obligations.

• Consent of the data subject (Article 6(1)(a) GDPR), for marketing communications and the use of certain cookies.

• Legitimate interest of the data controller (Article 6(1)(f) GDPR), for improving services and website security.

6. Retention Periods

Personal data is kept for the following periods:

• Enrolment and service data: for the entire duration of the contractual relationship, then for five (5) years from the last interaction, for the purpose of handling any disputes.

• Billing data and accounting records: ten (10) years from the end of the financial year, in accordance with legal obligations.

• Marketing data (where consent is given): three (3) years from the last contact or until consent is withdrawn.

• Browsing data and cookies: thirteen (13) months maximum.

7. Data Recipients

Personal data is processed by the data controller and any technical processors, within the limits of their respective duties and in accordance with the controller's instructions:

• Systeme.io (website hosting and form management).

• Payment service provider (PayPal or equivalent, for processing payments).

• The video-conferencing platform used to deliver the sessions.

• Email delivery providers (where applicable).

• Nosh Productions' accountant and legal advisers, strictly within the scope of their duties.

• The EU representative appointed under Article 27 GDPR.

No personal data is transferred to third parties for commercial purposes without the explicit consent of the data subject.

8. Cookies

The website www.backstagepro30.com uses cookies for the following purposes:

• Cookies strictly necessary for the website to function (cart, session, security): exempt from consent.

• Anonymised audience measurement cookies: subject to the user's prior consent.

• Third-party cookies (social networks, embedded videos): subject to the user's prior consent.

Consent to cookies is collected via a banner on the user's first visit to the website. Users can change their preferences or withdraw their consent at any time via the "Manage cookies" section accessible from the footer.

9. Transfers Outside the EU

As the data controller is established in Israel, some personal data is transferred outside the European Union, to Israel. Israel benefits from a European Commission adequacy decision (decision of 31 January 2011) recognising a level of personal data protection equivalent to that of the EU. No additional specific transfer safeguards are therefore required for these flows.

For technical processors located in other non-EU countries, transfers are governed by the standard contractual clauses adopted by the European Commission or any other mechanism recognised by the GDPR.

10. Data Security

The data controller implements appropriate technical and organisational measures to ensure the security, integrity and confidentiality of personal data, including:

• Secure website hosting (HTTPS encryption).

• Two-factor authentication on administration tools.

• Access restricted to authorised persons.

• Regular, encrypted backups.

• Regular security updates.

11. Your Rights

Under Articles 15 to 22 GDPR, you have the following rights over your personal data:

• Right of access: to obtain confirmation that data concerning you is being processed, and to receive a copy.

• Right to rectification: to have inaccurate or incomplete data corrected.

• Right to erasure: to have your data deleted in the cases provided for by the GDPR.

• Right to restriction of processing: to have the processing of your data temporarily suspended.

• Right to data portability: to receive your data in a structured, readable format.

• Right to object: to object to the processing of your data on grounds relating to your particular situation, or for direct marketing purposes.

• Right to withdraw your consent at any time where processing is based on consent.

• Right to set out instructions regarding the handling of your data after your death.

To exercise these rights, you may contact the data controller at contact@backstagepro30.com, providing proof of identity. A response will be given within one month, which may be extended by two months for complex requests.

12. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority, in particular the French Data Protection Authority (Commission Nationale de l'Informatique et des Libertés, CNIL): 3 place de Fontenoy, 75007 Paris, France (www.cnil.fr), if you believe that the processing of your data does not comply with the GDPR.

13. Changes to this Privacy Policy

This Privacy Policy may be amended at any time. The applicable version is the one in force on the date of your interaction with the website. The date of the last update is shown at the bottom of this Policy.

Last updated: 19 May 2026