Privacy Policy
Version 23 · October 10, 2026This document is also available in Italian and Dutch. In the event of any discrepancy between language versions, the English version prevails.
This notice explains which personal data Givibes collects, for which purposes, and which choices you have about that data.
Jump to a section
1. Overview
This notice is issued by Andrea Battarelli Martini, an individual and not a registered company, operating as Givibes ("Givibes", "we", "us", "our"), who is the controller of the personal data described in this notice. It applies to givibes.app, the Givibes app and company.givibes.app (our page for venues, partners and investors; see section 8), together the "Service". The Service helps people discover nightlife events and venues near them. It consists of the web app at givibes.app and the Givibes app for Android, which is the same app in a native shell. A person who creates an account on the Service is a "User", and that account is the User's "Account". Users can browse upcoming events, follow venues, save events they are interested in, mark themselves as attending, and send questions to venue organizers. Venues and event organizers ("Publishers") join through an application that our team reviews. Publishers can publish events, answer questions from Users, and manage their public profile. Photos, videos and text that Users and Publishers post on the Service are "Content". A photo or short video that a User captures live during an event is a "Vibe". A temporary post published by a venue is a "Story". Givibes does not process payments. Any ticketing takes place through external links provided by the organizer.
2. Data we collect
We collect data directly from you (what you type in and what you upload) and automatically when you use the Service (device and log data). We also receive data about you from the following sources, and from no other source. We do not buy data about you.
- Google or Apple, if you sign in with them: the identifier they assign to you, your verified email address and your name, if they send it. Apple also sends us a credential used to revoke Givibes' access when you delete your Account.
- Other Users and Publishers: reports about you, with the message written by the person who reported; Vibes and venue photos in which you appear; invitations, plans and rounds to which you are invited; and, if you joined the waitlist through an invite link, that link, which identifies who invited you.
- Our staff: the details of a contact person at a venue, entered manually or from a file, including from public sources (see section 8).
- Cloudflare Turnstile: the result of its check on whether a form was completed by a person or by a bot.
The MaxMind database described in section 5 is published by a third party, but we consult it on our own server: it does not send us any data about you.
| Context | What we collect | Why (purpose & legal basis) |
|---|---|---|
| Signing in with Google or Apple (with Apple, only when Sign in with Apple is offered) | If you choose this option: the identifier that Google or Apple assigns to you (it is always the same, and it is used only for Givibes); the email address they confirm; and your name, if they send it. Apple's “Hide My Email” gives us a relay address instead of your real address. We accept the relay address, and emails we send to it reach you only for as long as you keep it active. With Apple we also keep a credential. Its only use is to ask Apple, when you delete your Givibes Account, to revoke Givibes' access | To let you sign in without a password. Legal basis: performance of a contract. Apple requires that this access be revoked when you leave; revoking it deletes the link between your Apple ID and us. |
| Creating an Account | Name, nickname, email address, password (stored hashed; we never see it in plain text) | To create and operate your Account. Legal basis: performance of a contract with you. |
| Using the Service | Events you save, mark as attending or follow; venues you follow; friends you add | To provide the Service as intended. Legal basis: performance of a contract. |
| Location & presence | Your device location (if you grant permission) or an approximate location derived from your IP address; which events you are going to, and when | To show you nearby events and distances. Legal basis: consent (device GPS is opt-in; you can decline and still use the Service with reduced accuracy). The approximate location derived from your IP address is used only to choose the starting city and the centre of the map when no other location is available (your device location, the city chosen on your device or the city of your Account), and to pre-select the city at sign-up, which is saved only if you confirm it. It is sent to your device and is not stored on our servers. Legal basis: our legitimate interest in showing you relevant events. To show your friends which events you are going to. Legal basis: your consent if you switch this on yourself; our legitimate interest if your Account was created from 1 October 2026 with it switched on from the start, in which case switching it off is how you object. |
| Messaging organizers | The content of the questions you send to a venue, and the venue's replies | To provide the feature you use. Legal basis: performance of a contract. |
| Plans and asking friends to an event | Who you ask, their yes/maybe/no response, and the invite links you create or use to add friends. For a plan (one to three nights that you suggest to friends you select), also: which nights, who you invited, when each of them opened the plan and how they voted. The person who created the plan sees every answer, because the answers are addressed to that person. Another person invited to the plan sees your name, whether you have opened the plan and your vote only if all of these conditions are met: that person is your friend, neither of you has blocked the other, and you have not limited that person. To everyone else you appear only in the count. Voting in a plan is a deliberate action within a group you can see, so it does not depend on the “Friends can see where you go” setting. Limiting someone is how you exclude that person. When voting closes, if the night chosen is one you voted for, Givibes automatically marks you as “Going” to that night, on two conditions: you saw this rule when you voted, and the night has not been under way for more than 30 minutes (or, for shorter nights, for more than 30% of their length). If either condition is not met, you only receive an invite to join. You are told the rule before your first vote, you receive a notification, and you can remove the “Going” at any time. This “Going” follows your “Friends can see where you go” setting and has the same effects as one you set yourself, such as reminders and the number of people going that the venue sees. If the plan is cancelled, the “Going” set by the plan is removed; one you set yourself stays. | To provide the feature you use. Legal basis: performance of a contract. |
