Privacy Policy
Last updated: 13.01.2025
Thank you for visiting our website (“Service”). We take your privacy seriously and are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR), German Federal Data Protection Act (BDSG), and other applicable data protection laws.
By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy.
1. Controller and Contact Information
Controller (as defined by the GDPR):
Unleashed.Berlin – Jaroslaw Szymczak
Alt Tempelhof 17–19
12099 Berlin, Germany
Email: [email protected]
If you have any questions about this Privacy Policy or wish to exercise your rights under GDPR, you may contact us at the email above.
2. Age Restriction
Our Service is strictly intended for individuals who are 18 years of age or older. We do not knowingly collect any personal information from individuals under the age of 18. If you believe a minor has provided us with personal data, please contact us immediately at the email listed above, and we will take steps to delete such information.
3. Types of Personal Data We Collect
- Identification Data
- Name, surname
- Email address
- Phone number
- Billing or shipping address
- Account Information
- Username and password
- Login credentials and authentication tokens
- Profile Data
- Profile pictures, if you choose to upload them
- Biographical details, if you add them to your profile
- Attendance & Loyalty Data
- Records of the parties or events you have attended
- Frequency of attendance (for potential discounts or loyalty rewards)
- Special Category Data
- Sexual orientation or gender identity information, when voluntarily provided for event ticketing to ensure balanced or inclusive attendance.
- Processed only with your explicit consent to uphold our strict dress code and community guidelines.
- Payment and Transaction Data
- Transaction details (amount, transaction date)
- Payment service provider details (e.g., PayPal)
- Usage Data
- IP address, browser type, browser version
- Pages visited on our Service, time and date of visits, time spent on pages
- Device information (type of device, operating system, unique device identifiers)
- Cookie and Tracking Data
- Cookies or similar technologies (pixel tags, web beacons)
- Preferences and settings (e.g., language, login session details)
- Profiling Data (AI Dress Code Checks)
- AI-based analysis of clothing style for party admission compliance
- We do not store or process biometric data or personally invasive details
4. Legal Bases for Processing
Under the GDPR, we process your personal data only when we have a valid legal basis:
- Consent (Art. 6(1)(a) GDPR)
- When you sign up for our mailing list or explicitly provide sensitive data (e.g., sexual orientation)
- When you upload a profile picture or otherwise share optional profile details
- When you accept certain non-essential cookies
- Contract (Art. 6(1)(b) GDPR)
- To create and manage your user account
- To process online purchases (e.g., ticket sales, merchandise)
- To use information from the website to provide you with access to our parties
- To track event attendance for potential loyalty discounts
- Legal Obligation (Art. 6(1)(c) GDPR)
- To maintain records for tax, audit, or other statutory requirements (e.g., storing transaction data for 10 years)
- Legitimate Interests (Art. 6(1)(f) GDPR)
- To maintain the security of our Service (e.g., Wordfence, Cloudflare for spam/DDoS protection)
- For analytics (e.g., Google Analytics) to improve our Service, unless overridden by your data protection interests
- AI-based dress code checks to ensure event integrity
- Potential use of attendance history to improve safety and crowd management
You have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
5. How We Use Your Data
We use your data for the following purposes:
- Service Provision
- To create and administer your user account
- To process ticket or merchandise purchases
- To grant you access to our parties, verify tickets, and ensure compliance with dress code
- Event Attendance Tracking & Loyalty
- Maintaining a record of your event attendance to offer discounts, loyalty benefits, or priority access for frequent visitors
- Profile Sharing
- If you opt to share a profile picture or other optional profile details, these may be visible to other users or attendees as part of our community features
- Communications
- Sending marketing or promotional emails, newsletters, and updates (if you have opted in)
- Responding to your inquiries or support requests
- Safety & Emergency Management
- Ensuring overall event safety, including possible ID checks, verifying age, or contacting an emergency contact if provided
- Monitoring compliance with venue and community guidelines
- Analytics and Improvements
- Using Google Analytics to understand user behavior and improve our Service
- AI profiling for dress code compliance
- Security
- Using Wordfence and Cloudflare to protect against spam, DDoS, and other security threats
- Legal and Regulatory Compliance
- Fulfilling our tax and record-keeping obligations (retaining transaction data for 10 years)
6. Data Retention
- User Account & Mailing List Data: Stored indefinitely until you unsubscribe or request deletion.
- Transaction Data: Retained for 10 years to comply with tax and legal obligations.
- Profile Pictures: Stored as long as your account remains active or until you remove them.
- Attendance & Loyalty Data: Retained as long as necessary to provide loyalty benefits or until you request deletion.
- Analytics Data: Retained as per Google Analytics default retention schedules or until manually deleted, unless we have a legal obligation to keep it longer.
