Privacy policy

Controller

The controller within the meaning of the GDPR is Marvin Kaes & Georg Schaal GbR, Christian-Schult-Str. 7, 50823 Köln, Germany, represented by Marvin Kaes and Georg Schaal, email: contact@eventguide.ai (see legal notice).

What data we process

We process: (1) server/access logs (e.g. IP address, timestamp, page requested, user agent) to keep the service secure and running reliably; (2) on registration and login: your email address and a hashed password; (3) on newsletter sign-up: your email address; (4) when you submit an event via our form: the event and contact details you provide; (5) when you use "Ask Eventguide" (our AI chat): your input, in order to generate a reply (see the "AI chat" section). The legal bases are performance of a contract or pre-contractual measures (Art. 6 (1) (b) GDPR), our legitimate interest in a secure, functioning service (Art. 6 (1) (f) GDPR), and — for the newsletter and AI chat — your consent through active use of the respective feature (Art. 6 (1) (a) GDPR).

Hosting (Vercel)

Our website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. Vercel processes access data as our processor. As a US company, this may involve a transfer of data to the USA (a third country), which is safeguarded through EU Standard Contractual Clauses (Art. 46 GDPR).

Database (Neon)

Our database (PostgreSQL) is operated by Neon Inc. in a region within the EU (Frankfurt). Neon processes the data stored there as our processor.

To send our newsletter we process your email address. Sign-up uses a double-opt-in process: after entering your address we send you a confirmation email; only after you click the confirmation link do we add you to the list. The legal basis is your consent (Art. 6 (1) (a) GDPR). You can unsubscribe at any time via the link in every email or by writing to contact@eventguide.ai.

Transactional email (Resend)

To send transactional emails (e.g. email confirmation, team invitations, password reset) we use the service Resend, operated by Resend, Inc., San Francisco, USA. Resend processes the data needed for each message (email address, message content) as our processor; this may involve a transfer to the USA (a third country), safeguarded through EU Standard Contractual Clauses. The legal basis is performance of our contract with you (Art. 6 (1) (b) GDPR).

Analytics

To analyze how our website is used, we employ Vercel Web Analytics and Vercel Speed Insights. These services work without cookies and do not build personal profiles. Only aggregated metrics such as page views and load times are collected. The legal basis is our legitimate interest in a needs-based design of the website (Art. 6 (1) (f) GDPR).

AI chat ("Ask Eventguide")

Our "Ask Eventguide" feature answers your questions about events using language models from OpenAI, which we access via the Vercel AI Gateway. Your input is sent to OpenAI, OpenAI L.L.C., San Francisco, USA, for this purpose; this may involve a transfer to the USA (a third country), safeguarded through EU Standard Contractual Clauses. The legal basis is your consent through active use of the chat (Art. 6 (1) (a) GDPR).

Cookies

We use only technically necessary cookies: a cookie to remember your selected city (eg_city), a cookie for the invitation/onboarding process (eg_onboarding_token, 24 hours), and a login session cookie (30 days). We do not use marketing or tracking cookies. The legal basis is § 25 (2) TTDSG (technically necessary) in conjunction with Art. 6 (1) (b) and (f) GDPR. Because only technically necessary cookies are used, no cookie consent banner is currently required.

Your rights

You have the right to access, rectification, erasure, restriction of processing, objection and data portability, as well as the right to lodge a complaint with a supervisory authority.

Contact for privacy requests

For all privacy requests, contact contact@eventguide.ai.