| Rounds: a night out in stops, with friends | For a round (two to four stops in a row, events or venues, that you suggest to friends you select): the stops and their times, who is in the round, and the stops you say you'll be at (and the resulting “Going”), the change suggestions you make and your votes on them (if the option you voted for wins, and you saw this rule when you voted, Givibes marks you as being at that stop, under the same rules as a stop you tick yourself; otherwise you only receive an invite). Inside a round, every participant sees your name, your profile photo, the stops you say you'll be at, the suggestions you make and your votes, even if they are not your friend (until it is put to a vote or taken, only you and the person who created the round see a suggestion); until you have read the window that explains this, only the person who created the round and your friends see you. People with whom there is a block, and people you have limited, do not see you. The only exception is the person who created the round: they always see the people they invited (if one of those people has limited the creator, however, the creator does not see the stops that person says they'll be at or their votes), and every participant always sees them. A block between you and the person who created the round makes you leave the round. You can leave a round at any time; the person who created it can remove someone or cancel it. When you leave, or if the round is cancelled, the “Going” the round set is removed; one you set yourself stays. Outside the round, the “Going” set by the round follows your “Friends can see where you go” setting. If you delete your Account, the rounds you created are deleted and you are removed from the others. If the person who creates the round makes it “Visible to your friends” when creating it, that person's friends who were not invited can see it on the creator's profile, with the stops and their times, the names of their own friends already in it and the number of the other people, and can join without an invite; people the creator has blocked or limited cannot see it. Once in, they see the same information as the other participants. The creator can switch the option off at any time (but cannot switch it on after creating the round): anyone who has already joined stays in the round. Everyone in the round is told that it is visible to the creator's friends. | To provide the feature you use. Legal basis: performance of a contract. |
| Vibes: live photos and videos at an event | A photo or short video you capture live during an event you are attending, and whether you have agreed to let the venue feature it publicly or promote it to a Story. Also the reactions people leave on a Vibe (a choice of eyes, and the time of the reaction). Only the person who took the Vibe sees who reacted and how. That person does not see, and does not count, the reactions of anyone who has blocked them, whom they have blocked, or who has limited them, including blocks and limits made from a Vibe without knowing who took it. Everyone else sees only their own reaction, never names or counts. Immediately after taking a Vibe you can choose who sees it: “Friends & who was there” (your friends and the people who were at that night; the venue never sees it or asks for it, and it never appears on the night's page or the venue's page), or “Public” (the venue can put it on the night's page, after which anyone on the Service sees it; we inform you, and you can remove it). If you do not choose, the setting you selected in Settings applies. Vibes that are never published stay in your album until you delete them. After 24 hours only you can see them in the app, with one exception: for 30 days from when you took them, the venue of that night can see the ones it can ask you to publish, which are all of them except those set to “Friends & who was there”. Separately, a venue can add its own photos of a night to that night's album, marked as coming from the venue. These photos are the venue's Content, not your Vibes. If you appear in one of them and want it removed, report it and it is hidden immediately. | To provide the feature you use. Legal basis: performance of a contract. Public publication takes place only with your explicit consent, which you can withdraw at any time. |
| Event feedback (stamps) | Whether you attended an event and the stamp you chose for it (Again! / OK / Boring). You can stamp a night, or change the stamp, up to 7 days after it ends. Your friends can see your stamp only where they can already see that you were at that event, under your “Friends can see where you go” setting; nobody else can see it. Organizers may receive only anonymous totals per event, and never when an event has fewer than 5 stamps. | To provide the feature you use and to give organizers aggregate feedback. Legal basis: performance of a contract. |
| Reporting a venue, a night, a Story, a Vibe or a venue's photo | The reason you select and the optional message you write (for older versions of the app, the category and message), linked to your Account, and what you reported. The person or venue you report never sees the reason or the message. A reported Vibe or venue's photo is hidden at the first report, and a Story is hidden when 3 different people report it for nudity within 24 hours; our staff then reviews it (see section 12). The venue is not notified when its Story is hidden; it is informed of our staff's decision and can contest it once, within 6 months, as described in section 12. When you report a venue's Story, we keep a copy of it for review, because Stories disappear after 24 hours. The copy is deleted together with the report | To review and act on reports. Legal basis: legitimate interest in keeping listings and Content accurate and safe. |
| Email preferences | Whether you have opted in to or out of our two optional emails (the weekly digest and "friends going tonight"), and the city we use to personalize them: either a city you have set, or one inferred from the nights you marked as going or saved | To send only the emails you have chosen, and only about your area. Legal basis: consent for each email; legitimate interest for using existing activity to infer a default city instead of asking you. |
| Contacting support | Your message, name and email address | To respond to you. Legal basis: legitimate interest in responding to inquiries. |
