Privacy Policy

The controller of your personal data is Clubbel S.r.l., registered office at Via Alessandro Gambalunga 73 — 47921 Rimini (RN), Italian VAT and tax number 04843490402.

For any request about the processing of personal data you can write to dpo@clubbel.com, or by certified email to clubbelsrl@pec.it.

Data you give us

• Sign-up: name, email address, password (stored encrypted only)
• Profile: date of birth, gender, city and province, phone number, biography
• Content you upload: profile picture, cover images, galleries, event artwork
• Music preferences chosen during onboarding
• If you apply to manage a venue, an artist project or an organiser: VAT number, business contact details and documents proving you are entitled to it

Data collected automatically

• Session data: IP address and information about the browser or app you use
• Event page view statistics: IP address, browser, referring page and session identifier
• A log of actions taken on the platform, for security and support

Location

• With your permission, the app uses your device location to show nearby events and distances. Location is used at that moment and is not stored on your profile
• Coordinates of venues and events are platform data, not yours

Push notifications

• The device identifier issued by Firebase Cloud Messaging, if you turn notifications on
• On the website, your browser push subscription via the Web Push protocol

• Running the service — account management, event search and browsing, interaction with venues, artists and organisers
• Authentication — sign-up and sign-in with email and password
• Showing what is nearby — events and venues around you on the map
• Notifications — updates on saved events, profiles you follow and invitations
• Service messages — sign-up confirmation, password reset, notices
• Security — preventing unauthorised access and protecting site forms
• Service quality — fault monitoring and statistics on how often an event is viewed, which we share in aggregate form with whoever published it

• Performance of a contract (art. 6.1.b GDPR) — to provide the service you asked for
• Consent (art. 6.1.a GDPR) — for push notifications and location. You can withdraw it at any time
• Legitimate interest (art. 6.1.f GDPR) — platform security, fault monitoring and aggregated event statistics
• Legal obligation (art. 6.1.c GDPR) — where the law requires it

To run the platform we rely on providers that process data on our behalf, appointed as processors where required:

Some of the providers listed above involve transferring personal data — in particular your IP address — to the United States. These transfers rely on the EU-U.S. Data Privacy Framework and on the Standard Contractual Clauses approved by the European Commission, as required by Chapter V of the GDPR.

Google services are provided to European users by Google Ireland Limited. More information in Google's Privacy Policy.

The servers hosting the platform, the database and the fault monitoring are in Germany; images are stored in Ireland.

• Account data — for as long as the account is active
• After the account is closed — email and name are replaced with anonymous values within 30 days; content you published about past events may remain as part of the platform history
• Sign-in sessions — until they expire or you sign out
• Fault logs — 90 days
• Uploaded files — until you delete them or close your account

If you want full erasure and not just account closure, write to dpo@clubbel.com: we act within 30 days, unless the law requires us to keep something longer.

You can close your account directly from the app, under Menu › Account › Delete account. Closing is immediate and cannot be undone.

On closure we remove your name, email, photo, biography, phone number, city, province, date of birth, gender, preferred music genres, and the identifiers used for notifications.

If you prefer, write to dpo@clubbel.com and we will take care of it.

Articles 15 to 22 of the GDPR give you the right to:

• Access — know whether we process your data and get a copy
• Rectification — correct wrong or incomplete data
• Erasure — ask for your data to be deleted
• Restriction — ask that your data only be stored, not used
• Portability — receive your data in a format another service can read
• Objection — object to processing based on legitimate interest
• Withdrawal of consent — at any time, without affecting what was lawful before

To exercise them write to dpo@clubbel.com. We answer within one month.

Push notifications can also be turned off from the app settings; the location permission can be revoked from your phone settings.

You must be at least 14 years old to use Clubbel. Below 14, consent must be given or authorised by the holder of parental responsibility, under art. 8 GDPR and art. 2-quinquies of the Italian Privacy Code.

If we find an account belongs to someone under 14 without that consent, we close it and delete the data. If you are a parent and believe your child signed up without your consent, write to dpo@clubbel.com.

Note that many events on the platform have their own age limit, set by the venue or the organiser. That limit applies regardless of the minimum age to use Clubbel.

If you believe the processing of your data breaches the GDPR, you may lodge a complaint with the supervisory authority: the Italian Data Protection Authority — www.garanteprivacy.it.

This policy may change, for instance when the services behind the platform change. Any change is published on this page with the last update date. If the change is significant we also tell you inside the app or by email.