Chris Schön
Bainingstraße 133
48165 Münster
Germany
(hereinafter referred to as "Chris Schön" or "redbeed")
Phone: +49 171 2971071
Email: hello(at)redbeed.com
VAT ID: DE311146385
Contact Person:
If you have any questions regarding data protection, please contact us using the information provided above.
We take the protection of your personal data very seriously. Personal data is handled confidentially and in accordance
with the statutory data protection regulations and this privacy policy.
Using our website is generally possible without providing personal data. However, certain features (e.g., registration,
guest lists, invitations) require the collection of personal data such as name, email address, or event details.
a) When registering and using the app:
Purpose: Provision and management of the wedding planning platform, especially for managing events, guests, and
invitations.
b) When using contact forms or support requests:
Purpose: Processing your request and support communication.
Your data is processed based on Art. 6 para. 1 lit. b GDPR (performance of a contract), if required for using the app,
or based on Art. 6 para. 1 lit. f GDPR (legitimate interest, e.g., optimizing the platform).
Hosting: Our website and infrastructure are hosted by Hetzner Online GmbH, which provides server infrastructure for
web servers, databases, and S3-compatible object storage. All servers are located in Germany.
Analytics: We use Plausible Analytics, a privacy-friendly web analytics service operated by Plausible Insights OÜ
(Estonia, EU). Plausible works without cookies, stores no persistent identifiers and builds no user profiles; all
measurement is anonymous and aggregated. We serve the analytics script from our own domain and relay the measurement
data to Plausible through our servers. Your IP address is processed briefly for that relay but stored neither by us
nor by Plausible. The legal basis is our legitimate interest in audience-based improvement of our service
(Art. 6 (1) (f) GDPR). A data processing agreement is in place with Plausible, and all processing happens within the
EU. You can object to the measurement at any time with effect for the future:
disable analytics at the end of this page. More
information: https://plausible.io/data-policy
Social media management: To plan and publish our posts on social networks, to handle comments under our own posts and to measure their reach, we use Zernio, a service of Zernio Software SL, Carrer Mallorca 2A, 17230 Palamós (Girona), Spain. Zernio retrieves the comments and statistics on our posts through the platforms' interfaces and delivers our replies. Our AI services access these comments and statistics through Zernio (see AI services). This involves processing your public username, your profile picture and the content of your comment. Zernio processes the data on our behalf under a data processing agreement, mainly in the EU and in the United Kingdom, for which an adequacy decision of the European Commission exists. Some of Zernio's sub-processors are based in the USA. More information: https://zernio.com/privacy-policy. Details on how we handle comments are set out in section 7.
AI services: In our own work and in some features of the app, we use AI services. We currently use services from these providers:
Which of these services we use for which task may change. The following rules apply to each of them.
What the AI services don't see: We don't enter personal data from the app into any of these services. None of them receives names, email addresses, guest lists, your guests' responses or images from your account. We mainly use these services for our own content, such as texts and translations in our magazine and on our pages. There are three exceptions, which we list here one by one:
Contractual basis: We only use the AI services under the providers' commercial terms, never through offers for private individuals. Every service that receives content with personal data (the three exceptions above) also meets these conditions: we have a data processing agreement with the provider, and the provider may not use the content to train its models. Where processing takes place outside the EU, in particular in the USA, we base the transfer on an adequacy decision of the European Commission (Art. 45 GDPR), for example for companies certified under the EU-US Data Privacy Framework, or on the European Commission's standard contractual clauses agreed in the data processing agreement (Art. 46 (2) (c) GDPR).
We maintain public profiles on the following social networks to share information about wedset and to stay in touch with couples and anyone interested: Facebook, Instagram, TikTok, YouTube and Pinterest.
Processing by the platform operators: When you visit or interact with one of our profiles (e.g., view, comment on, like or share a post, or send us a message), the respective platform operator processes your personal data. Depending on the platform, this includes in particular your IP address, device and browser information, cookies and similar identifiers, your usage behaviour and, if you are logged in, the link to your user account. This can happen even if you do not have an account with the platform. According to their own information, the platform operators use this data to provide and improve their services, for statistics and for personalised advertising, among other purposes. We have no influence over this processing. For details, please refer to the providers' privacy notices linked below.
Our own processing: When you contact us on a platform, for example with a comment, a mention or a direct message, we process your username and the content of your message in order to reply. The platforms also provide us with statistics about our profiles, e.g., on reach, interactions and the approximate composition of our audience. We only receive these statistics in aggregated form and cannot identify individual people in them. We also retrieve them through Zernio and analyse them with our AI services (see section 5).
Purpose and legal basis: We run these profiles to present our service publicly, to communicate with people who are interested and to understand the reach of our content. The legal basis is our legitimate interest in public relations and communication through the channels our audience uses (Art. 6 (1) (f) GDPR). Where a platform operator asks for your consent, for example for cookies, the legal basis is Art. 6 (1) (a) GDPR in conjunction with Section 25 (1) TDDDG (German Telecommunications Digital Services Data Protection Act). You give and withdraw this consent with the platform operator.
Joint controllership: For some platforms, we are jointly responsible with the platform operator for processing data to generate statistics about our profiles (Art. 26 GDPR; cf. CJEU, judgment of 5 June 2018, C-210/16, Wirtschaftsakademie Schleswig-Holstein). The platform operators provide the following agreements for this:
To our knowledge, Instagram, YouTube and Pinterest do not provide a joint controller agreement for profile statistics.
