1. Name and Address of the Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws is listed in the imprint.

2. General Principles of Data Processing

We collect, process, and use personal data only in compliance with the relevant data protection regulations. This means that user data is only processed if there is a legal permission or consent. We take organizational, contractual, and technical security measures in accordance with the state of the art to ensure that the provisions of data protection laws are complied with and to protect the data we manage against accidental or intentional manipulation, loss, destruction, or against access by unauthorized persons.

3. Collection and Processing of Personal Data

Below we inform you about the individual processing operations, their scope, and purpose.

a) When visiting the website (Server Log Files)

Purpose: Ensuring the security and stability of the platform, establishing a connection, administrative purposes.

Data processed: IP address, date and time of access, name of the retrieved file, amount of data transferred, referrer URL, browser type and version, operating system.

Legal basis: Our legitimate interest (Art. 6 Para. 1 lit. f GDPR).

b) When registering an account

Purpose: Creation and management of your user account, fulfillment of the user agreement, provision of personalized functions.

Data processed: Name, email address, password (encrypted). For organizers additionally: organizer name, legal form, industry, contact details, address, legal information (VAT ID, commercial register) and verification documents.

Legal basis: Fulfillment of a contract (Art. 6 Para. 1 lit. b GDPR).

c) When using interactive functions (user-generated content)

Purpose: Publication and display of the content you create (events, reviews, comments, profile information) in accordance with the purpose of the platform.

Data processed: All content that you actively enter on the platform, including texts, images, reviews, and metadata such as timestamps. This data is linked to your profile.

Legal basis: Fulfillment of a contract (Art. 6 Para. 1 lit. b GDPR).

d) When contacting us (Support Form)

Purpose: Processing your request and communicating with you.

Data processed: Name, email address, subject, message, and if applicable, event ID.

Legal basis: Performance of pre-contractual measures or fulfillment of a contract (Art. 6 Para. 1 lit. b GDPR).

e) Voluntary demographic information and preferences

Purpose: Improving personalized event recommendations; providing anonymized, aggregated statistics for organizers.

Data processed: Year of birth, gender, marital status, preferred categories, and cities.

Your individual demographic data will never be publicly displayed or shared with third parties. It is used exclusively in aggregated and anonymized form for statistics.

Legal basis: Your voluntary consent (Art. 6 Para. 1 lit. a GDPR), which you can revoke at any time by deleting the information in your profile.

4. Disclosure of Data to Third Parties and Third-Party Providers

Your personal data will not be transferred to third parties for purposes other than those listed below.

a) Payment Service Providers

If you use paid services, your payment data (e.g., credit card number) will be passed on to the payment service provider commissioned by us (e.g., Stripe) for payment processing. The legal basis is Art. 6 Para. 1 lit. b GDPR.

b) AI Services (Google AI Platform / Vertex AI)

For optional functions such as the analysis of event flyers or the creation of event descriptions, we use AI services from Google. For this purpose, the data you provide (images, event key data) are transferred to Google servers. We do not transmit any directly personal master data (name, email). The legal basis is our legitimate interest in providing innovative functions (Art. 6 Para. 1 lit. f GDPR).

c) Hosting and Technical Service Providers

Our platform is hosted by an external service provider (e.g., Vercel, Firebase). The data collected during the use of this website is stored on their servers. We have concluded a data processing agreement (DPA) with them, which ensures that your data is processed in accordance with the GDPR.

d) Legal Obligations

We only pass on your data to government institutions and authorities if this is required as part of a legal obligation or for the prosecution of criminal offenses.

5. Cookies and Tracking Technologies

Our platform uses cookies. Detailed information and management options can be found in our separate **Cookie Policy**.

6. Your Rights as a Data Subject

You have extensive rights regarding your data stored by us:

You have the right to **access** (Art. 15 GDPR), **rectification** (Art. 16 GDPR), **erasure** ("right to be forgotten", Art. 17 GDPR), **restriction of processing** (Art. 18 GDPR), **objection** to processing (Art. 21 GDPR), and the right to **data portability** (Art. 20 GDPR) at any time. Furthermore, you have the right to **withdraw** a given consent at any time (Art. 7 Para. 3 GDPR) and to lodge a **complaint** with a supervisory authority (Art. 77 GDPR).

7. Duration of Data Storage

We store your personal data only for as long as is necessary to achieve the purposes stated here or as provided for by the various storage periods stipulated by the legislator. After the respective purpose ceases to apply or these periods expire, the corresponding data is routinely blocked or deleted in accordance with the statutory provisions. Data in backups is deleted after the backup rotation cycles expire.

8. Protection of Minors

Our offer is generally aimed at adults. Use by persons under the age of 16 is not permitted without the consent of their legal guardians. We do not knowingly collect data from minors. If we become aware of this, we will delete the relevant data immediately.