| Becoming a Publisher | Full name, phone number, venue name and your message | To review your application. Legal basis: legitimate interest / pre-contractual steps. |
| Your profile | Your profile picture, a short bio if you write one, and the history of nicknames you have used (we keep previous nicknames so that changing your nickname cannot be used to escape a report) | To operate your profile, and to prevent moderation from being evaded. Legal basis: performance of a contract for the profile itself; legitimate interest for the nickname history. |
| Organizing your Vibes | The folders you create and which photos you put in them | To provide the feature you use. Legal basis: performance of a contract. |
| Who has seen what | When you open another User's Vibe or a venue's Story, we record that you saw it. The person who took the Vibe sees only how many people have seen it, and the venue sees only how many people have seen each Story; neither sees who. The record also lets the app show you which Vibes you have already seen and which are new | To provide the feature. Legal basis: performance of a contract. Kept for 90 days after you saw the Vibe or Story, then deleted; on a Vibe that was never published, deleted 30 days after the Vibe was taken. |
| Friend requests | Who you asked, their answer, and how many of your requests to the same person have been refused or withdrawn (after 2 refused or withdrawn requests to the same person, you can no longer send that person a request; that person can still send one to you) | To provide the feature, and to prevent repeated unwanted requests. Legal basis: performance of a contract and legitimate interest. |
| Reporting, blocking or limiting a person | Who reported whom and when, the reason and the optional message written by the reporter (never shown to the person reported), how the report was resolved and by which staff member; who blocked whom; who limited whom | To act on reports and to let you protect yourself. Legal basis: legal obligation under the Digital Services Act and legitimate interest in a safe platform. |
| Decisions on reports, and appeals | When our staff removes something or decides not to remove it: a record of what was decided and when, the rule of our Terms under which it was decided (for Content we consider illegal, the reasons we gave you), and the page, photo, night, Story or Account it concerns. If you appeal a removal: the text you write and our answer. The staff member who decides can add an internal note to the decision or to the answer to an appeal; this note is never shown to you, is not included in the file you receive with Download my data, and is deleted together with the decision after 12 months. The people who reported are told the outcome and are never named to the person concerned | To inform people of what we decided and why, and to allow them to contest it. Legal basis: legal obligation under the Digital Services Act (articles 16 and 17) and legitimate interest in a fair and safe platform. |
| Staff notes about a venue | Free-text notes that our staff write about a venue while reviewing it; these notes can mention the people who run the venue | To keep a usable record of a venue's review. Legal basis: legitimate interest. These notes are kept for as long as the venue exists on the Service. You can ask for a copy of notes that concern you. |
| Notifications on your phone (only if you turn them on) | A technical identifier that Google Firebase assigns to the Givibes app on your phone (a “push token”), the type of phone (Android), when the app last used that identifier, and which kinds of notifications you want (friends, nights out, your photos) | To send you the notifications you requested. Legal basis: consent. Your phone asks for your permission before any notification is sent. You can turn notifications off at any time, all together in your phone's settings or one kind at a time in Givibes → Settings. |
| Nights and news from Givibes | Whether you agreed to “Nights and news from Givibes”, when and where you agreed (Settings, the one-time question, or sign-up); which of our messages reached you, and on which channel (in the app, by email, on your phone) | To send you, occasionally, a night you might like or news about the app. Legal basis: consent. This option is off until you agree (in Settings, in a one-time question in the app, or at sign-up); it is never pre-ticked. You receive at most one such message a week. You can turn it off in Settings, or with one click from any of those emails, and it stops immediately. We never put tracking pixels in our emails. Service notices reach every User in the app. The following service notices are also sent by email, whether or not you agreed to our news: verification codes and password resets; a decision of our staff that removes your Content or suspends your Account, with the link to contest it; a venue's answer to your question; a change to the time or place of a night you are going to, when the night is less than 48 hours away; a notice prepared by our staff and marked as a service notice; and, for the owners and administrators of a venue, transfers of the venue's ownership, notices about the nights hosted at the venue and messages from our staff to venues. Notices of changes to the Terms or to this notice are shown only in the app. Legal basis for service notices: performance of a contract. |
| When you last used the app | A single date: the last day you opened the app. This is not a history; each day overwrites the previous one | To count how many people use the Service (only as totals, never per person) and, if you agreed to receive our news, to include you in a reactivation message. Nothing is sent automatically: our staff prepares each reactivation message for the people who have not opened the app for at least a number of days chosen each time, between 1 and 365. You receive at most one promotional or reactivation message every 7 days. Legal basis: legitimate interest. |
| Your language | The language in which you use the app | To display the app and send emails in that language. Legal basis: performance of a contract. |
| Automatically, when you use the Service | IP address, browser and device type, log data, crash reports | To keep the Service secure and running. Legal basis: legitimate interest. |
3. Sensitive data
Neither of the two categories below is a "special category" of data under Article 9 GDPR. Previous versions of this notice described student status as a special category; that description was incorrect. The two categories are described separately because they reveal more about you than the other data.
