eventsplacescommunitiessubmitjoin01

privacy

Last updated: 3 October 2026

This policy explains which personal data we process when you use joinparcferme.co, why we do it, and what rights you have. We keep it short because we collect little: there are no user accounts, no advertising and no tracking for advertising purposes.

1. Who is responsible

Fabian Sasse, Schwindstraße 5, 76135 Karlsruhe, Germany · privacy@joinparcferme.co. Parc Fermé is run privately. There is no data protection officer, as none is required.

2. Visiting the website

The site is hosted on Cloudflare (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). When you open a page, your browser sends technical data that the server needs to deliver it: IP address, date and time, the page requested, referrer, browser and operating system. Cloudflare also uses this data to protect the site against attacks and abuse. Request logs are kept for a few days only and are then deleted automatically.

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is a secure, working website. Cloudflare processes the data on our behalf under a data processing agreement. Cloudflare is certified under the EU-U.S. Data Privacy Framework, which the European Commission recognises as providing an adequate level of protection (Art. 45 GDPR).

Fonts and photos are stored on our own server. Your browser does not connect to Google Fonts, Unsplash or other third parties to load them.

3. Event emails (newsletter)

If you sign up for event emails, we store your email address, the regions, places, communities or events you chose (for an area: a city and a radius, never your address), the time of sign-up and the time you confirmed. We use double opt-in: you only receive emails once you have clicked the link in our confirmation email. Every email contains a link to change your preferences or unsubscribe in one click.

Legal basis: your consent, Art. 6(1)(a) GDPR. You can withdraw it at any time with effect for the future. When you unsubscribe, we delete your email address and preferences. We only keep an anonymous count of unsubscribes. We never share or sell your address.

Emails are sent through Resend (Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA) as our processor, from its EU region (Ireland). Data may also be processed in the USA. Resend is certified under the EU-U.S. Data Privacy Framework and has also agreed to the EU Standard Contractual Clauses. We don't track whether you open our emails or click links in them. If an email can't be delivered permanently or is reported as spam, Resend tells us and we delete the address.

4. Submitting an event, a place or a community

When you submit an event, a place or a community, we store the details you enter. That can include a photo and an optional contact email, which is never published. We use the details to review the submission and, if we accept it, to publish it. We use the contact email only to ask about the submission. Our operator also receives a notification email with the submission.

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is checking and publishing listings that visitors send us. Unpublished submissions and contact emails are deleted no later than six months after the review.

5. Spam protection (Cloudflare Turnstile)

Our forms are protected by Cloudflare Turnstile, which checks whether a human or a bot is submitting the form. For this, Turnstile processes technical information about your browser and device, including your IP address. It does not use the data for advertising. Legal basis: Art. 6(1)(f) GDPR; our interest is to prevent spam and abuse. Accessing information on your device for this purpose is strictly necessary for the service you requested (§ 25(2) no. 2 TDDDG). Provider and data transfer: see section 2.

6. Analytics and error tracking (PostHog)

To understand how the site is used and to find technical errors, we use PostHog (PostHog, Inc., 2261 Market Street Suite 4008, San Francisco, CA 94114, USA) with data hosted in the EU (Frankfurt, Germany). We record which pages are viewed, a few key actions (for example starting the sign-up form or opening an event), the referring website, the type of browser and device, page load performance and technical error reports. Links in our emails that contain a personal key are shortened before anything is sent, so PostHog never receives them. The requests go through our own domain to PostHog. We don't use session recordings and don't build user profiles.

To count visits without cookies, PostHog uses your IP address and your browser's identification string to calculate a random identifier that changes every day. The IP address is then discarded and not stored. To see where our visitors come from, our server adds the country and region (for example Bavaria) that Cloudflare derives from your IP address; we don't pass on the city or the IP address itself.

Nothing is stored on your device, and because the identifier changes daily, you are not recognised on a later day. Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is improving the site and fixing errors.

Errors in our own server code are also reported to PostHog, without any information about you. PostHog processes the data on our behalf under a data processing agreement. Analytics data is deleted after at most two years.

7. Contacting us by email

If you write to one of our addresses (for example hello@ or privacy@), we process your message and email address to answer you. Incoming emails are received by Cloudflare Email Routing and forwarded to a mailbox hosted by Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Legal basis: Art. 6(1)(f) GDPR (answering your enquiry), or Art. 6(1)(b) GDPR if it concerns a request you made. We delete the correspondence when it is no longer needed, unless we are legally required to keep it.

8. Calendar files

When you download a calendar file (.ics) or subscribe to a calendar feed, the file is generated on our server. We do not store who downloaded it. Your calendar app may fetch a subscribed feed regularly; these requests are handled like page visits (section 2).

9. Links to other sites

We link to organisers' websites and to our Instagram profile. These links open in a new tab, and no data is sent to those sites until you click. The share buttons are plain links (WhatsApp, email) or your device's own share menu; nothing is sent to a social network unless you choose to share. Once you are on another site, its own privacy policy applies. We do not embed social media plugins.

10. Your rights

You have the right to:

  • access the personal data we hold about you (Art. 15 GDPR),
  • have it corrected (Art. 16) or deleted (Art. 17),
  • restrict processing (Art. 18) and receive your data in a portable format (Art. 20),
  • object at any time to processing based on Art. 6(1)(f) GDPR, on grounds relating to your particular situation (Art. 21),
  • withdraw consent at any time, with effect for the future (Art. 7(3)).

Write to privacy@joinparcferme.co. You can also lodge a complaint with a supervisory authority, for example the one responsible for us: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, baden-wuerttemberg.datenschutz.de (opens in a new tab).

11. No obligation, no automated decisions

You don't have to give us any personal data to browse the site. We only need your email address if you want event emails. We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

12. Changes

We update this policy when our services or the law change. The current version is always available on this page.