📜 Privacy Policy

Effective Date: 01 August 2025
Last Updated: 01 August 2025

Welcome to Eventslux (“we”, “us”, or “our”). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your data when you visit and use our website eventslux.lu (the “Site”).

1. Who We Are

We operate a platform that displays public events in Europe and allows users to sign up, log in, submit new events, and add events to a personal calendar.

For any data protection inquiries, you can contact us at:
Email: admin@eventslux.lu
Data Controller: Administrator

2. What Data We Collect

We collect the following data when you use our website:

A. Information You Provide

• Name (optional or required at sign-up)
• Email address
• Password (stored in encrypted form)
• Events you submit
• Calendar selections
• Contact form submissions

B. Information Collected Automatically

• IP address
• Browser and device information
• Date/time of access
• Country (based on IP)
• Referring pages and clicks

C. Cookies and Tracking

We use cookies for:

• User authentication
• Basic analytics (e.g., site traffic)
• Calendar event tracking preferences

You can manage cookie preferences [link to Cookie Policy or Cookie Banner].

3. How We Use Your Data

We use your data to:

• Create and manage your account
• Let you submit, view, and manage events
• Allow you to save events to your calendar
• Improve and secure our platform
• Respond to user inquiries
• Send account-related notifications (e.g., password reset)

4. Legal Bases for Processing

Under GDPR, we process your data based on:

5. Who We Share Data With

We do not sell your personal data. We may share data with:

• Hosting providers (e.g., AWS, Vercel, LWS)
• Email service providers (e.g., Mailgun, SendGrid)
• Analytics tools (e.g., Google Analytics – with anonymized IP)
• Calendar integration APIs (e.g., Google Calendar, Apple Calendar)

All third-party processors are under contract and GDPR-compliant.

6. International Transfers

If we transfer your data outside the European Economic Area (EEA), we ensure:

• The recipient country has an adequacy decision OR
• We use Standard Contractual Clauses (SCCs)

7. How Long We Keep Your Data

We retain personal data only as long as necessary for:

• User accounts: as long as your account is active
• Events: until you delete or unpublish them
• Analytics: anonymize after non usage of account

You may delete your account at any time by contacting us.

8. Your Rights Under GDPR

You have the right to:

• Access your data
• Correct inaccurate data
• Delete your personal data (“right to be forgotten”)
• Restrict or object to processing
• Withdraw consent at any time
• Port your data to another service

To exercise your rights, contact: admin@eventslux.lu

9. Security Measures

We implement appropriate measures to protect your data:

• Encrypted connections (HTTPS)
• Password hashing
• Access control
• Regular security updates

10. Children’s Data

We do not knowingly collect data from individuals under 16. If you believe a child has provided us personal data, contact us for removal.

11. Cookies

We use essential and non-essential cookies. You can manage or withdraw consent anytime via our cookie banner.

See our Cookie Policy for more details.

12. Changes to This Policy

We may update this Privacy Policy. When we do, we will post the revised version with the effective date at the top.

13. Contact Us

If you have any questions or wish to exercise your rights:

Email: admin@eventslux.lu
Data Protection Contact: Administrator