WedSet

Privacy Policy

1. Data Controller

Chris Schön
Bainingstraße 133
48165 Münster
Germany
(hereinafter referred to as "Chris Schön" or "redbeed")

Phone: +49 171 2971071
Email: hello(at)redbeed.com
VAT ID: DE311146385

Contact Person:
If you have any questions regarding data protection, please contact us using the information provided above.

2. General Information on Data Processing

We take the protection of your personal data very seriously. Personal data is handled confidentially and in accordance with the statutory data protection regulations and this privacy policy.

Using our website is generally possible without providing personal data. However, certain features (e.g., registration, guest lists, invitations) require the collection of personal data such as name, email address, or event details.

3. Data Collected and Purpose of Processing

a) When registering and using the app:

  • First and last name
  • Email address
  • Password (stored in encrypted form)
  • Information about events (e.g., title, location, time, description, images)
  • Guest data (name, attendance, dietary preferences, email, etc.)
  • Images uploaded by users and potentially of their guests

Purpose: Provision and management of the wedding planning platform, especially for managing events, guests, and invitations.

b) When using contact forms or support requests:

  • Name, email address, message

Purpose: Processing your request and support communication.

4. Legal Basis for Processing

Your data is processed based on Art. 6 para. 1 lit. b GDPR (performance of a contract), if required for using the app, or based on Art. 6 para. 1 lit. f GDPR (legitimate interest, e.g., optimizing the platform).

5. Recipients and Third-Party Providers

Hosting: Our website and infrastructure are hosted by Hetzner Online GmbH, which provides server infrastructure for web servers, databases, and S3-compatible object storage. All servers are located in Germany.

Analytics: We use Plausible Analytics, a privacy-friendly web analytics service from the EU that does not use cookies and does not store any personal data. Plausible processes aggregated usage data to analyze page views and improve our service. More information: https://plausible.io/data-policy

6. Data Retention

We delete your personal data as soon as it is no longer necessary for the purposes for which it was collected or otherwise processed.

If we have requested your consent and you have provided it, we will delete your personal data when you withdraw your consent, provided there is no other legal basis for processing.

If you object to the processing and there are no overriding legitimate reasons for processing or if you object to processing for direct marketing purposes (including profiling), we will delete your data accordingly.

If deletion is not possible due to legal obligations or for the establishment, exercise, or defense of legal claims, the data will be restricted instead.

More information can be found in the sections below.

7. Your Rights

You have the following rights regarding your personal data:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to object to processing (Art. 21 GDPR)
  • Right to data portability (Art. 20 GDPR)

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Article 6 para. 1 lit. e or f GDPR, including profiling based on those provisions.

If we process your personal data for direct marketing, you have the right to object at any time to such processing.

You may also withdraw your consent to processing at any time. The lawfulness of processing carried out prior to withdrawal remains unaffected.

You also have the right to lodge a complaint with a supervisory authority.

8. Data Security

We use modern security technologies (e.g., HTTPS, encryption) and apply regular updates to protect your data. You can recognize secure connections by the "https://" prefix and the padlock icon in your browser’s address bar.

9. Cookies and Similar Technologies

Our website does not use tracking cookies. Only technically necessary cookies are used to ensure proper functionality.

Below is a list of the cookies we use:

Name Purpose Duration
locale Stores language settings 1 year
Laravel_cookie_consent Stores the user's cookie consent status 1 year
wedset_session Stores session information Session
XSRF-Token Prevents cross-site request forgery (CSRF) attacks Session

Additionally, the following settings are stored in your browser’s Local Storage:

  • colorMode: Selected color theme (e.g., 'light' or 'dark')
  • darkMode: Activation status of dark mode

These settings are solely used to improve the user experience and are not processed server-side.

10. Changes to this Privacy Policy

We reserve the right to amend this privacy policy to ensure it always complies with current legal requirements or to reflect changes to our services. The new privacy policy will apply upon your next visit.