Privacy Policy

Protecting your personal data is very important to us. We only process your data in accordance with legal regulations (GDPR).

This privacy policy informs you about what data we collect, for what purposes we use it, and what rights you have.

Our website is hosted by an external service provider. When you visit our website, technical information is automatically collected.

The following data is stored in server log files:

• IP address (anonymized)
• Date and time of access
• Browser type and version
• Operating system
• Previously visited page (referrer URL)

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in providing and securing the website).

When registering and using giganizr, we collect the following data:

• First and last name
• Email address
• Password (stored encrypted)
• Profile picture (optional)

Additionally, we store the data you enter about bands, songs, setlists, concerts, customers, and other business data.

The legal basis is Art. 6(1)(b) GDPR (contract performance) and Art. 6(1)(a) GDPR (consent).

We use cookies to enable and improve the use of our website:

• Session cookies: Necessary for login and navigation
• Preference cookies: Store your settings (e.g., dark mode, language)
• Authentication cookies: Keep you logged in

Storage of technically necessary cookies is based on § 25 (2) No. 2 TTDSG in conjunction with Art. 6 (1) lit. f GDPR (legitimate interest). For optional cookies (e.g. analytics), we obtain your consent (Art. 6 (1) lit. a GDPR in conjunction with § 25 (1) TTDSG).

We only store personal data for as long as is necessary for the respective processing purpose or as required by statutory retention obligations.

• Account data: Until deletion of your user account
• Server logs: 30 days
• Payment data: 10 years (statutory retention obligation)
• Email communication: 6 years (commercial retention obligation)
• Business data (bands, songs, concerts): Until deletion by you or your account

After the storage periods expire, the data is deleted unless there are further retention obligations.

We use Google Analytics to analyze and improve the use of our website. Google Analytics is only activated when you give your consent via our cookie banner.

We have activated IP anonymization, so your IP address is truncated by Google within the EU before being transmitted to servers in the USA.

The collected data helps us make our website more user-friendly and identify technical issues.

Google Analytics is operated by Google Ireland Limited. Data may be transferred to the USA. Google has committed to compliance with the EU Standard Contractual Clauses (SCCs).

You can revoke your consent at any time in the cookie settings.

The legal basis is Art. 6(1)(a) GDPR (consent).

We use Stripe (Stripe, Inc., USA) for payment processing.

During payment transactions, your payment data is transmitted directly to Stripe. We do not store complete credit card numbers or bank details ourselves.

Stripe is based in the USA. Data is transferred to third countries. Stripe has committed to compliance with the EU Standard Contractual Clauses (SCCs) and is certified under the EU-US Data Privacy Framework.

For more information, see Stripe's privacy policy: https://stripe.com/de/privacy

The legal basis is Art. 6(1)(b) GDPR (contract performance).

We use various Google services to improve functionality. The use of these services only occurs with your explicit consent:

Google Maps & Places

We use Google Maps and the Google Places API to search for and display venues. Data such as your IP address and search queries may be transmitted to Google. Integration only occurs after your explicit consent via our cookie or consent management.

Google Calendar

You can connect giganizr with your Google Calendar to automatically sync concert dates. We access your calendar data only when you explicitly allow it. The connection requires your consent through the Google OAuth process.

Google Contacts

Optionally, you can import Google Contacts to manage customer data more easily. This only happens with your explicit consent through the Google OAuth process.

Google is based in the USA. When using Google services, data may be transferred to third countries. Google has committed to compliance with the EU Standard Contractual Clauses (SCCs) and is certified under the EU-US Data Privacy Framework.

For more information, see Google's privacy policy: https://policies.google.com/privacy

The legal basis is Art. 6(1)(a) GDPR (consent). You give your consent by actively using the respective function or through the OAuth login process.

We send transactional emails as part of using our services:

• Registration confirmation and verification
• Password reset
• Notifications about concert changes, polls, etc.
• Invitations to bands or events

The legal basis is Art. 6(1)(b) GDPR (contract performance) and Art. 6(1)(f) GDPR (legitimate interest).

giganizr offers integrations with external services:

iCal Export

You can subscribe to your band calendar as an iCal feed. A URL is generated that you can use in your calendar app. The calendar data is then transmitted to your calendar app.

Sheet Music Apps (forScore, MobileSheets)

You can export setlists for sheet music apps. Only the setlist data (song titles, order) is converted to a compatible format. No data is transmitted to the app providers.

The legal basis is Art. 6(1)(a) GDPR (consent).

We have concluded data processing agreements (DPA) in accordance with Art. 28 GDPR with all service providers who process personal data on our behalf. This includes in particular:

• Hosting provider (server host)
• Google (Analytics, Maps, Calendar, etc.)
• Stripe (payment processing)
• Email service provider

The data processors only process data on our instructions and are subject to strict confidentiality obligations.

Under the GDPR, you have the following rights regarding your personal data:

• Right of Access: You can request information about the data we store about you at any time.
• Right to Rectification: You can request the correction of inaccurate data.
• Right to Erasure: You can request the deletion of your data, provided there are no legal retention obligations.
• Right to Restriction: You can request the restriction of processing.
• Right to Data Portability: You have the right to receive your data in a common format.
• Right to Object: You can object to the processing of your data at any time.
• Right to Withdraw Consent: If processing is based on your consent, you may revoke it at any time with effect for the future. The lawfulness of processing carried out prior to revocation remains unaffected.

To exercise your rights, please contact: support@giganizr.com

You also have the right to lodge a complaint with a data protection supervisory authority about the processing of your data.