FanStage Privacy Policy

1. Data controller

The controller of your personal data is Fan Stage Mateusz Bednarski, seated in Łódź, ul. Małachowskiego 90, 90-159 Łódź, Poland, VAT ID: 7252021896, REGON: 363999620 (the "Controller").

2. Scope and sources of data

We process personal data you provide when using FanStage, as well as data collected automatically while you use the Service. We may process in particular:

• account and login data (email, user ID, encrypted password),
• profile data (nickname, username),
• activity data in the Service (followed artists, demand signals, locations, rankings),
• User Content,
• technical data (IP address, device type, browser, logs),
• consent data (analytics, marketing).

3. Purposes and legal bases for processing

• Performance of a contract (Art. 6(1)(b) GDPR): Creating and managing your Account, following artists, recording demand signals.
• Legitimate interests (Art. 6(1)(f) GDPR): Service security, fraud detection, defence against claims, technical logs.
• Legal obligation (Art. 6(1)(c) GDPR): Handling complaints and data-related requests.
• Consent (Art. 6(1)(a) GDPR): Traffic analytics (GA4) and sending marketing communications.

4. Is providing data mandatory?

Providing data marked as required during registration is voluntary but necessary to create an Account. Consent to analytics or marketing is entirely optional.

5. Recipients and data processors

We currently use the following providers:

• Supabase – database infrastructure, authentication, and backend services,
• Google – Google Analytics 4 (only after you have given your explicit consent),
• Other technical providers necessary to deliver the Service.

6. Transfers outside the EEA

Where providers operate globally (such as Google or Supabase), data may be transferred outside the European Economic Area. The Controller applies appropriate safeguards, including Standard Contractual Clauses.

7. Data retention periods

• Account data – for as long as you maintain an active Account.
• Marketing consents – until consent is withdrawn.
• Technical logs – for a period justified by security and diagnostic needs.

8. Your rights

You have the right to access, rectify, erase ("right to be forgotten"), restrict processing, data portability, and to object. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO).

9. Google Analytics 4

If you give your consent, we use Google Analytics 4 to analyse traffic. GA4 does not collect data before your explicit acceptance. Data is anonymised to the extent provided by Google.

10. Contact

For all questions about your data, please contact us at: privacy@fanstage.pl.