How your personal information is used

1. Data controller and contact

The data controller is Lorenzzo Alessandro Ming KLEIN, a French sole proprietor (EI), SIREN 932 693 310, at 48 rue du Bourg Dessus, 39140 Arlay, France.

For privacy matters, email lozo71@hotmail.fr or call +33 7 82 89 48 36.

2. Accounts, reservations and purposes

To create and manage accounts, we process a verified email address, name, mobile number, preferred language, adult declaration, and the version and time of the privacy notice reviewed.

To complete reservations, welcome guests, handle cancellations, event changes and necessary notices, we process the event, seat quantity, reservation code, status, the event information recorded at booking, and necessary attendance or reception incidents.

The site may also process marketing subscription status and consent evidence, personal-data rights requests, email-delivery logs, survey responses when a survey is used, limited journey measurements kept for no more than 30 days, and technical logs needed for security and audit. These are used respectively to manage event news, answer rights requests, confirm delivery, understand feedback, improve the journey and protect the service. Journey measurements do not directly record IP addresses, browser user-agent strings or device fingerprints.

This processing is necessary to provide the service you request, perform the reservation, and protect the site and its necessary operations. Information may also be kept where required by law.

3. Adult declaration and browser storage

The site stores the browser adult declaration for 30 days, language preference for one year, and short-lived technical information required for sign-in and reservations.

The site does not request a date of birth, identity document or document copy, and does not use third-party advertising tracking cookies.

4. Email and event news

Sign-in, reservation confirmation, changes, cancellation and other necessary service emails do not require marketing consent.

Event news is sent only after explicit consent and email confirmation. You can unsubscribe at any time without affecting your account, reservations or necessary service emails.

5. Limited venue and host access

To welcome guests at an assigned event, an authorised venue or host can access only the name, mobile number, reservation code and seat quantity for the necessary period.

They cannot access email addresses, marketing choices or other-event history. Information leaves the host interface when access ends or is revoked.

6. No online payment

A native Gendeweidao reservation does not collect card details, a deposit or an online payment. Participants pay the venue directly as stated on the event page.

Externally ticketed events identify their platform. That platform applies its own payment, cancellation, refund and privacy rules.

7. Technical providers and international processing

The Administration uses Supabase journey statistics and currently active reservations, excluding rehearsal data before the public reporting start. Google Search Console provides aggregated search impressions, clicks and queries without installing tracking code on this site. Vercel Web Analytics measures public page views, visitors and referring websites without analytics cookies. We exclude account, administration, reservation and private-link pages and remove URL parameters and fragments before sending page views. We do not send names, email addresses, reservation codes or reservation contents.

Vercel provides hosting and website execution, Supabase provides accounts and the database, and Brevo sends email. The main website and database services use the Tokyo region, Brevo's email service is in the European Union, and event venues are in Taiwan.

These providers process only the information needed for their function. International processing relies on their data-protection terms, subprocessor controls and applicable contractual safeguards.

8. Retention

Account information is kept until account closure. Reservations and necessary operational records are kept while needed to provide the service, handle disputes and comply with applicable law, then deleted or anonymised.

Marketing consent is kept until you unsubscribe, with necessary evidence of consent or objection retained afterwards. Raw first-party journey events are kept for no more than 30 days, then deleted or irreversibly aggregated. Short-lived sign-in links and security tokens expire after their purpose ends.

Email-delivery, security and audit logs are kept only while needed to operate or protect the service and preserve necessary evidence.

9. Your rights

Depending on the applicable law, you may request access, a copy, correction, deletion, restriction or objection, withdraw consent, and request portability where available. Withdrawing consent does not affect processing that was lawful before withdrawal.

We may verify identity proportionately. If information must remain for a legal obligation or dispute, the response will explain why. You may also complain to the French CNIL or the competent authority in Taiwan.

10. External services

After opening Instagram, an external ticketing platform or another external site, that service processes information under its own privacy terms. Do not send reservation, account or privacy-request information through social-media messages.