Privacy Policy

1. Who We Are

Komoot Events ("we", "us", "our") is a platform operated by komoot GmbH that enables outdoor event organizers to publish activities and lets participants discover and register for them. This Privacy Policy explains how we collect, use, and protect your personal data when you use events.komoot.com.

2. Data We Collect

We collect the following categories of personal data:

2.1 Account & Registration Data

• Email address (required for login & guest registration)
• Name and surname
• Phone / WhatsApp / Telegram number (optional, for waitlist notifications and group chats)
• Age and gender (optional, for event statistics)

2.2 Event Participation Data

• Events you register for, waitlist entries, and attendance status
• Timestamps of registrations and cancellations

2.3 Payment Data

• Payment information is processed securely by Stripe. We do not store your credit card details. We store transaction IDs and payment status only.

2.4 Cookies & Analytics

• Essential cookies: session cookies required for the site to function.
• Analytics cookies: We use Mixpanel and Pico to understand how the platform is used. These are only activated after you give consent via the cookie banner.

2.5 Organizer Data

• Profile information (organization name, bio, avatar)
• Event content (titles, descriptions, images, meeting points)
• Guide details (name, role, bio, contact info, photos)

3. How We Use Your Data

• To provide and operate the Komoot Events platform
• To process event registrations and waitlist management
• To process payments via Stripe
• To send event-related notifications (confirmations, updates)
• To improve the platform (analytics, only with consent)
• To comply with legal obligations

4. Legal Basis

We process your data based on:

• Consent: For analytics cookies and marketing communications.
• Contract: To fulfill event registrations you request.
• Legitimate Interest: To operate and improve the platform, prevent abuse.
• Legal Obligation: Where required by applicable law.

5. Data Sharing

We share your data only with:

• Event organizers: Your registration data is shared with the organizer of the event you sign up for.
• Stripe: For payment processing.
• Supabase: Our database and authentication provider.
• Analytics providers: Mixpanel and Pico (only with your consent).

We do not sell your personal data to third parties.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Registration data for past events is retained for up to 24 months. You may request earlier deletion at any time (see below).

7. Your Rights (GDPR)

Under the General Data Protection Regulation, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data ("right to be forgotten")
• Export your data in a portable format
• Restrict or object to certain processing
• Withdraw consent at any time (e.g., via the cookie settings)

To exercise any of these rights, please email us at abrz@bendingspoons.com. We will respond within 30 days.

8. Account Deletion

You can request full deletion of your account and all associated data by emailing abrz@bendingspoons.com with the subject line "Account Deletion Request". We will process your request within 30 days.

9. Data Export

You can request an export of all your personal data by emailing abrz@bendingspoons.com with the subject line "Data Export Request". We will provide your data in a machine-readable format within 30 days.

10. Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (TLS), secure authentication, and access controls.

11. Children

Komoot Events is intended for users aged 16 and above. We do not knowingly collect data from children under 16. If you believe a minor has provided us with personal data, please contact us for removal.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes by posting a notice on the platform. The "Last updated" date at the top reflects the most recent revision.

13. Contact Us

For any privacy-related questions or requests, contact:
Email: abrz@bendingspoons.com
komoot GmbH
Friedrich-Wilhelm-Boelcke-Straße 2
14473 Potsdam, Germany