- Student status. If you choose to verify a university email address (University of Twente or
Saxion) to access student-only events, we store the address itself, not only the fact
that you were verified. The address never leaves our database: no other User and no venue can see it;
they see a badge. We keep the address so that a verification can be checked or revoked later, and so
that the same address cannot be used to verify several Accounts. Its domain (for example
student.utwente.nl, never the address) is also used in “Discover”: to suggest you to people at your university if you turn that option on, and to show you the people at your university who turned it on. We do not collect your courses, grades or any other information about your studies. Student verification is optional and based on your consent. - Real-time and historical presence data. Which events you are going to, and when, can reveal patterns about your life (where you go out, how often, and with which social circle). This data is visible only to your friends; it is never public and never visible to the venue. Sharing is controlled by a switch in Settings. Nothing you mark is visible to anyone before the app has told you, in plain words, that your friends will see where you go: until you have seen that notice, every night you mark remains “only me”. Accounts created from 1 October 2026 have the switch on from the start, because seeing where your friends are going is the main purpose of the Service; even then, nothing is visible until you have seen that notice. For these Accounts we rely on our legitimate interest, and switching it off is how you object. If you switch it on yourself, we rely on your consent, and you withdraw it in the same way. Switching it off takes effect immediately: nobody sees where you are going, including on nights you marked before, and you stop seeing where anyone else is going. You can also exclude a single friend by limiting that friend. The one exception is a plan you have been invited to: when you vote in it, the friends invited to the same plan see your vote, regardless of this setting, because you are answering them directly. People you have limited or blocked never see your vote.
4. How we use data
In addition to the purposes in the table in section 2, we use data to: keep the Service secure and prevent abuse (for example, rate limiting and blocking malformed requests); debug and fix problems; understand aggregate usage in order to decide what to build next; and comply with legal obligations when the law requires us to. We do not use your data to build advertising profiles, and we do not sell it to anyone.
7. Retention
As a general rule, we keep your data for as long as your Account exists, and when you delete your Account we remove your personal data (see section 11 for what this means in detail).
A Vibe that was never published is kept until you delete it or delete your Account. After 24 hours only you can see it in the app, except for the venue of that night: for 30 days from when you took the Vibe, the venue can see it and ask you to publish it, unless you chose “Friends & who was there”.
The data listed below is not kept for as long as your Account exists. It is deleted automatically, by a job that runs every day, whether or not you ask:
| What | How long we keep it | Counted from |
|---|---|---|
| A Vibe you published and then removed | 7 days | when you removed it; during this period you can change your mind |
| Reactions to a Vibe | as long as the Vibe exists; 30 days for other people's reactions on a Vibe that was never published | they are deleted together with the Vibe, and you can remove your own reaction at any time; the 30 days count from when the Vibe was taken |
| Who has seen your Vibe or a Story | 90 days; 30 days on a Vibe that was never published | when they saw it; the 30 days count from when the Vibe was taken |
| A plan or round you suggested or were invited to, with the votes and the “I'm there” ticks | 30 days | the end of the plan's last night or the round's last stop |
| The people who joined through your friend link (the link itself is stored only as a one-way fingerprint) | 7 days | the expiry or withdrawal of the link; after that, only the number of people who joined is kept |
| Questions you asked an organizer, and the replies | 12 months | the end of the event |
| Events you went to or saved, and your feedback on them | 24 months | the end of the event |
| Your previous nicknames | 24 months | when you changed the nickname |
| Notifications, once sent or read | 12 months | when they were sent or read |
| Reports about a person or a venue (including a copy of a reported Story), once resolved | 24 months | when they were resolved |
| Publisher applications and change requests, once resolved | 24 months | when they were resolved. If you delete your Account, your Publisher application is deleted immediately. The copy emailed to our support mailbox is not deleted automatically (see section 8) |
| A decision on a report, with the appeal against it and the answer to the appeal | 12 months | when the decision was taken. Until the time limit for an appeal has passed, Content removed by our staff is kept hidden instead of being deleted |
| Expired sessions | 30 days | when the session expired |
| Your phone's push token | Until you log out or turn notifications off, and at most 9 months without opening the app | the last time the app used it |
| Verification and password-reset codes | 30 days | when they were used or expired |
| Which of our messages reached you | 90 days | when the message was sent (we need this record to limit promotional messages to one a week at most) |
| A waitlist request you never confirmed | 7 days | when you made the request; it is then deleted |
| Your place on the waitlist | until Givibes opens in your city + 3 months, and 12 months at most | when you gave your consent (whichever comes first). You can leave at any time; see section 9 |
| The one-way fingerprint of your email address used to limit how many emails we send to that address | 7 days | when the email was sent |
| Uploaded files to which nothing refers any longer | deleted daily | — |
Two kinds of data are kept longer than the rest. Blocks last until you undo them. When an Account is deleted, its anonymized shell remains, because other records refer to it; the shell no longer contains anything that identifies you.
