Last updated: September 2026
The controller responsible for data processing on this website is:
giganizr.com | Inhaber: Patrick Motsch
Leipziger Str. 68
06366 Köthen (Anhalt)
Email: support@giganizr.com
A data protection officer has not been appointed, as there is no legal obligation to do so.
Protecting your personal data is very important to us. We only process your data in accordance with legal regulations (GDPR).
This privacy policy informs you about what data we collect, for what purposes we use it, and what rights you have.
Our website is hosted by an external service provider. When you visit our website, technical information is automatically collected.
The following data is stored in server log files:
The legal basis is Art. 6(1)(f) GDPR (legitimate interest in providing and securing the website).
To protect your data against loss we back up the database and uploaded files once every night. The backups are encrypted and stored in an object storage (S3) of IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany, in the Frankfurt am Main data centre.
Backups are kept for 30 days and then deleted automatically. Data you delete in giganizr may therefore remain in a backup for up to 30 days. We only restore data from backups to recover it after a data loss.
IONOS processes the backups as a data processor under Art. 28 GDPR exclusively in Germany; a data processing agreement is in place.
The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the security and availability of your data) in conjunction with Art. 32 GDPR (obligation to take appropriate technical measures).
When registering and using giganizr, we collect the following data:
Additionally, we store the data you enter about bands, songs, setlists, concerts, customers, and other business data.
The legal basis is Art. 6(1)(b) GDPR (contract performance) and Art. 6(1)(a) GDPR (consent).
Instead of a password you can register and sign in with your Google or Apple account. From the respective provider we only receive the data we need to create and recognise your account.
When you sign in via Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) we receive your Google account ID, your email address, your name and, if available, your profile picture. Google learns that you are signing in to giganizr.
When you sign in via Apple (Apple Distribution International Ltd., Hollyhill Industrial Estate, Cork, Ireland) we receive:
If you use a relay address, every email giganizr sends you passes through Apple's forwarding service. Apple thereby learns that you use giganizr.
Google and Apple are headquartered in the USA; data may be transferred there. Both providers are certified under the EU-US Data Privacy Framework and have committed to compliance with the EU Standard Contractual Clauses (SCCs).
Apple's privacy policy: https://www.apple.com/legal/privacy/
The legal basis is Art. 6(1)(b) GDPR (contract performance – signing in is part of using your account). Whether you sign in with a password, Google or Apple is your choice.
We use cookies to enable and improve the use of our website:
Storage of technically necessary cookies is based on § 25 (2) No. 2 TTDSG in conjunction with Art. 6 (1) lit. f GDPR (legitimate interest). For optional cookies (e.g. marketing pixels), we obtain your consent (Art. 6 (1) lit. a GDPR in conjunction with § 25 (1) TTDSG).
We only store personal data for as long as is necessary for the respective processing purpose or as required by statutory retention obligations.
After the storage periods expire, the data is deleted unless there are further retention obligations.
When you delete your account we remove your profile with name, email address, phone number, password and picture, along with your private content and the files you uploaded. Content owned by a band stays with the band.
Your name is retained by the bands and companies you were a member of, in their own business records: in the performance history, in fee settlements and on invoices they issued. Otherwise there would be no way to document who played which concert and who issued which invoice. The legal basis is Art. 6(1)(f) GDPR, the band's legitimate interest in documenting its own performances and settlements, and where a fee was agreed also the statutory retention period under §147 AO and §257 HGB. Everywhere else your name is removed.
We also receive a notification when you delete your account, with your name, your email address and an overview of your account (bands, companies, subscription). It documents the deletion and helps us end subscriptions that would otherwise keep running; the legal basis is our legitimate interest under Art. 6(1)(f) GDPR. A reason you choose to give in the deletion dialog is stored without any link to you – your email address only if you explicitly agree to a follow-up question (Art. 6(1)(a) GDPR, withdrawable by email at any time).
You can object to this processing under Art. 21 GDPR. Just send us an email.
To measure the reach of our public pages (home page, pricing, blog, feature and legal pages) we use the open-source software Umami. Umami runs on a server in Germany that we operate ourselves; no data is passed on to third parties.
Umami does not set cookies and does not access information stored on your device. Your IP address is not stored, no personal usage profiles are created and you cannot be recognised across visits.
Only aggregated information is collected: the page visited, referrer, browser type, operating system, device type, screen resolution, language and the country the visit comes from.
Inside the application itself (after login) and on pages you reach via personal links (e.g. quotation, poll or request pages) no audience measurement takes place.
The legal basis is Art. 6(1)(f) GDPR (legitimate interest in learning how our public pages are used). As no cookies are set and no information is read from your device, no consent under Section 25 TDDDG (formerly TTDSG) is required.
We use Stripe (Stripe, Inc., USA) and PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg) for payment processing.
During payment transactions via Stripe, your payment data is transmitted directly to Stripe. We do not store complete credit card numbers or bank details ourselves.
