GetEventNow

Privacy Policy

Introduction

GetEventNow is committed to protecting your privacy. This Privacy Policy explains what data we collect, how we use it, and how you can exercise your rights.

Legal Basis for Processing

The processing of your personal data is based on the following legal grounds: your consent (for using the platform), contract performance (for providing our services), and our legitimate interests (for platform security and abuse prevention).

Mandatory or Optional Data

Only the data required to create your account is mandatory: your sign-in identifier (email via Google or Telegram account) and a display name. All other data (birth year, gender, photo, bio, etc.) is optional and its absence does not affect your use of the platform.

Data Collected

We collect the following data:

  • Email address (Google sign-in) or Telegram ID (mobile app sign-in)
  • Telegram profile: first name, username and photo (mobile sign-in)
  • Date of birth (required for member accounts, shown publicly only with your consent)
  • Gender (required for member accounts, shown publicly only with your consent)
  • Profile photo and banner
  • Profile information (display name, bio, city, music styles, social links)
  • Published content: events, flyers, photos, videos, marketplace proposals and messages
  • Follow history and tracked events
  • Push notification token (mobile app)
  • Transaction history (amounts, statuses) · no banking data stored
  • IP address (security and rate limiting)
  • User-Agent (technical logs)

Data Usage

Your data is used to: provide our services, personalize your experience, send notifications (in-app, push and email), process your payments, improve our platform via internal statistics, detect and prevent abuse, ensure platform security.

Data Sharing

We share your data only with:

  • Our hosting provider (servers and database located in Germany)
  • A CDN and network security provider
  • A transactional email delivery service
  • AI service providers (content moderation, image and text generation, translations)
  • Authentication providers (sign-in via Google or Telegram account)
  • A push notification service (mobile app)
  • Bakong (payments via KHQR)
  • An error monitoring service (technical data only)

Data Retention

Your data is retained as long as your account is active. Rate-limiting data is automatically deleted within 24 hours. Upon account deletion, your profile and personal data are deleted immediately and your content is removed from the platform.

Your Rights

You have the following rights:

  • Right of access: request a copy of your data
  • Right of rectification: correct your inaccurate data
  • Right to be forgotten: request account deletion
  • Right to portability: export your data

Data Security

We use TLS 1.3 encryption for all communications. Data is encrypted at rest in our PostgreSQL database. Our backups are encrypted and stored securely. We apply the principle of least privilege and strict RLS (Row Level Security) policies.

Cookies

We use httpOnly and Secure cookies for authentication. Cookies are marked SameSite=Lax to protect against CSRF. We do not use third-party advertising tracking cookies.

Data Hosting

Your data is hosted on our secure servers located in Germany. Some providers listed above may process data outside Europe; these transfers are limited to what is strictly necessary and secured via TLS.

Children's Privacy

Creating a GetEventNow account is not intended for persons under 18 years of age (browsing public events remains free). We do not knowingly collect personal data from minors. If we discover we have collected data from a minor, we will delete it immediately.

Privacy Policy Changes

We may update this Privacy Policy. Significant changes will be announced by email or notification. Continued use of the platform after changes constitutes acceptance of the new policy.

Contact

For any questions regarding this Privacy Policy or to exercise your rights, please contact us at [email protected]

Data Protection Authority

In accordance with GDPR, you have the right to access, rectify, delete, limit, and object to the processing of your data. You can exercise these rights by contacting us at [email protected]. You also have the right to lodge a complaint with the relevant data protection authority.