Controller under GDPR: Moritz Biedenbach.
You may exercise at any time: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), objection (Art. 21), data portability (Art. 20). You can withdraw consent at any time with future effect. Complaints may be filed with a supervisory authority.
List of authorities: https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html.
Server log files (browser type, OS, ISP domain, IP, etc.) are processed to ensure connection, smooth use, security, and optimization.
Art. 6(1)(f) GDPR (legitimate interest in stability/functionality). Recipients: technical processors. Retention: session end; logfiles max 14 days (IP then anonymized). Without IP service cannot be provided.
We use cookies (session cookie up to 1 year). You can delete/block cookies via your browser (see vendor links).
Used for usability; basis Art. 6(1)(f) GDPR.
For analytics/marketing based on your consent (Art. 6(1)(a) GDPR). Withdraw anytime via consent tool; some features may degrade.
During registration we collect personal data (IP, timestamps, name, email). Basis: consent Art. 6(1)(a) GDPR; stored until withdrawal.
To detect technical problems and make EventSync easier to understand, we analyse how the application is used. This happens exclusively on the server, without cookies or any other storage on your device, and only within our own infrastructure – no data is shared with analytics providers or other third parties.
We record which key steps you take (for example sign-up, creating an event, ticket category or promoter, adding and inviting guests, first check-in, starting a subscription), which areas you open, failed form submissions (only the form and the names of the affected fields, never their content) and technical errors (only the error class and the affected page or script file, never error messages or content). We store the event name, timestamp, your user ID, the organization ID and technical IDs.
We do not store names, e-mail addresses or free text of yours or your guests, your IP address, the full user agent, location data below country level, or URL parameters.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in error detection, keeping the service working and product improvement). Retention: 13 months, then automatic deletion.
When you visit our website and public pages we record coarse usage data for technical reasons: time, page visited without URL parameters, country (from the network header of our delivery and protection provider), browser, operating system and device type, referrer domain and campaign parameters (UTM). To recognise a visit within a session we derive a pseudonymous identifier on the server from a truncated IP address and the user agent; the IP address itself is not stored. Legal basis: Art. 6(1)(f) GDPR. This data is deleted after 90 days.
As a signed-in user you can object to the analysis of your usage data at any time under “User profile” (“Do not collect my usage data”). We will then stop recording and delete the data already stored. The data is also deleted when you delete your account. To object as a visitor who is not signed in, send us a message; because the data is not linked to a person, we can only match it using the characteristics you tell us. Your right to object under Art. 21 GDPR remains unaffected.
When you sign in, the authentication component stores the time and IP address of your current and previous sign-in as well as the number of sign-ins to detect abuse and unauthorised access. Legal basis: Art. 6(1)(f) GDPR. IP addresses are deleted automatically 30 days after the respective sign-in.
Additional data (e.g., payment details) to fulfill orders; basis Art. 6(1)(b) GDPR; retention 6–10 years per law.
Double-opt-in; basis consent Art. 6(1)(a) GDPR; withdraw anytime via unsubscribe link.
Processed on legitimate interest Art. 6(1)(f) GDPR or pre-contractual steps Art. 6(1)(b) GDPR. Deletion after 6 months or statutory periods. Providing data is voluntary but required to process your request.
Conversion tracking cookies when clicking ads. Details: Google Privacy Notice. Withdraw via consent tool (may limit use).
Remarketing cookies for interest-based ads in Google network. Details: Google Privacy Notice. Withdraw via consent tool.
We use current encryption (e.g., SSL) over HTTPS.
You may object at any time on grounds relating to your situation to processing based on Art. 6(1)(f) GDPR (including profiling). We will then stop unless compelling legitimate grounds override or processing is for legal claims.
Objection recipient: EventSync UG, Dresdner Str. 12, 69181 Leimen.
We may update this notice to reflect legal or service changes.
Contact: Moritz Biedenbach.
Privacy policy created with help of activeMind AG (Version #2020-09-30).