Privacy Policy - DemoFest

1. Data Controller

F.E.A. ETS
Email: info@demofest.eu
Website: demofest.eu

F.E.A. ETS is the data controller for all personal data processed through the Demo Fest mobile application and the demofest.eu website.

2. What Data We Collect

2a. Mobile App

Category	Data	Source
Account	Email address, encrypted password, display name	Provided by the user at registration
Google Sign-In	Name, email address, profile picture	Google OAuth (only when you choose to sign in with Google)
User content	Festivals created, programme items, news posts, uploaded images (logos and banners)	Provided by the user
Activity	Festivals saved/followed, ticket bookings (CrowdPrice)	Generated by in-app actions
Technical	Device type, operating system version, app version, IP address, error logs	Collected automatically

2b. Website (demofest.eu)

The website does not require registration or login. We may collect standard server access logs (IP address, browser type, pages visited, timestamp) for security and performance purposes. No tracking cookies or advertising pixels are used.

3. How We Use Your Data

To create and manage your user account
To allow you to create, manage, and discover music festivals
To process CrowdPrice ticket bookings and send confirmation emails
To display festival locations on the in-app map
To send transactional emails (booking confirmations, account notifications)
To ensure the security and proper functioning of the service
To comply with legal obligations

4. Legal Basis (GDPR Art. 6)

Purpose	Legal basis
Account management and core app features	Performance of a contract (Art. 6.1.b)
Booking confirmations and transactional emails	Performance of a contract (Art. 6.1.b)
Server logs and security	Legitimate interest (Art. 6.1.f)
Legal obligations	Legal obligation (Art. 6.1.c)

5. Third-Party Processors

Processor	Purpose	Data location
Supabase Inc.	Database, authentication, file storage	EU (Zurich, Switzerland)
Google LLC	OAuth sign-in, Maps SDK	EU/US (Standard Contractual Clauses)
Resend Inc.	Transactional email delivery	US (Standard Contractual Clauses)

We do not sell or rent your personal data to third parties. Data is shared with processors only to the extent necessary to provide the service.

6. Data Retention

Account data: retained for as long as your account is active. Deleted within 30 days of account deletion upon request.
User content (festivals, programme items, images): retained as long as the content exists in the app. Deleted when you delete the content or your account.
Booking records: retained for 5 years to comply with Italian accounting regulations.
Server logs: retained for up to 90 days.

7. Your Rights

Under the GDPR (Regulation EU 2016/679) you have the right to:

Access: obtain a copy of your personal data
Rectification: correct inaccurate data
Erasure: request deletion of your data ("right to be forgotten")
Restriction: limit how we process your data
Portability: receive your data in a structured, machine-readable format
Objection: object to processing based on legitimate interest
Withdraw consent: where processing is based on consent

To exercise any of these rights, contact us at info@demofest.eu. We will respond within 30 days.

You also have the right to lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali — www.garanteprivacy.it).

8. Cookies — Website

The demofest.eu website does not use profiling or advertising cookies. Technically necessary cookies may be set by the hosting provider for load balancing and security purposes.

9. Children

Demo Fest is not directed at children under 13 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

10. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top of this page will reflect any changes. For material changes, we will notify registered users via email or an in-app notice.

11. Contact

F.E.A. ETS
info@demofest.eu
demofest.eu