Privacy policy
Draft for review: this text must be checked and completed before it can be considered final.
Who is responsible?
The controller for Holadoor account data is [To be completed: name or company name, address]. Contact: contact@holadoor.com.
For the attendee lists an organiser imports into Holadoor, the organiser is the controller and Holadoor acts as a processor on their behalf. [To be checked: draft the processing terms required by Article 28 of the GDPR.]
What data?
- Organiser accounts: name, email address, organisation name, country, language and time zone. Passwords are stored hashed, never in plain text.
- Attendees (imported by the organiser or signed up through their form): name, email address, phone number if provided, columns chosen by the organiser, ticket email status and check-in time.
- holadoor.com website: no advertising cookies and no audience measurement tools. The application stores your session and language in your browser so you don’t have to log in again.
Sending from your Gmail
If you connect your Gmail or Google Workspace account, Holadoor uses the Google gmail.send permission only to send, on your behalf and when you ask it to, the tickets and notices for your events to your guests. Holadoor does not read, list, modify or delete your emails. The permission is stored encrypted and you can remove it at any time from Holadoor (Account → Email sending → Disconnect) or from your Google account. Holadoor’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Why?
- To provide the service: creating and sending tickets, checking people in and producing the attendance list.
- To manage your account and send you necessary messages (email verification, password reset, team invitations, notices about your sending).
- To send you Holadoor news, only if you agreed to this when signing up.
Who with?
- Render: hosting of the application and database. [To be completed: hosting region.]
- Google: sending tickets from the Gmail or Google Workspace account you connect.
- Amazon Web Services (SES): system emails (sign-up, password, notices), from no-responder@holadoor.com. [To be completed: region.] Resend (European Union, Ireland) may be used as a fallback.
Holadoor does not sell any data or use it for advertising.
How long?
[To be completed: retention period for inactive accounts, past events and attendee lists, and the deletion procedure.]
Your rights
You have the right of access, rectification, erasure, restriction, objection and portability. Write to contact@holadoor.com. If you are an attendee, contact the event organiser first. You can also lodge a complaint with your data protection authority (in the UK, the ICO).