During payment transactions via PayPal, you are redirected to the PayPal website. PayPal independently processes your payment data (e.g. email address, payment source, transaction amount).
Stripe is based in the USA. Data is transferred to third countries. Stripe has committed to compliance with the EU Standard Contractual Clauses (SCCs) and is certified under the EU-US Data Privacy Framework. PayPal has its European headquarters in Luxembourg; data transfers to the USA may occur within the PayPal corporate structure and are secured by EU Standard Contractual Clauses.
For more information, see the privacy policies of the providers: https://stripe.com/de/privacy
PayPal Privacy Policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
The legal basis is Art. 6(1)(b) GDPR (contract performance).
We use various Google services to improve functionality. The use of these services only occurs with your explicit consent:
We use Google Maps and the Google Places API to search for and display venues. Data such as your IP address and search queries may be transmitted to Google. Integration only occurs after your explicit consent via our cookie or consent management.
You can connect giganizr with your Google Calendar to automatically sync concert dates. We access your calendar data only when you explicitly allow it. The connection requires your consent through the Google OAuth process.
Optionally, you can import Google Contacts to manage customer data more easily. This only happens with your explicit consent through the Google OAuth process.
Google is based in the USA. When using Google services, data may be transferred to third countries. Google has committed to compliance with the EU Standard Contractual Clauses (SCCs) and is certified under the EU-US Data Privacy Framework.
For more information, see Google's privacy policy: https://policies.google.com/privacy
The legal basis is Art. 6(1)(a) GDPR (consent). You give your consent by actively using the respective function or through the OAuth login process.
We send transactional emails as part of using our services:
The legal basis is Art. 6(1)(b) GDPR (contract performance) and Art. 6(1)(f) GDPR (legitimate interest).
In the apps “giganizr” and “giganizr Stage” you can receive push notifications, e.g. about schedule changes, new polls or messages from your band. They are delivered through the push services of the respective platform:
For this we store a device token issued by the platform that links your device to your account, along with the platform, app version and time of registration. The push service receives the token and the content of the notification; data may be transferred to the USA – Apple and Google are certified under the EU-US Data Privacy Framework.
We only send push notifications if you have allowed them in your device's system dialog. You can switch them off at any time in your device's system settings or in the app's notification settings; after that we no longer send push notifications to that device.
The legal basis is your consent (Art. 6(1)(a) GDPR), which you give via the system dialog and can withdraw at any time with effect for the future.
giganizr offers integrations with external services:
You can subscribe to your band calendar as an iCal feed. A URL is generated that you can use in your calendar app. The calendar data is then transmitted to your calendar app.
You can export setlists for sheet music apps. Only the setlist data (song titles, order) is converted to a compatible format. No data is transmitted to the app providers.
The legal basis is Art. 6(1)(a) GDPR (consent).
In addition to the website we offer the apps “giganizr” and “giganizr Stage” for iOS and Android. This privacy policy applies to the apps as well: they access the same servers and the same data as the website; there is no separate account.
When you download via the Apple App Store or Google Play, Apple or Google process data independently (e.g. your store account ID, device information, crash reports). The privacy policies of the store operators apply.
The apps only access device features with your permission – for example photos or files for uploads (through the system picker) or push notifications (see above). You can revoke every permission at any time in your device's system settings.
“giganizr Stage” can connect nearby devices directly to each other (e.g. to synchronise page turns on stage). Only technical connection data is exchanged between your own devices; it is not transmitted to us.
We have concluded data processing agreements (DPA) in accordance with Art. 28 GDPR with all service providers who process personal data on our behalf. This includes in particular:
The data processors only process data on our instructions and are subject to strict confidentiality obligations.
Under the GDPR, you have the following rights regarding your personal data:
To exercise your rights, please contact: support@giganizr.com
You also have the right to lodge a complaint with a data protection supervisory authority about the processing of your data.
Only with your explicit consent do we use the Meta Pixel provided by Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland. It measures whether our ads on Facebook and Instagram are effective (for example, whether you join the waitlist or create an account after clicking an ad) and helps us show ads only to people who are interested.
The pixel is only loaded after you have given consent in the notice banner. It sets cookies and transmits data such as your IP address, browser information and the page visited to Meta; data may be transferred to the USA — Meta is certified under the EU-U.S. Data Privacy Framework. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TTDSG). On pages you reach via personal links (e.g. quote or request pages), the pixel is never loaded. If you have given consent and join the waitlist or create an account, we additionally report this event from our server via the Meta Conversions API — with your email address and name in hashed (not directly readable) form, your IP address and browser information. Without your consent, this transmission does not take place either.
There is no tracking in the giganizr apps for iOS and Android: neither the Meta Pixel nor the reach measurement is loaded there, and no consent prompt is shown. The apps only use cookies that are strictly necessary for operation (sign-in, session).
You can withdraw your consent at any time with effect for the future:
We reserve the right to adapt this privacy policy to reflect changes in legal requirements or changes to our services. The current version is always available on this page.