Data we are legally required to keep, and data already anonymized for internal statistics (which is no longer personal data), are not covered by this table.
8. Persons who are not Users: venues, partners and investors
Givibes also deals with businesses: venues and student associations that could publish their nights, partners, and investors. If you are the contact person for one of them, we can hold some data about you even if you have never created an Account.
| Where it comes from | What we keep | Why (purpose & legal basis) |
|---|---|---|
| You contacted us through the form on company.givibes.app | Your name, company, email address and message, and the type of contact you are | To answer you and follow up. Legal basis: steps taken at your request before entering into a contract. |
| You applied through the app to publish on the Service | Your application (name, email address, phone number, venue and message). A copy of the application is emailed to our support mailbox (Gmail, see section 5), and that copy is not deleted automatically. Our contact list for venues receives only the name of the venue. If you delete your Account, your application is deleted immediately; the contact remains, with the name of the venue, its stage and our staff's notes, but without any link to you. If you keep your Account, a resolved application is deleted 24 months after it was resolved | To handle your application. Legal basis: steps taken at your request. |
| We contacted your venue or company | The business's name, city and address; the contact person's name, email address and phone number, if you gave them to us or if they are publicly available for the business; notes of our calls and meetings, which are deleted together with the contact | To offer the Service to businesses it could help. Legal basis: legitimate interest. |
Only the Givibes team members who work with businesses can see this data. If no business relationship follows, we delete the data: after 12 months if you wrote to us and have not yet received an answer; otherwise, at the latest 24 months after the last contact or after we closed the contact. You can ask for a copy or for deletion at any time at [email protected].
9. The waitlist
If Givibes is not yet open in your city, you can leave your email address at givibes.app/lista, and we will write to you when Givibes opens in your city. You do not need an Account. This section describes what we do with that data.
| What we keep | Why (purpose & legal basis) |
|---|---|
| Your email address; the city you chose, or the city you typed if it is not one of ours (never used in our emails); a zone or university from a short list, if you select one; the language of the page | To write to you when Givibes opens in your city, and for no other purpose. Legal basis: consent (the box “Email me when Givibes opens in my city”). |
| Proof of your consent: the day you made the request and the day you confirmed it, the version of the wording you saw, the ID that our email service assigns to the confirmation email, and the day you declared that you are 18 or older. We do not keep your IP address | To be able to demonstrate that you consented. Legal basis: legitimate interest (GDPR Art. 7(1)). |
| If you joined through an invite link: which link it was, that is, who sent it to you | Only to understand how Givibes grows. There is no prize and no ranking. Legal basis: legitimate interest. See section 9.2 below. |
| A one-way fingerprint of your email address (not the address itself) | To limit how many emails we send to one address in a day and in a week, so that nobody can use the form to fill your inbox. Legal basis: legitimate interest (preventing abuse). Kept for 7 days. |
9.1 How it works
- Confirmation comes first. After you sign up, we email you a link. You are on the list only once you tap Confirm on the page that the link opens. A request that is not confirmed is deleted after 7 days.
- We write to you only for these purposes: the confirmation, a “You’re already on the list” email if you sign up again, and the announcement when Givibes opens in your city.
- You can leave in one tap. Every email ends with a “Leave the list” link, and your mail app shows its own “Unsubscribe” button. When you leave, we erase your email address, your invite code and the link between you and the person who invited you, and the link between you and anyone you invited. What remains is an anonymous count by city and zone (with dates rounded to the day), and nothing that points to you.
9.2 Who sees it
Only the Givibes team member who runs the list can see individual entries; the rest of the team sees totals by city and zone. Who invited whom is visible only to our staff: not to you, and not to the person who invited you, who sees only how many people joined through their link. Every export, search or view of who invited whom is recorded in a log. We do not sell the list or give it to anyone. The only providers involved are Resend (which sends the emails) and Cloudflare Turnstile (which checks that the form is completed by a person), both listed in section 5.
9.3 How long we keep it
Until Givibes opens in your city plus 3 months, and 12 months at the most from the day you gave your consent, whichever comes first. A job that runs every day deletes the data whose period has expired.
9.4 Your rights
You can leave in one tap, as described in section 9.1. For any other request (a copy of the data we hold, a correction, erasure), write to [email protected]. You do not need an Account: we find your entry by your email address. You can also object to the use of the invite link, and lodge a complaint with the Autoriteit Persoonsgegevens (see section 11).
