Privacy Policy

Last updated: June 2025 — applies to getguestlist.io and related sign-up and ticket pages.

1. Overview

This policy explains how Avery Digital FlexCo (“we”, “GetGuestlist”) processes personal data when you sign up for an event via GetGuestlist or use our website.

2. Data controller

Avery Digital FlexCo
Lindengasse 16 / 2 / 7
1070 Vienna, Austria
Email: info@reservier.at
VAT ID: ATU83196239

For guestlist sign-ups we also process data on behalf of the respective event organizer. The organizer is responsible for running the event and using guest data in that context.

3. Guestlist sign-up

Data we collect

  • Name (first and last)
  • Email address
  • Phone number (optional)
  • Date of birth (if required by the organizer)
  • Number of tickets / spots
  • Technical data (e.g. IP address, time of sign-up, browser)
  • Payment data for paid lists (processed via Stripe; we do not store full card details)

Purpose and legal basis

  • Guestlist registration and contract performance with the organizer (Art. 6(1)(b) GDPR)
  • Check-in, ticket delivery and event communication (Art. 6(1)(b) GDPR)
  • Optional marketing consent for the organizer (Art. 6(1)(a) GDPR)
  • Platform operation and security (Art. 6(1)(f) GDPR)

Sharing with the organizer

Your sign-up data is provided to the organizer of the respective event for guestlist management, admission and communication.

4. Organizer newsletter

If you opt in, we may share your contact details with the organizer so they can inform you about future events via email or WhatsApp. You may withdraw consent at any time.

5. Retention

We store your data as long as necessary for the guestlist registration, event operation, billing and legal retention obligations. Afterwards data is deleted or anonymized unless legitimate grounds require longer storage. You may request deletion subject to legal obligations.

6. Processors and third parties

  • IONOS SE — hosting (Germany/EU)
  • Cloudflare, Inc. — CDN, security, performance (possibly USA; standard contractual clauses)
  • Stripe Payments Europe, Ltd. — payment processing (payment to organizer via Stripe Connect)
  • Resend, Inc. — email delivery (transactional emails, tickets)
  • PostHog, Inc. — web analytics (prepared; only with consent or legitimate interest)

7. Cookies and technical data

We use technically necessary cookies. Server log files are processed for security and error analysis.

8. Your rights

You have the right to access, rectify, erase, restrict, port data and object. You may withdraw consent at any time. Complaints: Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.

9. Changes

We may update this policy. The current version is available on this page.