Privacy Policy
1. Data Controller
The data controller responsible for processing your personal data is:
GB7 Holding
[Street Address]
[ZIP Code] [City], Germany
Email: privacy@gb7social.com
For all privacy-related inquiries, please contact us at the address above or via privacy@gb7social.com.
2. Data We Collect
2.1 Information You Provide
- Account data: name, username, email address, password (stored as a hash), date of birth, optional profile photo, bio, and city.
- Profile content: posts (text, images, videos, audio), comments, reactions, travel plans, events, and stories you create.
- Communications: messages you send to other users and reports you file.
- Payment data: if applicable, processed securely by our payment provider — we do not store card details.
2.2 Information Collected Automatically
- Usage data: pages visited, features used, actions taken, timestamps.
- Device & browser data: IP address, browser type, operating system, device type.
- Location data: city-level location only — we do not store precise GPS coordinates. Location is only shared on the map when you explicitly enable map visibility.
- Cookies & local storage: see our Cookie Policy for details.
3. How We Use Your Data
We process your personal data for the following purposes:
- Providing the service: to create and manage your account, deliver features, and facilitate communication between users. Legal basis: Art. 6(1)(b) GDPR — performance of a contract.
- Safety & security: to detect fraud, prevent abuse, and enforce our Terms of Service. Legal basis: Art. 6(1)(f) GDPR — legitimate interest.
- Service improvement: to analyze usage patterns and improve platform features. Legal basis: Art. 6(1)(f) GDPR — legitimate interest.
- Legal compliance: to comply with applicable laws and respond to lawful requests from authorities. Legal basis: Art. 6(1)(c) GDPR — legal obligation.
- Communications: to send you service-related notifications, security alerts, and — where you have consented — marketing communications. Legal basis: Art. 6(1)(a) or (b) GDPR.
4. Data Retention
We retain your personal data for as long as your account is active or as needed to provide you with the service. After you delete your account:
- Public content may take up to 30 days to be removed from all servers and caches.
- Messages are deleted when both conversation participants have left.
- Backup copies may be retained for up to 90 days for system reliability purposes, after which they are permanently deleted.
- We may retain certain data longer if required by law or to resolve disputes.
5. Data Sharing
We do not sell your personal data. We may share your data with:
- Other users: profile information, posts, and travel plans you choose to make public or share.
- Service providers: hosting (IONOS, Germany), email delivery, customer support — bound by data processing agreements.
- Legal authorities: if required by law, court order, or to protect the rights and safety of users or the public.
- Business transfers: in connection with a merger, acquisition, or asset sale, subject to the acquirer honoring this Privacy Policy.
All third-party processors are contractually bound to process your data only as instructed by us and in compliance with GDPR.
6. International Data Transfers
GB7 Social is hosted in the European Union (Germany). We do not transfer your personal data outside the EEA unless adequate safeguards are in place (e.g., Standard Contractual Clauses or an adequacy decision by the European Commission).
7. Your Rights Under GDPR
As a user in the European Economic Area, you have the following rights regarding your personal data:
- Right of access (Art. 15): request a copy of the personal data we hold about you.
- Right to rectification (Art. 16): correct inaccurate or incomplete data. You can update most data directly in your profile settings.
- Right to erasure / "right to be forgotten" (Art. 17): request deletion of your personal data where there is no overriding legal basis for us to retain it. You can delete your account at any time from Settings > Account.
- Right to restriction of processing (Art. 18): request that we restrict processing of your data under certain circumstances.
- Right to data portability (Art. 20): receive your personal data in a structured, machine-readable format.
- Right to object (Art. 21): object to processing based on legitimate interest or for direct marketing purposes.
- Right to withdraw consent (Art. 7(3)): where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
- Right to lodge a complaint (Art. 77): you have the right to complain to a supervisory authority. In Germany: Die Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI), www.bfdi.bund.de. You may also contact the supervisory authority in your EU member state of habitual residence.
To exercise any of these rights, contact us at privacy@gb7social.com. We will respond within 30 days.
8. Cookies & Tracking
We use essential cookies to operate the Platform (session management, authentication). We do not use advertising cookies or cross-site tracking. For full details, see our Cookie Policy.
9. Children's Privacy
GB7 Social is not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe a child under 16 has created an account, please contact us at privacy@gb7social.com and we will delete the account promptly.
10. Third-Party Links & Integrations
The Platform integrates with third-party services such as Spotify, Apple Music, YouTube, and Giphy for content embedding. When you interact with embedded content, the third party may collect data according to their own privacy policies. We are not responsible for third-party data practices.
11. Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices or applicable law. We will notify you of material changes by email or in-app notification at least 14 days in advance. The updated policy will be effective from the date noted at the top of this page.
12. Contact
For any questions or concerns about this Privacy Policy or your personal data, please contact:
GB7 Holding — Data Protection
Email: privacy@gb7social.com
Postal: See Imprint for our full address.