Privacy Policy - Afro-Meet

Last updated: 04/01/2026

This Privacy Policy explains how Afro-Meet collects, uses, protects, and shares your personal data when you use our services (the "Platform").
We take data protection seriously and comply with the General Data Protection Regulation (GDPR - EU 2016/679).

1. Privacy at a glance

1.1 Data controller

The data controller is the website operator:
Goldoni Bogning Fouotsa
Niendorfer Str. 43, 22529 Hamburg, Germany
VAT number: DE 332972034
Email: [email protected]

1.2 Categories of personal data we collect

Depending on how you use the Platform, we may collect the following categories of data:

1. Identification & contact data: first name, last name, email address, phone number, country/city (if provided).
2. Account data: login details, profile information, preferences, settings.
3. Order & ticketing data: tickets purchased, event, date, amount, order status, confirmations, order-related communications.
4. Payment data: certain information needed to process payments (e.g., status, transaction ID).
   Important: full card/bank details are processed directly by our payment providers (e.g., Stripe/PayPal) under their own policies.
5. Support data: messages sent to support, possible attachments, communication history.
6. Technical & usage data: IP address, technical identifiers, logs, device type, browser, pages viewed, date/time, cookies.
7. Third-party data: when you use third-party services (payments, social networks) in connection with the Platform, we may receive technical or confirmation information.

1.3 Purposes of processing

We use your data to:

• Provide and operate the Platform (account creation, access, features).
• Manage ticketing: registrations, orders, confirmations, ticket issuance, transactional communications.
• Process payments and manage billing (via third-party providers).
• Prevent fraud and secure the Platform (detect suspicious activity, protect accounts).
• Provide customer support and handle requests.
• Improve our services (analytics, usage statistics, UX optimization).
• Communicate with you: service messages, important notices, and newsletters only if you have consented.
• Comply with legal obligations (accounting, tax, lawful requests by authorities).

1.4 Legal bases (GDPR)

Depending on the context, we rely on:

• Contract performance (Art. 6(1)(b) GDPR): e.g., ticket purchase, account services.
• Legal obligation (Art. 6(1)(c)): e.g., accounting/tax requirements.
• Consent (Art. 6(1)(a)): e.g., newsletters, non-essential cookies.
• Legitimate interests (Art. 6(1)(f)): e.g., security, fraud prevention, service improvement, internal statistics.

1.5 Your rights

Under the GDPR, you have rights including:

• Right of access.
• Right to rectification.
• Right to erasure (within legal limits).
• Right to restriction.
• Right to object.
• Right to data portability.
• Right to withdraw consent at any time (without affecting lawfulness before withdrawal).

To exercise your rights: [email protected].

2. How we collect your data

We collect your data:

• Directly when you: create an account, purchase a ticket, fill out a form, contact support.
• Automatically via: cookies, server logs, audience measurement tools (depending on your choices).
• From third parties: payment providers (payment confirmation, transaction identifiers) and, where applicable, social networks if you interact with embedded content.

3. Recipients and data sharing

We share your data only when necessary, including with:

1. Event organizers: so they can manage registrations, check access, communicate with attendees, and deliver the event.
   Note: the Organizer is responsible for its own data processing (e.g., event management, legal obligations).
2. Technical service providers (processors): hosting, maintenance, transactional email, analytics tools, security.
3. Payment providers (e.g., Stripe, PayPal) for payment execution and dispute/chargeback handling.
4. Public authorities: only when required by law or upon a valid lawful request.

We never sell your personal data.

4. International transfers (outside the EU/EEA)

Some providers (e.g., payments, analytics) may process data outside the European Union/European Economic Area. Where required, Afro-Meet implements appropriate safeguards (for example, Standard Contractual Clauses approved by the European Commission) and applies measures designed to protect your data.

5. Cookies and trackers

5.1 What is a cookie?

A cookie is a small text file stored on your device (computer, smartphone) when you browse.

5.2 Types of cookies

Depending on the website configuration, we may use:

• Strictly necessary cookies: essential for operation (session, security, authentication).
• Functional cookies: remember preferences (language, settings).
• Analytics cookies: measure audience and performance (e.g., Google Analytics or equivalent), subject to your consent where required.
• Third-party cookies: set by external services (payments, social networks, embedded content).

5.3 Managing cookies

You can:

• manage your preferences via the cookie banner (if available); and/or
• configure your browser to block/delete cookies.

Blocking certain cookies may affect the Platform's functionality.

6. Data retention

We keep your data only as long as necessary for the purposes described, then delete or anonymize it, unless a longer retention period is required by law.

Indicative periods:

• Order / invoicing data: up to 10 years (legal obligations).
• Account data: for the duration of the account, then deletion/anonymization after a reasonable inactivity period (unless legal obligations apply).
• Support data: time needed to handle the request + limited archiving.
• Technical logs: generally up to 12 months.
• Marketing data (newsletter): until you unsubscribe or withdraw consent.

7. Security

We implement appropriate technical and organizational measures, including:

• encrypted communications (SSL/TLS);
• access controls;
• application and network security measures (firewalls, monitoring);
• internal incident management procedures.

No system is perfectly secure; however, we strive to protect your data to the best of our ability.

8. Third-party services and external links

The Platform may include links to third-party websites or services (e.g., payments, social networks). Afro-Meet is not responsible for their practices. We encourage you to review their privacy policies.

9. Exercising your rights and complaints

To exercise your rights: [email protected].
We may request additional information to verify your identity (to prevent unauthorized disclosure).

You may also lodge a complaint with the competent supervisory authority. In Germany: BfDI.

10. Changes

Afro-Meet may update this Privacy Policy at any time. If we make material changes, we will inform you by email or via a notice on the Platform.