This overview describes the actual data processing of this website. The legally reviewed full version will be added before the production launch. Principles: data minimisation, EU data residency, no sharing with third parties without a legal basis, no tracking or advertising cookies.
Hosting & data residency
The website runs on Vercel (delivered via a global CDN). Form data and HQ data are stored in a PostgreSQL database at Neon in Frankfurt, Germany (AWS eu-central-1).
Enquiry & application forms
Submitted details (name, e-mail, optional phone, organisation, region, event details, message) are stored solely to process the enquiry in the EventX CRM. If the enquiry originates from a partner referral link, we attribute it to the referring partner (commission settlement); see “referral cookie” below.
Cookies
Only functional cookies are used: language preference, cookie-consent status, a signed login session for the EventX HQ (8 hours, httpOnly), a short-lived sign-in token when two-factor authentication is enabled (5 minutes) and — only after clicking a partner referral link — a referral cookie for attribution (30 days). We do not use tracking or advertising cookies.
EventX HQ (login area)
For personal accounts we store e-mail, name, a password exclusively as a salted hash (scrypt) and optionally a two-factor secret. Security-relevant actions (sign-in, password changes, approvals) are recorded in an audit log.
Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to lodge a complaint with a supervisory authority. Please contact us via the contact form.