Your email address, your city and the two tick boxes (confirming that you are 18 or older, and that you agree to receive emails) are required to put you on the list; the zone is optional.
Lista d’attesa — in italiano
Se Givibes non è ancora aperto in una città, è possibile lasciare il proprio indirizzo email su givibes.app/lista: il Titolare (Givibes) scrive a quell’indirizzo quando Givibes apre nella città indicata. Non è necessario un Account. Di seguito è descritto il trattamento di questi dati.
- Dati conservati e finalità. Sono conservati l’indirizzo email, la città scelta (oppure quella digitata, se non è tra le città previste: non compare mai nelle email del Titolare), una zona o un’università scelta da un breve elenco, se indicata, e la lingua della pagina. Questi dati sono usati solo per comunicare l’apertura di Givibes nella città indicata, e per nessun’altra finalità. Base giuridica: il consenso. È conservata anche la prova del consenso: il giorno della richiesta e quello della conferma, la versione del testo visualizzato, l’ID che il servizio di email assegna all’email di conferma e il giorno in cui è stato dichiarato di avere almeno 18 anni. Non è conservato alcun indirizzo IP. Base giuridica: legittimo interesse (poter dimostrare il consenso, GDPR art. 7(1)).
- Invito. In caso di iscrizione tramite un link di invito, è conservato il link usato, cioè l’indicazione di chi lo ha inviato. Il dato serve a capire come cresce Givibes. Non sono previsti premi né classifiche. Base giuridica: legittimo interesse; è possibile opporsi.
- Impronta dell’indirizzo. Per 7 giorni è conservata un’impronta a senso unico dell’indirizzo email (non l’indirizzo) per limitare il numero di email inviate allo stesso indirizzo, in modo che nessuno possa usare il modulo per riempire la casella di posta. Legittimo interesse (prevenzione degli abusi).
- Conferma. Dopo l’iscrizione è inviato un link: l’iscrizione alla lista è effettiva solo dopo aver toccato «Confermo» sulla pagina che si apre. Una richiesta non confermata è cancellata dopo 7 giorni. Il Titolare scrive solo per questi scopi: la conferma, un messaggio «Sei già in lista» in caso di nuova iscrizione, e l’annuncio dell’apertura di Givibes nella città indicata.
- Uscita dalla lista. È possibile uscire dalla lista con un tocco. In fondo a ogni email è presente il link «Esci dalla lista», e il programma di posta mostra il proprio pulsante «Annulla iscrizione». All’uscita sono cancellati l’indirizzo email, il codice invito e il legame con chi ha inviato l’invito, e il legame con le persone invitate. Resta solo un conteggio anonimo per città e zona (con le date arrotondate al giorno), che non consente di risalire alla persona.
- Chi vede i dati. Le singole iscrizioni sono visibili solo alla persona del team Givibes che gestisce la lista; il resto del team vede i totali per città e zona. Chi ha invitato chi è visibile solo allo staff del Titolare: non è visibile alla persona iscritta né a chi ha inviato l’invito, che vede solo quante persone si sono iscritte tramite il proprio link. Ogni esportazione, ricerca o consultazione di chi ha invitato chi è annotata in un registro. Il Titolare non vende né cede la lista: i fornitori coinvolti sono Resend (invia le email) e Cloudflare Turnstile (verifica che il modulo sia compilato da una persona).
- Durata della conservazione. Fino all’apertura nella città indicata più 3 mesi, e al massimo 12 mesi dal giorno del consenso, a seconda di quale termine scada prima. Un processo automatico eseguito ogni giorno cancella i dati il cui termine è scaduto.
- Diritti. È possibile uscire dalla lista con un tocco; per ogni altra richiesta (una copia dei dati conservati, una rettifica, la cancellazione) si può scrivere a [email protected]: non è necessario un Account, l’iscrizione è individuata tramite l’indirizzo email. Email, città e le due caselle (18 anni e consenso) sono necessarie per l’iscrizione alla lista; la zona è facoltativa.
Wachtlijst — in het Nederlands
Is Givibes nog niet open in uw stad, dan kunt u uw e-mailadres achterlaten op givibes.app/lista: wij mailen u zodra Givibes in uw stad opent. U hebt geen Account nodig. Hieronder staat wat wij met die gegevens doen.
- Welke gegevens wij bewaren en waarom. Uw e-mailadres, de stad die u koos (of de stad die u zelf typte als die er niet bij staat; die stad komt nooit in onze e-mails voor), een zone of universiteit uit een korte lijst als u er een kiest, en de taal van de pagina. Uitsluitend om u te mailen wanneer Givibes in uw stad opent, en voor geen enkel ander doel. Rechtsgrond: toestemming. Wij bewaren ook het bewijs van uw toestemming: de dag van uw aanvraag en die van uw bevestiging, de versie van de tekst die u zag, het ID dat onze e-maildienst aan de bevestigingsmail toekent en de dag waarop u verklaarde dat u 18 jaar of ouder bent. Wij bewaren geen IP-adres. Rechtsgrond: gerechtvaardigd belang (uw toestemming kunnen aantonen, AVG art. 7(1)).
