Controller

Personal Data We Process

• Account data: name, email address, timezone, and authentication details for administrators.
• Calendar content: texts, images, embedded media, and metadata supplied by administrators for each day.
• Usage data: server logs, IP address, and device information captured when you access the admin area for security and troubleshooting.
• Support data: information you provide when contacting us for help.

Purposes and Legal Bases

We process personal data on the following legal bases under Art. 6 GDPR:

• Performance of a contract (Art. 6(1)(b)) – to create and operate user accounts, calendars, and related services.
• Legal obligations (Art. 6(1)(c)) – for record keeping, tax, and security requirements.
• Legitimate interests (Art. 6(1)(f)) – to secure the platform, prevent abuse, and improve features. Our interests do not override your fundamental rights and freedoms.
• Consent (Art. 6(1)(a)) – for optional communications; you may withdraw consent at any time.

Storage Duration

We store personal data only for as long as necessary to fulfill contractual or legal obligations. Calendar content and associated files can be removed by administrators at any time. Backups are regularly purged following a rolling retention schedule. Statutory retention obligations (e.g., tax rules) may require storing certain records for up to 10 years.

Processors & Transfers

Trusted infrastructure and cloud providers may process personal data on our behalf under data processing agreements that meet GDPR requirements. Data is stored in the European Union whenever feasible. If a transfer to a third country occurs, appropriate safeguards (such as Standard Contractual Clauses) are implemented.

Your Rights

Under the GDPR you have the following rights:

• Access to your personal data and information about processing (Art. 15 GDPR).
• Rectification of inaccurate data (Art. 16 GDPR).
• Erasure (“right to be forgotten”) where statutory grounds apply (Art. 17 GDPR).
• Restriction of processing (Art. 18 GDPR).
• Data portability in a structured, commonly used format (Art. 20 GDPR).
• Objection to processing based on legitimate interests (Art. 21 GDPR).
• Right to lodge a complaint with your local supervisory authority.

Security

We apply technical and organizational measures such as encrypted connections (HTTPS), access controls, logging, and regular software updates to protect your data from unauthorized disclosure or loss.

Contact for Privacy Questions