Privacy Policy

1. Information We Collect

1.1 Personal Information You Provide

• Account Information: Name, email address, password
• Profile Information: Display name, profile picture
• Event Information: Event details you create, including location, description, images
• Communication: Messages you send to us or other users

1.2 Payment Information

1.3 Information Collected Automatically

• Device Information: IP address, browser type, device identifiers
• Usage Data: Pages visited, features used, time spent on Service
• Location Data: Approximate location based on IP address and precise location if you grant permission
• Cookies: See our Cookie Policy for details

2. How We Use Your Information

2.1 Primary Purposes

• Service Provision: To provide and maintain our Service
• Account Management: To manage your account and authenticate users
• Event Management: To display, organize, and facilitate event discovery
• Payment Processing: To process ticket purchases, refunds, and organizer payouts
• Communication: To send service-related notifications and respond to inquiries

2.2 Payment-Related Communications

We may send you transactional emails related to payments, including:

• Purchase confirmations and ticket receipts
• Refund notifications
• Payout confirmations for organizers
• Event change notifications affecting your tickets

2.3 Legal Basis for Processing (GDPR)

• Contractual Necessity: To provide the Service you've requested, including processing payments
• Legitimate Interest: To improve our Service, ensure security, and prevent fraud
• Consent: For optional features like precise location tracking
• Legal Obligation: To comply with applicable laws, including tax and financial regulations

3. Information Sharing

3.1 Third-Party Services We Use

We share personal data with a small set of service providers that help us operate EventMaps, in these categories: payment processing (Stripe), authentication, cloud hosting and content delivery, database hosting, image storage and delivery, map services, transactional email, error monitoring, analytics, and notification delivery. The full, current list of these providers, their locations, and links to their data-processing terms is published in our Data Processing Agreement (Section 6.1).

3.2 When We Share Information

• Event information you create is publicly visible to other users
• With Stripe to process payments and prevent fraud
• With service providers who assist in operating our Service
• When required by law or to protect rights and safety
• In connection with business transfers (mergers, acquisitions)

4. Your Rights Under GDPR

5. Data Retention

Note: We retain transaction records for 7 years to comply with Spanish tax law and EU financial regulations. This includes purchase history, refunds, and payout records.

Usage Data: We use third-party analytics (including Google Analytics) to understand how the Service is used. This data is processed in aggregate and retained according to those providers' own retention policies. See our Cookie Policy for details.

6. Security Measures

We implement industry-standard security measures including:

• Encryption of data in transit (TLS/SSL) and at rest
• Regular security assessments and updates
• Access controls and authentication requirements
• Secure backup and recovery procedures
• PCI-DSS compliant payment processing through Stripe

7. International Data Transfers

Your data may be transferred to and processed in countries outside the EU. Some of our providers process data in the United States — see the provider list in our Data Processing Agreement. We ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Data Processing Agreements with all third-party providers
• Verification that providers maintain adequate security measures

8. Children's Privacy

Our Service is not intended for children under 13 (or under 16 for account creation). We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will delete it immediately. If you believe a child has provided us with personal data, please contact us at support@eventmaps.io.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will:

• Post the updated Privacy Policy on this page
• Update the "Last Updated" date at the top
• For significant changes, notify you by email or through a notice on our Service

10. Contact Information