Particularly sensitive details are stored encrypted, not in plain text:

• •Health information (allergies and medical notes)
• •Contact data such as address and IBAN

Special rules apply to health information:

• •It is stored encrypted only.
• •It is visible only to the relevant teams (kitchen and first aid).
• •Every access by the team is logged and visible in your data export in the profile.
• •30 days after the event it is deleted automatically and permanently, not just hidden.

Consents you give are documented verifiably:

• •privacy policy, terms, liability and age confirmation
• •each with timestamp and document version

You stay in control of your data:

• •On request you can get access to the data stored about you.
• •You can delete or anonymize your account.
• •With the “anonymize after event” option this happens automatically.

A data export bundles your most sensitive data and is therefore specially secured:

• •The export is not downloaded directly in the browser but provided through a one-time download link.
• •We send this link out-of-band to your registered channel (email or Telegram) and it can be used exactly once.
• •If you have both channels on file, two-factor protection applies automatically: the link arrives by email and the PIN by Telegram. Only both together release the export – a single compromised channel is then not enough.
• •A request is possible at most once per day.
• •The export is locked if your contact details (email or Telegram) were changed in the last 14 days.
• •Every change to your contact details is additionally reported to your previous contact details, so you notice an unexpected takeover immediately.

On the member map:

• •Only an approximate location is shown, never your exact address.
• •The display can be turned off at any time.
• •On request you do not appear in public lists either.

Access to data is controlled:

• •When an administrator accesses private data, it is logged.
• •Booking and finance data are linked in a tamper-evident chain.

Payment-related data (fees, donations, transfers):

• •It is retained for the legal periods, usually 6 to 10 years.
• •It is stored revision-safe and therefore cannot be freely deleted.

Address, phone and similar details:

• •On request they are anonymized after the event, once bookkeeping is complete.

Technical logs are used for error analysis:

• •They are deleted after 90 days.
• •Audit and finance logs are tamper-evident.