Privacy policy

Controller

Magnus Ohle
Haaggasse 10
72070 Tübingen, Germany
[email protected]

Visiting the website

EVRYVIBE helps you discover events, venues and DJs. There are no visitor accounts, newsletters, payments or advertising trackers. Fonts are served from our own server. Delivering the website requires processing your IP address, requested URL and technical connection data. Our basis is Article 6(1)(f) GDPR: our legitimate interest in providing an accessible, secure website.

Hosting and technical logs

The website and database run on UpCloud infrastructure in Frankfurt am Main, Germany. The hosting provider processes technical data to operate that infrastructure. Regular web server access logs are disabled. Error, security and operational logs may contain IP addresses, timestamps, requested URLs and error messages and are retained for no more than 14 days. They support troubleshooting and abuse prevention (Article 6(1)(f) GDPR). Database backups are stored on the same server and removed during daily backup runs after a normal retention period of seven days.

Visit statistics with Minilytics

We run Minilytics on our OVH server to measure page views, time spent on visible pages, and clicks on navigation and external links. Records contain public page paths, timestamps, the referring domain and link destinations without query parameters or fragments. Form contents are not recorded. Events go first to EVRYVIBE and from there to our statistics server. We use no analytics cookies, persistent visitor identifiers or analytics data in localStorage or sessionStorage.

To assign events to a session on the server, the IP address and browser identifier are transmitted temporarily and converted with HMAC into a session matching key. This key expires after 30 minutes of inactivity; expired keys and session records older than one day are regularly deleted. The IP address is not stored in analytics records. Event statistics remain available for analysis. There is no association with a visitor account or persistent visitor identifier. We respect Do Not Track and Global Privacy Control. Our basis is our legitimate interest in improving event discovery (Article 6(1)(f) GDPR). You may object to this processing by contacting [email protected].

Your display preference

Without a choice of your own, the dark theme is shown. When you switch between light and dark themes, your browser saves that choice in localStorage under “evryvibe-theme”. This setting is not sent to us and remains until you change it or delete the website’s browser data. Storage provides the display preference you explicitly selected (section 25(2), no. 2 TDDDG).

Public event, venue and DJ data

We collect publicly accessible information from Instagram profiles, posts and stories visible at collection time. Text in images and selected video frames is extracted using optical character recognition (OCR). This includes artist and profile names, descriptions, appearances and lineups, venues, dates, and profile, source and ticket links. Extracted facts may remain necessary for an event description after a story expires; we do not publish the story images or video frames. Where information relates to individuals, we process and publish it for event discovery based on our legitimate interest under Article 6(1)(f) GDPR. This notice also covers people whose data we did not obtain directly from them (Article 14 GDPR).

We retain these records while needed to present events and related profiles; inaccurate or no longer needed personal information is corrected or deleted. Contact [email protected] for the specific source, a correction, deletion or an objection. Please identify the affected page so we can locate the record.

Images and text recognition

Images and selected video frames are processed temporarily for text recognition during collection. We do not store those images as our own event flyers or make expired stories available again through image URLs. The website presents text information and, after your consent, public Instagram posts and selected cover images of public posts or reels loaded directly from Instagram.

Instagram content and external links

On your first visit, a dialog asks for your choice on external media; you can allow Instagram and SoundCloud together or separately. Instagram posts and profile previews remain as placeholders until you accept; cover images of public posts or reels are not requested until then. Embeds and selected original cover images load directly from Instagram only after you agree in the dialog or with the button that loads an Instagram item (Article 6(1)(a) GDPR and, where information is stored on or read from your device, section 25(1) TDDDG). Instagram is provided in Europe by Meta Platforms Ireland Limited. Your IP address, browser data and visited page may be transmitted, and cookies or similar technologies may be used. If you are signed in to Instagram, Meta may associate the visit with your account. Processing may also take place in the United States and other countries.

Your Instagram acceptance or rejection is stored in a cookie on your device for six months (evryvibe-instagram-consent, SameSite=Lax). You can change it at any time through “Settings” in the header. Withdrawing consent removes loaded embeds and cover images; it does not erase data already transmitted or cookies stored by Instagram. The ordinary link to the original post or profile remains available. Expired stories are neither embedded nor loaded as covers. Ticket, website and other external links lead to independent providers whose privacy terms apply there.

SoundCloud players

On DJ, venue and event pages we embed SoundCloud’s own player for known SoundCloud profiles. It shows the profile’s public uploads; we store only the profile address, never tracks or audio files. The player loads only after you agree – in the external media dialog or with the “Load SoundCloud player” button (Article 6(1)(a) GDPR and, where information is stored on or read from your device, section 25(1) TDDDG). The provider is SoundCloud Global Limited & Co. KG, Rheinsberger Str. 76/77, 10115 Berlin, Germany. When the player loads, SoundCloud receives in particular your IP address, browser and device data, the visited page and the time of the request. SoundCloud may use cookies or similar technologies and may associate the request with your SoundCloud account if you are signed in. If you start playback, the audio streams directly from SoundCloud.

Your SoundCloud choice is stored separately from your Instagram choice in a cookie on your device for six months (evryvibe-soundcloud-consent, SameSite=Lax). You can change it at any time through “Settings” in the header; withdrawing consent removes loaded players. It does not erase data already transmitted or cookies stored by SoundCloud. Without consent, an ordinary link to the SoundCloud profile remains visible. SoundCloud’s own privacy policy applies to its processing.

Contact by email

When you email us, we process your email address, message and any information you choose to provide to answer your enquiry. Our basis is Article 6(1)(f) GDPR (handling enquiries), or Article 6(1)(b) GDPR for contract-related enquiries. We retain correspondence until the enquiry is resolved, and longer only where statutory retention requirements or the establishment, exercise or defence of legal claims require it.

Your rights

Subject to the GDPR’s conditions, you may request access, rectification, erasure, restriction and, where applicable, data portability. You may object to processing based on legitimate interests for reasons relating to your particular situation. You may withdraw consent at any time for the future; earlier lawful processing remains unaffected. Contact [email protected] to exercise your rights. We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.

You may lodge a complaint with a supervisory authority, including the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg.