DE / EN

Privacy Policy

As of: 29 April 2026

1. Controller

Thomas Peter
70six – Thomas Peter Webconsulting
Odenwaldstraße 7, 63814 Mainaschaff, Germany
E-mail: privacy@festivalpilot.app (alias for datenschutz@festivalpilot.app)
Phone: +49 179 1070272

2. Hosting and Data Location

This website (festivalpilot.app) and its associated API (api.festivalpilot.app) are hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in a data center located in Nürnberg, Germany. All processing happens exclusively within the Federal Republic of Germany. No transfer to third countries (e.g. USA) takes place.

3. Server Logfiles

When you access this site, technical logs are created (Caddy webserver access logs): IP address, timestamp, user agent, requested URL, HTTP status, referrer. These logs are retained for 30 days and used solely for security and functional analysis. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in security and operability). No marketing-related analysis takes place.

4. Waitlist Signup (Double Opt-In)

If you sign up to our waitlist, we store your e-mail address and the selected language. We use a double opt-in procedure: you first receive a confirmation e-mail with a link you have to click. Only after that does your signup count as confirmed. Used solely to notify you once about the App Store launch.

For sending the confirmation and launch e-mails, we use the data processor Brevo (Sendinblue SAS, 7 rue de Madrid, 75008 Paris, France). Brevo processes the transmitted data exclusively on servers within the European Union under the GDPR. A data processing agreement under Art. 28 GDPR exists with Brevo. We transmit only your e-mail address, your preferred language, and a technical timestamp.

Legal basis: Art. 6(1)(a) GDPR (consent). Every e-mail contains an unsubscribe link; you can opt out yourself at any time. Alternatively, you can request deletion by mailing privacy@festivalpilot.app — your entry will be removed within 7 days from both our database and Brevo.

5. App Feedback

Your marks, favorites, and settings are stored locally on your device. These personal planning data are not transmitted to our servers.

When you submit feedback from the festivalpilot app (bug report, correction proposal, general feedback) to our server, we store:

  • the feedback text and optional festivalId/slotId/bandId for context
  • an anonymous device UUID generated locally in the app
  • a pseudonymized IP hash with daily-rotating pepper (after midnight UTC, no longer attributable to a specific IP)
  • app version and locale (de/en)
  • optionally your e-mail address if you provided one

Retention: 24 months. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in product improvement). For the optional e-mail address additionally Art. 6(1)(a) (consent).

6. Analytics

We use no Google Analytics, no Facebook Pixel, no Hotjar, no Cloudflare. A self-hosted Plausible instance on stats.festivalpilot.app is planned: Plausible sets no cookies, collects no personal data, and therefore requires no cookie banner. Only aggregated page views and referrers are collected. We will update this section once active.

7. Push Notifications (App)

The mobile app uses Firebase Cloud Messaging (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) for push notifications. Only technical push tokens are processed — no tracking, no content. Data transmission is encrypted. Activation is optional and revocable at any time in the app settings. Legal basis: Art. 6(1)(a) GDPR (consent).

8. Mail Sending and Receiving

Inbound mails to kontakt@, datenschutz@ (alias privacy@), presse@ and other addresses under festivalpilot.app are handled by Hetzner Webhosting (Hetzner Online GmbH) in a data centre in Germany. Mail content is retained only as long as needed to respond — at the latest deleted 12 months after the last contact (unless statutory retention obligations apply).

Outbound confirmation and notification e-mails are sent via Brevo (see Section 4). DKIM/SPF/DMARC are configured to ensure authenticity.

9. Cookies

This website sets no cookies. Neither own nor third-party. Therefore no cookie banner is required.

10. Your Rights

You have the right at any time to:

  • request access to data stored about you (Art. 15 GDPR)
  • correction of inaccurate data (Art. 16)
  • erasure (Art. 17, "right to be forgotten")
  • restriction of processing (Art. 18)
  • data portability (Art. 20)
  • object to processing (Art. 21)
  • withdraw any consent at any time for the future (Art. 7(3))

Send requests to privacy@festivalpilot.app — handled within 7 working days.

11. Right to Complain

You have the right to lodge a complaint with our supervisory authority:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18, 91522 Ansbach, Germany
https://www.lda.bayern.de/

12. Changes to This Policy

We update this privacy policy when technical conditions (e.g. new features) or legal requirements change. The current version is always at festivalpilot.app/en/privacy/. The date noted at the top reflects the last update.