Privacy

• We never sell your data and there are no advertising trackers on DesiAgenda.
• We don’t take payments or sell tickets. Booking buttons take you to the organiser’s own ticket or sign-up page.
• Our database and servers are in the EU.
• You can download or delete your data yourself at any time, from your account.

DesiAgenda is currently run by an individual based in the Netherlands, not a registered company (no KvK registration yet). That person is the controller for the data on this page. This section will name the company once one is registered.

For anything about your data, write to hello@desiagenda.nl. We answer within one month, as the AVG requires. We are not required to have a data protection officer.

Visitors see a preview: a selection of events, and a few event pages before we ask you to sign in. Pages for cities and festivals stay fully open. To show that preview we remember, in your own browser, which event pages you have opened (da_event_views). It never leaves your device and isn’t linked to you.

Saving an event or following an organiser while signed out is also kept only in your browser, until you sign in and choose to move it into your account.

To show organisers how their events are doing, and to run DesiAgenda, we count page views and clicks on booking buttons ourselves. No third party receives this data, and it is never used for advertising.

For each page view or booking click we store:

• the page and the time;
• where you came from in general terms (Instagram, WhatsApp, Google, or the referring website’s name), never the full address;
• whether you use a phone, tablet or computer;
• a random number kept in your browser (da.vid), so a returning visitor is counted once. It is not linked to your account, name or email.

We do not store your IP address for statistics. With Do Not Track or Global Privacy Control turned on, your visits are counted without the random number. Statistics are deleted after 25 months. Organisers only see totals for their own events.

Legal basis: our legitimate interest in knowing how the site is used (Art. 6(1)(f) AVG). These first-party statistics have little impact on your privacy, so the Dutch Telecommunicatiewet (art. 11.7a) does not require a consent banner for them.

You need to be 16 or older to have an account. We ask for and store:

• Email address and password, or your name and email from Google if you sign in with Google. A password is stored hashed; nobody can read it.
• Name, date of birth and gender. The name is how we greet you. Date of birth checks you are 16+ and helps with 16+ and 18+ events. Gender can be “Prefer not to say”.
• City, languages and interests, if you give them, to put events you would like first. Nothing else.
• Events you save, organisers you follow, and events you mark Going or Interested.

Legal basis: running the account you asked for (Art. 6(1)(b) AVG), and your consent (Art. 6(1)(a)) for the optional preferences, which you can clear any time on your profile.

DesiAgenda doesn’t sell tickets. When a booking button takes you to the organiser’s own website or ticket shop, that site’s own privacy policy applies, and we don’t see what you buy or pay there.

We store the organiser name, a contact email and what you write about the event. The event details are published once reviewed; your contact email is never shown publicly. A poster or text you give us may be read by Google’s AI (Gemini) to fill the listing in for you; you check everything before it is sent.

Many listings come from public sources: organisers’ and venues’ websites and public event pages. They can contain the names of organisers, artists and venues. We publish only what was already public, about the event, and link to where it came from when we can. Legal basis: our legitimate interest in a complete event calendar (Art. 6(1)(f) AVG). If a listing mentions you and you want it changed or removed, email hello@desiagenda.nl and we will act on it quickly.

We only send event updates if you sign up for them, with your email and optionally your city and interests. It is never on by default. Every update email has an Unsubscribe link that works in one click, or write to hello@desiagenda.nl. Legal basis: your consent (Art. 6(1)(a) AVG).

Service emails (sign-in links, booking confirmations, payment reminders from the organiser’s booking) are part of what you asked for and are always sent.

If a page crashes, we record the page address, the error message and your browser type, so we can fix it. Nothing that identifies you. These reports are deleted after 90 days. Our hosting provider also keeps short technical logs (including IP addresses) for security, for a few days.

These companies help us run the site. Vercel, Supabase, Resend and Google (sign-in and Gemini) work only on our instructions, under a data processing agreement. Google Maps is only loaded when you choose it, and follows its own privacy policy:

Where a company is in the United States, the transfer is covered by the EU–US Data Privacy Framework or by the European Commission’s Standard Contractual Clauses. Besides these, we only share data when the law requires it. We never sell personal data.

• Account, saves and follows: until you delete your account.
• Email updates signup: until you unsubscribe or delete your account.
• Visitor statistics: 25 months.
• Crash reports: 90 days.
• Published events: they stay online after the date, as a record of what took place. Ask us to remove one at any time.

You can always:

• get a copy of your data: “Download my data” on your account;
• correct it: edit your profile;
• delete it: “Delete my account” on your account page;
• object, restrict or withdraw consent, or move your data elsewhere: email hello@desiagenda.nl.

We answer within one month. If you think we got something wrong, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.

Everything travels over HTTPS. Passwords are hashed. Database access is locked down per person, so you only ever see your own data; only our server can read secrets such as connection keys. We make no automated decisions about you. If a data breach ever affected you, we would report it to the Autoriteit Persoonsgegevens within 72 hours and tell you.

We use no advertising or tracking cookies, so there is no cookie banner. The Dutch Telecommunicatiewet does not require consent for what we store, because it is needed for what you asked for or only counts visits in a privacy-friendly way.

Google Maps loads only after you tap “Show map”, and may set its own cookies under its own policy. Fonts are served by DesiAgenda itself, so loading a page doesn’t contact Google.

When this page changes, the date at the top changes. If a change matters for you and you have an account, we will email you first.