Last updated: 25 September 2026
Who is responsible
The controller of your personal data is YoWif (the band management). Contact for all privacy questions: privacy@yowif.example.
What we collect and why
| When | Data | Why | Legal basis (GDPR) |
|---|---|---|---|
| You buy a ticket | Name, email, show, number of tickets, amount | To issue your ticket and send it by email | Contract, Art. 6(1)(b) |
| You send a message | Name, email, topic, message | To answer you | Your request, Art. 6(1)(b), and our legitimate interest, Art. 6(1)(f) |
| You subscribe to news | To send tour news now and then | Consent, Art. 6(1)(a) |
We never see or store your card details. You enter them on the secure payment page of Stripe, and Stripe only tells us whether the payment succeeded.
Who processes the data for us
- Render (hosting, servers in Frankfurt, EU) runs this website.
- Supabase (database, Frankfurt, EU) stores orders, messages and subscribers.
- Stripe (payments) processes your card payment as an independent controller under its own privacy policy. We receive your email, the amount and the payment result.
- Resend (email delivery) sends ticket emails. Resend may process data outside the EU under Standard Contractual Clauses.
- Google Fonts delivers the fonts of this site. When a page loads, your browser connects to Google servers, which see your IP address.
Each of them processes data only on our behalf, under a data processing agreement.
How long we keep it
- Ticket orders: as long as required by tax and accounting law.
- Messages: up to 12 months after the conversation ends.
- Newsletter: until you ask us to remove your email.
Cookies
This site does not use cookies for tracking or advertising. The admin area uses your browser's built-in login, which is not a cookie and is only used by the site owner.
Your rights
You can ask us to show, correct or delete your data, to restrict or object to its use, or to send you a copy (data portability). You can withdraw your newsletter consent at any time. Just write to privacy@yowif.example. You also have the right to complain to your local data protection authority.