Privacy Policy

Last updated: [date] · Pursuant to GDPR Art. 13/14

1. Controller

The controller responsible for data processing on this site is [legal name], [address], contact [email]. See our Imprint for full details.

2. What we collect and why

Guestlist & table booking forms. When you submit a request we store the name, email, phone number, and Instagram handle you provide, plus the venue and date. Legal basis: performance of a service you requested (Art. 6(1)(b)). We use this only to process and forward your request to the venue/promoter.

Accounts. If you create an account we store your email, name, phone, Instagram handle, and a hashed password. Legal basis: Art. 6(1)(b).

Usage analytics. We record first-party interaction data (pages viewed, clicks, scroll, viewport size, browser user-agent, referrer) linked to a random session identifier, to understand how the site is used and improve it. Legal basis: [consent (Art. 6(1)(a)) — recommended, requires a consent banner / OR legitimate interest (Art. 6(1)(f))].

Server logs. Our hosting provider processes standard access logs (IP address, timestamp, request) for security and operation.

3. Cookies

We use a session cookie for logged-in users and, where applicable, a preferences cookie. We do [not currently use / use] third-party advertising or tracking cookies.

4. Processors & third parties

• Hosting: [Vercel Inc. — hosting/CDN]
• Database: [Supabase — database, region: ...]
• Messaging: [Resend — transactional email, if used]
• Data may be transferred outside the EU/EEA under appropriate safeguards (Standard Contractual Clauses). [Confirm each processor's mechanism.]

5. Retention

We keep form submissions and account data [for as long as needed to provide the service / X months]; analytics data [X months]; server logs per our host's policy. We delete or anonymize data when it is no longer needed.

6. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict, and port your data, and to object to processing. To exercise any right, contact [email]. You may also lodge a complaint with a supervisory authority (in Germany, your state Data Protection Authority).

7. Data we scrape about venues and DJs

This site aggregates publicly posted information about nightlife venues and performers from their public Instagram accounts, Google Maps, and public event listings. This is publicly available business information. If you are a venue or artist and want your page corrected or removed, contact [email].

This is a placeholder template, not legal advice. Complete the highlighted fields and have it reviewed before public launch.