PRIVACY POLICY

This privacy policy informs you about the processing of personal data on our website artist4friends.com and in our web application (app.artist4friends.com).

1. DATA CONTROLLER

2. OVERVIEW OF DATA PROCESSING

We only process personal data to the extent necessary to provide a functional website and our content and services.

Types of data processed:

• Master data (e.g., names, email addresses)
• Usage data (e.g., pages visited, access time)
• Meta/communication data (e.g., IP addresses, device information)
• Contract data (e.g., selected plan, payment information)

Categories of data subjects:

• Website visitors
• Registered users (artists/DJs)
• Guests who sign up on friendslists

3. LEGAL BASIS

We process personal data in accordance with the following legal bases:

• Consent (Art. 6(1)(a) GDPR) – You have given us your consent for a specific processing purpose (e.g., statistics cookies, newsletter).
• Contract Performance (Art. 6(1)(b) GDPR) – Processing is necessary for the performance of a contract or pre-contractual measures (e.g., account creation, friendslist management).
• Legal Obligation (Art. 6(1)(c) GDPR) – Processing is necessary for compliance with a legal obligation (e.g., retention periods for invoices).
• Legitimate Interests (Art. 6(1)(f) GDPR) – Processing is necessary to protect our legitimate interests (e.g., security, website operation).

4. HOSTING

Our website is hosted by Linevast (Linevast Ltd., UK). The host processes access data (IP address, date/time of access, amount of data transferred, referrer URL, browser type) in server log files on our behalf.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and efficient operation).

A data processing agreement (DPA) pursuant to Art. 28 GDPR has been concluded with the host.

5. FONTS (LOCALLY HOSTED)

This website uses locally hosted fonts (Bebas Neue, Space Mono). No connections to external servers (such as Google Fonts) are established. Your IP address is not transmitted to third parties.

6. COOKIES AND LOCAL STORAGE

We use cookies and your browser's localStorage to enable certain features and improve the website.

6.1 Technically Necessary Storage

This storage is essential for the operation of the website:

• a4f_consent (localStorage) – Stores your cookie settings. Contains: version, timestamp, selected categories. Not deleted when closing the browser.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest), Section 25(2) No. 2 TTDSG (German Telecommunications-Telemedia Data Protection Act - technically necessary).

6.2 Optional Cookies (only with consent)

The following cookies are only set if you expressly consent:

Statistics Cookies:

• Google Analytics 4 – We use Google Analytics 4 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to analyze website usage. Google Analytics uses cookies to collect anonymous usage data (pages visited, session duration, device type). IP addresses are anonymized. Data is only collected after your consent. You can withdraw your consent at any time via the cookie settings.

Provider: Google Ireland Limited. Privacy Policy: https://policies.google.com/privacy

Marketing Cookies:

• Currently, no marketing cookies are used.

Legal basis: Art. 6(1)(a) GDPR (consent), Section 25(1) TTDSG.

6.3 Withdrawing Consent

You can change your cookie settings at any time by clicking on the cookie icon at the bottom left of the page. There you can withdraw or adjust your consent.

7. DATA PROCESSED IN DETAIL

7.1 Website Visit

When you visit our website, the following data is stored in server log files:

• IP address (anonymized after 7 days)
• Date and time of the request
• Page/file accessed
• Amount of data transferred
• Browser type and version
• Operating system
• Referrer (previously visited page)

This data is used for security and error analysis. It is not combined with other data.

Storage period: 7 days, then anonymized.

Legal basis: Art. 6(1)(f) GDPR.

7.2 Account Registration (App)

When registering in our web app (app.artist4friends.com), we process:

• Email address (for login and notifications)
• Display name/artist name
• Password (stored encrypted)
• Selected plan (Free/Pro)

Legal basis: Art. 6(1)(b) GDPR (contract performance).

Storage period: Until account deletion or upon request.

7.3 Event and Guest Data

When you create an event (friendslist), we process:

• Event name, date, location
• Guest limit
• Names of registered guests
• Optional: email or phone number of guests (if enabled by the artist)

Legal basis: Art. 6(1)(b) GDPR (contract performance with the artist); for guests: Art. 6(1)(f) GDPR (legitimate interest of the artist in guest management).

Storage period: 90 days after the event date, then automatic deletion. Earlier upon request.

7.4 Newsletter Opt-in (Pro Feature)

Pro users can enable an optional newsletter opt-in for their guests. The following is logged:

• Guest's email address
• Time of consent
• Event at which consent was given

Legal basis: Art. 6(1)(a) GDPR (guest's consent).

7.5 Contact

If you contact us by email, we store your inquiry for processing.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest).

Storage period: Until the inquiry is resolved, maximum 2 years.

8. DATA DISCLOSURE TO THIRD PARTIES

Your data will only be disclosed to third parties:

• if you have expressly consented (Art. 6(1)(a) GDPR)
• if it is necessary for contract performance (e.g., payment service providers)
• if we are legally obligated to do so
• if it is necessary to protect legitimate interests and your interests do not outweigh ours

Data Processors:

• Linevast Ltd. (UK) – Hosting

Appropriate data processing agreements pursuant to Art. 28 GDPR have been concluded with all processors.

9. DATA TRANSFER TO THIRD COUNTRIES

Google Analytics: If you consent to statistics cookies, data may be transferred to Google servers in the USA. Google is certified under the EU-US Data Privacy Framework, ensuring an adequate level of data protection. IP addresses are anonymized before transfer.

Note on UK: The United Kingdom is considered a safe third country based on the EU Commission's adequacy decision.

All other data (fonts, hosting) remains within the EU/EEA or UK.

10. YOUR RIGHTS

Under the GDPR, you have the following rights:

• Right of Access (Art. 15 GDPR) – You can request information about your processed data.
• Right to Rectification (Art. 16 GDPR) – You can request correction of inaccurate data.
• Right to Erasure (Art. 17 GDPR) – You can request deletion of your data ("right to be forgotten").
• Right to Restriction (Art. 18 GDPR) – You can request restriction of processing.
• Right to Data Portability (Art. 20 GDPR) – You can receive your data in a machine-readable format.
• Right to Object (Art. 21 GDPR) – You can object to processing based on legitimate interests.
• Right to Withdraw Consent (Art. 7(3) GDPR) – You can withdraw given consent at any time.

To exercise your rights, please contact: datenschutz@artist4friends.com

11. RIGHT TO LODGE A COMPLAINT

You have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data.

Competent supervisory authority for Brandenburg (Germany):

12. SECURITY

We employ technical and organizational security measures to protect your data against manipulation, loss, destruction, and unauthorized access. These include:

• SSL/TLS encryption of all data transfers (HTTPS)
• Encrypted storage of passwords
• Regular security updates
• Access restrictions based on the principle of least privilege

13. CHANGES TO THIS PRIVACY POLICY

We reserve the right to adapt this privacy policy to changed legal requirements or changes to our services. The current version can always be found on this page.