- Wie u uitnodigde. Als u zich aanmeldt via een uitnodigingslink, bewaren wij welke link dat was, dus wie hem naar u stuurde. Dit dient uitsluitend om te begrijpen hoe Givibes groeit. Er is geen prijs en geen ranglijst. Rechtsgrond: gerechtvaardigd belang; u kunt bezwaar maken.
- Een vingerafdruk van uw adres. Wij bewaren 7 dagen een eenrichtings-vingerafdruk van uw e-mailadres (niet het adres zelf) om te beperken hoeveel e-mails wij naar hetzelfde adres sturen, zodat niemand het formulier kan gebruiken om uw inbox te laten vollopen. Gerechtvaardigd belang (misbruik voorkomen).
- Eerst bevestigen. Na uw aanmelding mailen wij u een link; u staat pas op de lijst als u op «Bevestigen» tikt op de pagina die dan opent. Een aanvraag die niet wordt bevestigd, wordt na 7 dagen verwijderd. Wij mailen u alleen voor deze doelen: de bevestiging, een bericht «Je staat al op de lijst» als u zich opnieuw aanmeldt, en de aankondiging wanneer Givibes in uw stad opent.
- Afmelden met één tik. Onderaan elke e-mail staat «Van de lijst af», en uw e-mailprogramma toont een eigen knop «Afmelden». Wanneer u zich afmeldt, wissen wij uw e-mailadres, uw uitnodigingscode en de koppeling met degene die u uitnodigde, en de koppeling met degenen die u hebt uitgenodigd. Wat overblijft is een anonieme telling per stad en zone (met datums afgerond op de dag), die niet naar u herleidbaar is.
- Wie de gegevens ziet. De afzonderlijke aanmeldingen zijn alleen zichtbaar voor het teamlid van Givibes dat de lijst beheert; de rest van het team ziet totalen per stad en zone. Wie wie uitnodigde, ziet alleen ons team: u niet, en degene die u uitnodigde evenmin (die ziet alleen hoeveel mensen zich via de eigen link hebben aangemeld). Elke export, zoekopdracht of raadpleging van wie wie uitnodigde, wordt in een logboek vastgelegd. Wij verkopen de lijst niet en geven deze aan niemand: de betrokken partijen zijn Resend (verstuurt de e-mails) en Cloudflare Turnstile (controleert dat een mens het formulier invult).
- Bewaartermijn. Tot Givibes in uw stad opent plus 3 maanden, en hooguit 12 maanden vanaf de dag waarop u toestemming gaf, afhankelijk van wat het eerst komt. Een taak die elke dag wordt uitgevoerd, verwijdert de gegevens waarvan de termijn is verlopen.
- Uw rechten. Afmelden kan met één tik; voor andere verzoeken (een kopie van de gegevens die wij hebben, correctie, verwijdering) mailt u naar [email protected]: u hebt geen Account nodig, wij vinden uw inschrijving via uw e-mailadres. E-mailadres, stad en de twee vakjes (18+ en toestemming) zijn nodig om u op de lijst te zetten; de zone is optioneel.
10. Security
We use reasonable technical and organizational measures to protect your data, including encrypted connections (HTTPS everywhere), hashed passwords, and access limited to what is needed to operate the Service. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
Who can access your data. Givibes is the controller of your data. Besides the person who operates Givibes, persons authorised by Givibes (staff members with moderation, sales or communication roles) can access the data needed for their role, under Givibes' instructions: for example, staff members with a moderation role can read reports, including the name and email address of the person who reported, and the records of the people concerned; staff members with a sales role can read business contacts (section 8); staff members with a communication role can prepare and send our communications. Individual waitlist entries are accessible only as described in section 9. The owners and administrators of a venue on the Service can access the data of their venue: the questions that Users send to the venue, the email addresses of the venue's team members, and the Vibes of the venue's nights that are visible to the venue as described in section 2.
11. Your rights
If you are in the EEA, the UK or Switzerland, you have the following rights:
- Access: to obtain a copy of the data we hold about you.
- Rectification: to have inaccurate data corrected.
- Erasure: to ask us to delete your Account and your data.
- Restriction or objection: to limit or object to certain processing.
- Portability: to receive your data in a portable format.
- Withdrawal of consent: at any time, for any processing based on consent (for example location or student verification), without affecting processing that took place before the withdrawal.
You can make most of these changes yourself in Settings (name, nickname, password, presence visibility, language, location). Erasure and portability are also self-service: Profile → settings icon → Settings → Access and data → Delete account deletes your Account immediately (see how to delete your Account for what is removed and what remains), and Profile → settings icon → Settings → Access and data → Download my data gives you a JSON file with the data we hold about you, without passwords and without other people's personal details. For any other request, or if you have lost access to your Account, email [email protected].
