Privacy Policy

1. Overview

Protecting your personal data is important to us. This Privacy Policy explains what data we collect when you use EventLumo, why we collect it, and the rights you have under the EU General Data Protection Regulation (GDPR / DSGVO). It applies to visitors, ticket buyers, and event organizers using our platform.

2. Data Controller

The controller responsible for data processing on this platform is EventLumo, Musterstraße 1, 12345 Musterstadt, Germany. Full contact details are listed in our Impressum.

3. Data We Collect

• Account data: name, email address, password (stored hashed), and role.
• Event & order data: tickets purchased, events created, and payment status.
• Payment data: processed by our payment providers (e.g. Stripe, PayPal); we do not store full card numbers.
• Usage data: IP address, device/browser type, and pages visited, for security and analytics.
• Location data: approximate location (IP-based) or precise location only with your explicit consent, to show nearby events.

4. Purposes & Legal Bases

We process your data to provide and secure the platform and to fulfil ticket purchases (Art. 6(1)(b) GDPR — performance of a contract), to comply with legal obligations such as tax record-keeping (Art. 6(1)(c) GDPR), and, where you have consented, for analytics and personalization (Art. 6(1)(a) GDPR). You may withdraw consent at any time.

5. Cookies & Tracking

We use essential cookies required to operate the platform, and — only with your consent — analytics and personalization cookies. You can review and change your choices at any time via your cookie & consent settings.

6. Sharing With Third Parties

We share data only where necessary: with the organizer of an event you buy a ticket for, with payment providers to process transactions, and with hosting and infrastructure providers acting as processors under data-processing agreements. We do not sell your personal data.

7. Data Retention

We keep personal data only as long as necessary for the purposes described above or as required by statutory retention periods (e.g. tax law). When data is no longer needed, it is deleted or anonymized.

8. Your Rights

Under the GDPR you have the right to access, rectify, erase, restrict, and port your data, and to object to processing. You may also lodge a complaint with a supervisory authority. To exercise your rights, contact us at privacy@eventlumo.com.

9. Data Security

We use appropriate technical and organizational measures — including encryption in transit and access controls — to protect your data against unauthorized access, loss, or misuse.

10. Changes to This Policy

We may update this Privacy Policy to reflect changes to our practices or legal requirements. The current version is always available on this page.