Datenschutzrichtlinie

Last updated: 2026-03-31

1.Einleitung

Gigcoms betreibt gigcoms.com. Diese Datenschutzrichtlinie erklärt, wie wir Ihre personenbezogenen Daten erfassen, nutzen und schützen, wenn Sie unsere Plattform zur Verwaltung von Live-Musik-Buchungen und Kommunikation verwenden.

Data Controller: GigComs ApS, Copenhagen, Denmark. Registered under Danish law. Contact: privacy@gigcoms.com

2.Welche Daten wir erfassen

Account data: Kontoinformationen: E-Mail-Adresse, Name und Authentifizierungsdaten bei der Registrierung
Profile data: Profildaten: Artist/Booker-Profil, Benutzername, Bio, Avatar, Zeitzone und Spracheinstellungen
Booking data: Buchungsdaten: Veranstaltungsdetails, Termine, Gagen, Verträge, Rechnungen und zugehörige Dokumente
Messages: Nachrichten: Unterhaltungen über unsere Plattform, einschließlich Nachrichten über verbundene Kanäle (WhatsApp, E-Mail)
Usage data: Nutzungsdaten: besuchte Seiten, genutzte Funktionen und verarbeitete KI-Befehle
Payment data: When you process payments through Stripe, we store transaction references and amounts. We never store card numbers — Stripe handles all sensitive payment data.
Device data: IP address, browser type, operating system, and device identifiers for security and analytics.

3.Wie wir Ihre Daten nutzen

Purpose	Legal Basis (GDPR Art. 6)
Bereitstellung und Pflege unseres Buchungsverwaltungsdienstes	Contract performance (Art. 6(1)(b))
Kommunikation zwischen Artists, Bookern und Kunden über verbundene Kanäle ermöglichen	Contract performance (Art. 6(1)(b))
Verarbeitung Ihrer Anfragen durch unseren KI-Assistenten zur Erstellung von Buchungen, Verträgen und Kalenderverwaltung	Contract performance (Art. 6(1)(b))
Send transactional emails (booking confirmations, contract notifications, invoice reminders)	Contract performance (Art. 6(1)(b))
Analytics & product improvement	Consent (Art. 6(1)(a))
Marketing emails & newsletters	Consent (Art. 6(1)(a))
Prevent fraud, abuse, and unauthorized access	Legitimate interest (Art. 6(1)(f))
Tax record retention (7 years)	Legal obligation (Art. 6(1)(c))

5.Drittanbieter-Dienste

Wir nutzen folgende Dienste für den Betrieb von Gigcoms:

Service	Purpose	Data	Region
Supabase	Datenbank, Authentifizierung und Dateispeicherung (EU-Region)	All account & booking data	EU (Frankfurt)
Anthropic (Claude)	KI-Verarbeitung für Chat-Assistent und automatische Antworten	Chat messages, booking context	US (with EU DPA)
Vercel	Hosting und Content-Delivery	Request logs, analytics	Global CDN (EU primary)
Stripe	Payment processing for deposits and invoices	Transaction amounts, customer email	EU / US
Resend	Transaktionale E-Mail-Zustellung	Email addresses, notification content	US (with EU DPA)
WhatsApp / Meta	Messaging-Integration bei Verbindung Ihres WhatsApp Business-Kontos	Messages via connected accounts	EU / US

6.Cookies & Analytics

GigComs uses minimal cookies and analytics:

Essential cookies: Authentication session cookies (Supabase Auth). Required for the service to function.
Analytics: Vercel Analytics and Google Analytics (anonymized) to understand usage patterns and improve the product.
No advertising cookies: We do not use tracking cookies for advertising or retargeting.

You can disable non-essential cookies in your browser settings. Disabling essential cookies will prevent you from using the service.

7.Datenspeicherung

Wir speichern Ihre Daten, solange Ihr Konto aktiv ist. Sie können jederzeit die Löschung Ihres Kontos und der zugehörigen Daten beantragen. Buchungsunterlagen können aus rechtlichen und steuerlichen Gründen aufbewahrt werden.

Active accounts: Data retained for the lifetime of your account.
Deleted accounts: Personal data removed within 30 days. Booking records retained for 7 years for tax/legal compliance.
Chat history: AI conversation logs retained for 90 days, then anonymized.

8.Ihre Rechte

Under GDPR, you have the right to access, correct, delete, and export your data at any time. Email privacy@gigcoms.com or use the settings page to manage your data.

Access: Zugang zu Ihren personenbezogenen Daten
Rectification: Berichtigung unrichtiger Daten
Erasure: Löschung Ihrer Daten
Portability: Export Ihrer Daten in einem portablen Format
Withdraw consent: Widerruf der Einwilligung zur Datenverarbeitung jederzeit
Object: You may object to processing based on legitimate interests.
Restriction: You may request we restrict processing while a dispute is resolved.

9.International Data Transfers

Some of our processors are located outside the EU/EEA. We ensure appropriate safeguards are in place:

EU Standard Contractual Clauses (SCCs) with US-based processors
EU-US Data Privacy Framework certification where applicable
Data Processing Agreements (DPAs) with all sub-processors

10.Children's Privacy

GigComs is not intended for users under 16 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

11.AI & Automated Decision-Making

GigComs uses AI (powered by Anthropic Claude) to assist with booking management:

AI chat assistant: Processes your natural language requests to create bookings, contracts, and manage your calendar.
Auto-negotiation: If enabled, AI may respond to booking inquiries based on your configured rules. You can review and approve all AI responses before they are sent.
No profiling: We do not use AI to make automated decisions that produce legal effects or significantly affect you.

You can disable AI auto-responses in your agent settings at any time.

12.Sicherheit

Wir nutzen branchenübliche Sicherheitsmaßnahmen wie Verschlüsselung bei der Übertragung (TLS), verschlüsselte Datenbankverbindungen, Row-Level-Security-Richtlinien und gehashte API-Schlüssel zum Schutz Ihrer Daten.

TLS encryption for all data in transit
Encrypted database connections with row-level security
Hashed API keys and secure session management
Regular security reviews and dependency updates

13.Data Breach Notification

In the event of a data breach that poses a risk to your rights, we will:

Notify the Danish Data Protection Agency (Datatilsynet) within 72 hours
Notify affected users without undue delay via email
Document the breach, its effects, and remedial actions taken

14.Complaints

If you are unsatisfied with how we handle your data, you have the right to lodge a complaint with:

Datatilsynet (Danish Data Protection Agency)
Carl Jacobsens Vej 35, 2500 Valby, Denmark
dt@datatilsynet.dk · +45 33 19 32 00

Questions? Contact us at privacy@gigcoms.com