⚠️ Draft. The full privacy policy is pending real legal content + legal review. Required under GDPR before collecting any personal data or selling tickets.
The published policy will cover:
· Who the controller is (see Imprint) and how to reach them.
· What data we collect (account, tickets, payments, plan) and why.
· Payment processing via Stripe (data shared, their role).
· Hosting (Vercel) and any analytics — with cookie/consent basis.
· Legal bases (GDPR Art. 6), retention periods, and third parties.
· Your rights: access, rectification, erasure, portability, complaint.