Privacy Policy

The controller responsible for data processing on Festival Zone (https://www.festival-zone.com) is:

Finity In UG (haftungsbeschränkt)

Astrid-Lindgren-Straße 121, 81829 Munich, Germany

Email: info@finity-in.com

Phone: +49 89 90 422 62 90

Festival Zone is a platform for discovering and presenting festivals. We process personal data only to the extent necessary to operate the website, provide user accounts, and deliver the offered features, or where consent has been given.

This website is hosted by Vercel Inc. In that context, connection data (e.g. IP address, time of access, pages requested) may be processed in server log files. Processing is based on our legitimate interest in providing and securing the service (Art. 6 (1) lit. f GDPR).

More information: https://vercel.com/legal/privacy-policy

For user accounts, login, profile data, and festival content we use Supabase (Auth and Postgres). This may include email address, name, profile details (e.g. preferred genres, country), authentication data, and festival information submitted by organizers.

Legal basis: Art. 6 (1) lit. b GDPR (contract / pre-contractual measures) and Art. 6 (1) lit. f GDPR (secure operation of the platform).

More information: https://supabase.com/privacy

Depending on how you use the platform, the following categories may be processed:

• Master data (e.g. name, email on registration)
• Content data (e.g. profile details, festival listings)
• Usage data (e.g. pages visited, search filters)
• Meta / communication data (e.g. IP address, device/browser via hosting logs)
• Location preference (e.g. selected or inferred country for relevance ranking; no continuous GPS tracking history)

We process data for the following purposes:

• Providing and operating the website
• Registration, login, and account management
• Personalizing search and discovery features
• Creating and managing festival listings by organizers
• Service-related communication
• Security, abuse prevention, and troubleshooting

Where we obtain consent, Art. 6 (1) lit. a GDPR applies. For performance of a contract or pre-contractual measures, Art. 6 (1) lit. b GDPR applies. Legal obligations are covered by Art. 6 (1) lit. c GDPR. Otherwise, Art. 6 (1) lit. f GDPR (legitimate interests, e.g. secure operation and improvement of the service) may apply.

Personal data is stored only as long as necessary for the stated purposes or as required by statutory retention periods. Account data is generally retained until the account is deleted or consent is withdrawn, unless legal grounds require otherwise.

We use technically necessary cookies or similar storage where required to operate the platform (e.g. session / auth cookies). We do not currently use additional tracking cookies. If optional analytics or marketing technologies are introduced later, we will inform you and obtain consent where required.

Personal data is disclosed to third parties only where necessary to perform a contract, where required by law, where a legitimate interest exists, or where consent has been given. Processors (e.g. hosting, auth/database) are contractually obligated to protect the data.

Where service providers process data outside the EU/EEA, this is done only with appropriate safeguards (e.g. Standard Contractual Clauses) or another applicable legal basis.

Under the GDPR you have, in particular, the following rights:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing based on legitimate interests (Art. 21 GDPR)
• Withdrawal of consent with effect for the future

You have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data.

For privacy-related questions, contact us at: info@finity-in.com