- AI Profiling Data: Temporary, used solely for dress code compliance and not stored beyond that purpose unless absolutely necessary.
- Safety & Emergency Data: Retained only for as long as required to ensure security and comply with legal or venue obligations.
We will erase or anonymize personal data when it is no longer needed for the purposes outlined above or if you validly request its deletion, unless we have a legal obligation to keep it.
7. Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your user experience, analyze traffic, and for security. Upon your first visit, you will see a cookie consent banner where you can accept or reject different categories of cookies (e.g., essential, analytics, marketing).
- Essential Cookies
- Necessary for the operation of the website (e.g., WordPress session cookies).
- Without these, our Service may not function properly.
- Analytics Cookies
- Used by Google Analytics to track user behavior, page visits, and device information.
- We only set these cookies if you provide consent.
- Marketing & Social Media Cookies
- Used by services like Facebook, Twitter, Instagram, TikTok for marketing and social sharing features.
- These are only stored upon your consent.
For more details on specific cookies and their duration, refer to our Cookie Policy or the cookie consent banner on our website.
8. Third-Party Services and Data Transfers
We do not transfer your personal data outside the EU/EEA, except where necessary safeguards are in place. Our primary services include:
- Hetzner (EU-based) for website hosting
- Cloudflare (caching, spam/DDoS prevention; uses SCCs or equivalent safeguards if data goes outside EU)
- Amazon SES (EU-based servers, SCCs for email delivery)
- Google Analytics (EU domain usage with IP anonymization if configured)
- WordPress, Elementor, ThemeREX, Wordfence for site functionality and security
- PayPal (payment processing within the EU or via SCCs)
- Social Media Plugins: Facebook, Twitter, Instagram, TikTok, WhatsApp
We maintain Data Processing Agreements (DPAs) with these providers, where required, ensuring GDPR-compliant data handling.
9. Automated Decision-Making and Profiling
We employ AI-based profiling to determine dress code compliance for our events:
- This profiling is limited to analyzing clothing style or attire in submitted images or descriptions.
- We do not store or process biometric data or conduct extensive analysis on personal traits beyond clothing.
- The legal basis for this processing is our legitimate interest (Art. 6(1)(f) GDPR) in maintaining the party’s dress code and environment, and/or consent if you explicitly provide such information.
If you have concerns about this AI-based profiling, you can contact us to request manual review or opt out if it does not conflict with event entry requirements.
10. Your Rights Under GDPR
You have the following rights regarding your personal data:
- Right of Access (Art. 15 GDPR)
- You can request confirmation of whether we process your personal data and obtain a copy.
- Right to Rectification (Art. 16 GDPR)
- You can request correction of inaccurate or incomplete personal data.
- Right to Erasure (“Right to Be Forgotten,” Art. 17 GDPR)
- You can request deletion of your personal data if no legal basis for retention exists.
- Right to Restriction of Processing (Art. 18 GDPR)
- You can request limitation of how we process your data in certain circumstances.
- Right to Data Portability (Art. 20 GDPR)
- You can request to receive your personal data in a structured, commonly used, machine-readable format to transfer to another controller.
- Right to Object (Art. 21 GDPR)
- You can object to processing based on legitimate interests or direct marketing.
- Right to Withdraw Consent (Art. 7(3) GDPR)
- If processing is based on consent, you can withdraw it at any time without affecting prior processing.
- Right to Lodge a Complaint (Art. 77 GDPR)
- If you believe we’re violating GDPR, you can file a complaint with your local supervisory authority. In Berlin, this is:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Friedrichstraße 219, 10969 Berlin
Email: [email protected]
- If you believe we’re violating GDPR, you can file a complaint with your local supervisory authority. In Berlin, this is:
To exercise any of these rights, please contact us at [email protected]. We will respond to your request without undue delay and within the time limits set out in GDPR.
11. Data Security
We take appropriate technical and organizational security measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. However, no internet transmission or electronic storage method is entirely secure, and we cannot guarantee absolute security.
Examples of our security measures include, but are not limited to:
- Encryption of data at rest and in transit, where applicable
- Firewalls and intrusion detection systems
- Access controls and authentication to prevent unauthorized access
- Regular security audits and software updates
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you about significant changes by posting the new Privacy Policy on this page and updating the “Last updated” date at the top. We encourage you to review this Privacy Policy periodically.
13. Contact Us
If you have questions or concerns about this Privacy Policy or our data processing practices, please contact:
Unleashed.Berlin – Jaroslaw Szymczak
Alt Tempelhof 17–19
12099 Berlin, Germany
Email: [email protected]
We value your privacy and will make every effort to address your concerns promptly.