Privacy Policy
Last updated: 15 Feb 2026
Data Protection at a Glance
General Information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you.
Data Processing on This Website
Data processing on this website is carried out by the website operator:
Hosting and Content Delivery
Vercel
We host our website with Vercel. The provider is Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA.
Vercel is a tool for deploying and hosting websites. When you visit our website, your data is processed on Vercel servers. This may include IP addresses and server log files. Vercel is certified under the EU-US Data Privacy Framework.
For more details, see the Vercel privacy policy: https://vercel.com/legal/privacy-policy
Vercel Analytics & Speed Insights
We use Vercel Analytics and Speed Insights to analyze website performance and user behavior. These services collect anonymized data such as page views, load times, and general usage patterns. No personally identifiable information is collected. The data is processed solely to improve the user experience and website performance.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in analyzing and improving our website).
Cloudflare R2 (Storage & CDN)
We use services from Cloudflare Inc. (101 Townsend St., San Francisco, CA 94107, USA) to store and deliver user-uploaded content (e.g., profile pictures, documents, form attachments). Storage takes place in a bucket within the European Union. Cloudflare also serves as a Content Delivery Network (CDN) to optimize load times of content worldwide. Cloudflare is certified under the EU-US Data Privacy Framework.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and efficient delivery of our services).
Registration and Authentication
Supabase (Database & Auth)
For managing user accounts and storing data, we use Supabase. The database is hosted in the EU. The provider is Copple Software Inc. (Supabase), 970 Summer St, Stamford, CT 06905, USA. We have concluded Standard Contractual Clauses with the provider.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract).
Social Login (Google & Apple)
You can register with us via Google or Apple.
- Google: Provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
- Apple: Provider is Apple Distribution International Ltd., Hollyhill Industrial Estate, Cork, Ireland.
When you register, we receive your name, email address, and possibly your profile picture from these providers.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract).
Payment Processing
Stripe
We use Stripe for payment processing. The provider is Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland.
- For business customers: When you subscribe, your payment data is transmitted to Stripe.
- For event participants: When you buy a ticket, payment is processed via Stripe Standard directly to the event organizer (business customer). FireVue only receives confirmation information (payment ID, amount, timestamp) but does not store credit card data.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract).
For more details, see the Stripe privacy policy: https://stripe.com/privacy
Email Communication
System emails (e.g., password reset, confirmations) are sent via the integrated SMTP services of Vercel and Supabase. Your email address and message content are processed to ensure delivery.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract).
Cookies and Technically Necessary Data
We do not use marketing or tracking cookies. We only use technically necessary cookies to ensure the functionality of the platform (e.g., login session, language settings).
Legal basis: § 25(2) TTDSG (German Telecommunications-Telemedia Data Protection Act).
Data Processing Agreement (Important for Business Customers)
FireVue acts as a data processor for event participants. Business customers using our platform to collect participant data are "controllers" within the meaning of the GDPR.
We have created a specific Data Processing Agreement (DPA) for this purpose, which can be viewed at /dpa and is an integral part of the contractual relationship.
Your Rights
You have the right at any time to:
- Access information about your stored data
- Rectify or delete your data
- Restrict processing
- Data portability
- Lodge a complaint with a supervisory authority
To exercise these rights, please contact:
Data Retention
We store your personal data only as long as necessary to fulfill the purposes described in this privacy policy or as required by law. Event data is retained for the duration of the event and for legal retention periods (typically 10 years for accounting purposes).
Data Security
We use appropriate technical and organizational measures to protect your data against accidental or intentional manipulation, loss, destruction, or access by unauthorized persons. Our security measures are continuously improved in line with technological developments.