Transfers to third countries: The platform operators also process data outside the EU, in particular in the USA. Meta Platforms, Inc., Google LLC and Pinterest, Inc. are certified under the EU-US Data Privacy Framework, so transfers to these companies are covered by an adequacy decision of the European Commission (Art. 45 GDPR). According to its own information, TikTok also stores data in the USA, Malaysia and Singapore and grants remote access from further countries, including China. TikTok bases these transfers on the European Commission's standard contractual clauses (Art. 46 GDPR) and, where available, on adequacy decisions.
Providers and privacy notices:
Your rights: You can exercise your rights under section 9 both against us and against the respective platform operator. As only the platform operators have full access to user data, a request made directly to the provider is usually the most effective. If you need help with this, we are happy to support you.
Many couples ask their wedding planning questions publicly on social networks: under our own posts, under posts by other wedding accounts or in their own posts. We read such public posts and comments, answer selected questions publicly with a helpful tip and like individual posts or comments. Where we do not collect your data from you directly but from publicly accessible posts, this section provides the information required under Art. 14 GDPR.
Data processed and source: We process your public username, your profile picture where applicable, the content of your public post or comment and its context (i.e., which post it appeared under). The data comes from publicly accessible posts and comments on Instagram and TikTok and from comments under our own posts on Instagram, Facebook and YouTube. Our AI services see this content the way it appears in an ordinary feed: in the browser, logged in with our own account, or through Zernio. We leave out private accounts and posts by minors. We do not select posts based on special categories of data such as health, religion or sexual orientation, and we do not address them in our replies.
Purpose: We answer wedding planning questions publicly with helpful information, such as a tip or a missing detail. Under other people's posts, our replies contain no advertising: no product name, no link and no offer. We do not send direct messages in this context and do not use the data for advertising or profiling. Under our own posts, we answer comments and questions addressed to us. If someone there asks about wedset, they also get an answer about our service.
How it works: Every reply is selected and approved by a person before it is published. The same goes for every like. Comments are never published automatically, and there is no automated decision-making within the meaning of Art. 22 GDPR. Under other people's posts, we reach out to each person at most once on our own initiative. After that, we only reply if they reply first.
Legal basis: Art. 6 (1) (f) GDPR. Our legitimate interest is to answer publicly asked questions with helpful information and thereby become known as a point of contact for wedding planning. You shared the content publicly yourself and addressed a question to the public. We only process this content, only within the respective conversation, and we do not create profiles.
Retention: We do not create lists, profiles or databases about the people whose posts we read, and we do not store usernames or post content permanently. For technical reasons, the content we read remains stored for a limited time: in the history of our AI tools on our computer for up to 30 days, at the providers of the AI services usually for up to 30 days (longer only if a provider reviews a possible violation of its usage policies or is legally required to keep it), and at Zernio briefly in its cache and in logs according to Zernio's deletion periods. Our published reply remains visible on the platform until we or you delete it. You can remove a comment under your own post yourself at any time.
Recipients:
Right to object (Art. 21 GDPR): You can object to this processing at any time. An informal message is enough: an email to hello(at)redbeed.com, a direct message to our profile or a short reply to our comment. We will not contact you again and, on request, will remove our previous comments. To make this permanent, we note your username in our account for this purpose, for example using Instagram's "Restrict" feature. Your other rights under section 9 apply accordingly.
We delete your personal data as soon as it is no longer necessary for the purposes for which it was collected or
otherwise processed.
If we have requested your consent and you have provided it, we will delete your personal data when you withdraw your
consent, provided there is no other legal basis for processing.
If you object to the processing and there are no overriding legitimate reasons for processing or if you object to
processing for direct marketing purposes (including profiling), we will delete your data accordingly.
If deletion is not possible due to legal obligations or for the establishment, exercise, or defense of legal claims, the
data will be restricted instead.
More information can be found in the sections below.
You have the following rights regarding your personal data:
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your
personal data based on Article 6 para. 1 lit. e or f GDPR, including profiling based on those provisions.
If we process your personal data for direct marketing, you have the right to object at any time to such processing.
You may also withdraw your consent to processing at any time. The lawfulness of processing carried out prior to
withdrawal remains unaffected.
You also have the right to lodge a complaint with a supervisory authority.
We use modern security technologies (e.g., HTTPS, encryption) and apply regular updates to protect your data. You can
recognize secure connections by the "https://" prefix and the padlock icon in your browser’s address bar.
Our website does not use tracking cookies. Only technically necessary cookies are used to ensure proper functionality.
Below is a list of the cookies we use:
| Name | Purpose | Duration |
|---|---|---|
| locale | Stores language settings | 1 year |
| Laravel_cookie_consent | Stores the user's cookie consent status | 1 year |
| wedset_session | Stores session information | Session |
| XSRF-Token | Prevents cross-site request forgery (CSRF) attacks | Session |
Additionally, the following settings are stored in your browser’s Local Storage:
These settings are solely used to improve the user experience and are not processed server-side.
We reserve the right to amend this privacy policy to ensure it always complies with current legal requirements or to
reflect changes to our services. The new privacy policy will apply upon your next visit.
Here you can object to the anonymous audience measurement by Plausible for this browser. Your choice is stored only in your browser and applies until you change it here again.