If you do not have a Givibes Account but you appear in a photo or video published on the Service, these rights still apply to you: they belong to the person the data is about, not to the Account holder. See how to report Content without an Account: you can have the photo or video removed by email, and we will never ask you to sign up first.
12. Automated decisions
We do not use automated decision-making or profiling that produces legal or similarly significant effects on you, and we do not build advertising profiles. Decisions about your Account (reviewing a report about you, suspending an Account, approving a Publisher application) are made by a person.
Two processes are automatic. First, when a Vibe or a venue's photo is reported, for any reason, it is hidden immediately, at the first report, before any person has reviewed it; when a Vibe is hidden, the Stories created from it end at the same time. This is deliberate: a photo of a person who does not want it published is removed within seconds, not after a review queue. Restoring a photo is never automatic: only our staff can restore a hidden photo. If your photo was hidden and you believe that was wrong, write to [email protected] and a person will review it.
Second, a Story is hidden automatically and immediately, if it is still online, when 3 different people report it for “Nudity or sexual content” within 24 hours. Only reports that are still open count, and only if they were made from Accounts that are at least 7 days old and are neither suspended nor deleted. This threshold applies only to Stories. Our staff then decides: if the Story is not removed, it is shown again, provided that its 24 hours have not ended; if it is removed, it stays hidden. The venue is not notified when the Story is hidden; it receives our staff's decision and can contest it as described below.
When our staff removes something you posted (a photo, a Story or a night), limits your venue's visibility or suspends your Account, you are informed of: what was decided and when; why (the rule of our Terms that was broken or, if we consider the Content illegal, the reasons we give under the law); and the fact that a person on our staff decided it after a report, including in cases where the Content had been hidden automatically in the meantime. You receive this information in the app and by email, so that you are informed even if you do not open the app. If your Account was suspended, you cannot use the app; the email therefore includes a one-time link to contest the decision without signing in, which stops working once the 6 months to contest have passed. You can also reply to that email (or write to [email protected]). In all other cases you contest from the notice in the app, or from the same link. You can contest once, within 6 months; a person on our team reads your appeal and answers within 7 days. If your appeal is upheld, we restore what was removed, where restoring it is still possible. The person who reported it is told the outcome but is never named to you, and the message that person wrote is read only by our staff. Contesting with us is an option we offer, not a condition: you can always turn to an out-of-court dispute settlement body or to a court instead, and the notice states this from the start.
Rate limits and the automatic deletion of old data (see section 7) also operate without human involvement, but they apply the same rule to everyone and do not assess you individually.
13. Whether providing data is mandatory
With an email address and a password, the following data are required to create an Account: your email address; a password of at least 12 characters; your name (up to 100 characters); a nickname (3 to 20 characters, using only the letters a–z, the digits 0–9 and the underscore, and not already in use); and the confirmation that you are 18 or older. The Account is activated only when you enter the 6-digit code that we send to that email address. In the app you must also tick the box accepting the Terms and this notice.
With Google or Apple, the following are required: an email address verified by Google or Apple (without it, sign-in is refused), a nickname, the confirmation that you are 18 or older, and the acceptance of the Terms and this notice. No password is used, and we do not ask for your name: we use the name supplied by Google or Apple or, if none is supplied, your nickname.
Without the required data, an Account cannot be created. The following are optional with either method: your language (English by default), the city where you usually go out, consent to our news, your location, a university email address, a profile picture and a bio. Location is optional: without it, distance-based features (such as "events near you") are less accurate, but the rest of the app functions normally. University email verification and all other data described above are optional.
14. Minors
The Service is not intended for anyone under 18. At sign-up you confirm, with a separate tick box, that you are 18 or older, and we record the date of that confirmation. The age limit applies because the app is built around nightlife venues where alcohol is served.
Accounts reported as belonging to a person under 18. A venue, another User or any other person can report such an Account. The report does not suspend the Account by itself; if it concerns a Vibe, the Vibe is hidden immediately, as for any report of a Vibe, but the Account is not affected. Our staff verifies the report and, if it is well-founded, suspends the Account: it can no longer be used, and the person sees a screen explaining why and how to contact us. The suspension does not result in the automatic deletion of the Account. A person decides what happens next, case by case, after the Account holder has had the opportunity to respond.
If you believe we hold data about a child, write to [email protected] and we will act on your report.
15. Changes to this notice
If our practices change, we update this page, including the version and date at the top. Each version has a number. For Accounts created from 22 September 2026, the version in force when the Account was created is recorded against the Account.
When a change is substantial, we raise the version and notify every User through a notice inside the app, in addition to the updated page. This notice is not sent by email or as a notification on your phone. We do not ask you to accept the new version again.
16. Contact
Email [email protected] for any matter related to this notice or your data. We do not publish a postal address. Email is the monitored channel for contacting us.