Controller: Semih Sanuk, Hermann-Hesse-Str. 9, 72469 Meßstetten, Deutschland · support@funtastic.place
1. What FUNtastic processes. Account (e-mail, name, optional avatar), preferences, favourites, plans, bookings, FUNpoints, group/chat content, support requests. Legal basis: contract (Art. 6(1)(b) GDPR) or consent (Art. 6(1)(a)).
2. Location. Your location is used only with your permission (distances, routes, check-in) and is not stored as a history. Alternatively you can enter an address or use the city centre.
2a. Receipt proof (optional). If you photograph a receipt after checking in, the photo is sent encrypted to our server and to Cloudflare Workers AI for automatic text recognition (processor). Only the business name, date and total are read; the photo is not stored. We store the result and the amount for your visit to credit FUNpoints and to bill the partner venue for the number of guests who came via FUNtastic (without your name). Legal basis: Art. 6(1)(b) GDPR.
3. Processors. Hosting/database/sign-in: Supabase (EU region configurable). Payments: Stripe Payments Europe Ltd. — FUNtastic never sees card data. Maps/routes: OpenStreetMap services (OSRM, Nominatim). Weather: Open-Meteo. Timetables: DB data via transport.rest. Web hosting: the operator's static web host (see legal notice). Optional sign-in via Google or Apple.
4. Usage statistics. Only with your consent (Settings). Events such as “place viewed”, “route opened” or “plan built” are recorded without name, e-mail or precise location. Partners (e.g. venues, organisers or transport associations) only see aggregated figures such as “views per month” – never data about individuals. Withdraw anytime in Settings.
5. Your rights. Access, rectification, erasure, restriction, data portability (Art. 15–20 GDPR) and the right to lodge a complaint with a supervisory authority. Export and deletion are available in the app under Settings → Privacy & data.
6. Retention. Account data until account deletion; booking/payment records per commercial and tax retention periods; support requests until resolved plus 12 months.