Privacy Policy
Last updated: 2 September 2026
1. Data Controller
buzzing.events operates this website. For all privacy-related enquiries, contact us at hello@buzzing.events.
2. Data We Collect
Account data (if you register): email address, display name (optional), hashed password, OAuth provider identifiers (if you sign in with Google or Facebook), locale preference.
Usage data: events viewed, favourited, or clicked; venues followed; newsletter subscription status.
Technical data: IP address, browser type, referring URL, session identifiers.
We do not collect sensitive personal data (health, financial, or biometric information).
3. How We Use Your Data
- To create and manage your account
- To personalise your event feed and recommendations based on your activity
- To send you the newsletter you subscribed to (with your explicit consent)
- To track aggregate usage patterns and improve the Service
- To detect and prevent fraud and abuse
- To comply with legal obligations
4. Legal Basis for Processing (GDPR)
| Processing activity | Legal basis |
|---|---|
| Account creation and management | Contract performance (Art. 6(1)(b)) |
| Newsletter sending | Consent (Art. 6(1)(a)) |
| Usage analytics and personalisation | Legitimate interests (Art. 6(1)(f)) |
| Legal compliance | Legal obligation (Art. 6(1)(c)) |
5. Data Sharing
We do not sell your personal data. We may share data with:
- Hosting and infrastructure providers as necessary to operate the Service
- Email delivery services (Resend) to send transactional and newsletter emails
- Analytics providers (Google Analytics, if enabled) — only anonymised/aggregated data
6. International Transfers
Our services operate within the European Economic Area. If data is transferred outside the EEA, we ensure appropriate safeguards are in place as required by GDPR.
7. Data Retention
- Account data is retained for as long as your account is active
- Newsletter subscription records are retained until you unsubscribe and for a reasonable period thereafter to comply with legal obligations
- You may delete your account at any time from Settings → Danger zone; this permanently removes your account and associated personal data
8. Your Rights (GDPR)
Under the GDPR you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate data
- Erase your data ("right to be forgotten")
- Restrict or object to processing
- Port your data to another service
- Withdraw consent at any time (this does not affect the lawfulness of prior processing)
To exercise any of these rights, contact us at hello@buzzing.events. We will respond within 30 days.
9. Cookies
We use cookies as described in our Cookie Policy.
10. Security
We implement appropriate technical and organisational measures to protect your personal data. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "last updated" date at the top of this page. We encourage you to review this policy periodically.
12. Contact & Complaints
For privacy enquiries: hello@buzzing.events.
If you believe we have not addressed your concerns adequately, you have the right to lodge a complaint with the Spanish data protection authority, the Agencia Española de Protección de Datos (AEPD).