Privacy and cookies

1. Controller and contact

Club Management (CM) is operated by EU CONTACT AG LTD, a company registered in England and Wales. The club using CM is responsible for the data about its operations (engagements, shifts, attendance, fees, commissions and revenue).

Questions about data protection and exercising your rights: [email protected].

2. What data we process

• Account: name, e-mail or username, role in the club and permissions. Passwords are stored only in encrypted form (hash).
• Club operations: engagements, shift schedule, attendance records, fees, commissions, payouts and their confirmations.
• QR attendance: date and time of arrival and departure, verification result, distance from the club and measurement accuracy. We do not store the phone's location itself.
• Technical data: IP address, login time, failed login attempts and change history (who changed a record and when).

3. Purpose and legal basis

• Performance of a contract (Art. 6(1)(b) GDPR): records of engagements, shifts, attendance, fees and commissions.
• Legal obligation (Art. 6(1)(c) GDPR): accounting and tax records.
• Legitimate interest (Art. 6(1)(f) GDPR): account security, prevention of misuse and accuracy of attendance.

4. Who we share data with

Data are visible only to authorised club users according to their role and to the agency EU CONTACT AG LTD. Artists see only their own records.

We are technically supported by our hosting provider and Cloudflare (website protection and acceleration), which process data only on our instructions. We convert the club address into coordinates using OpenStreetMap (Nominatim) – we do not send it any personal data.

We do not sell data and do not use it for advertising or profiling.

5. How long we keep data

For the duration of the cooperation with the club and then for as long as necessary for settlement, legal obligations (especially accounting) and resolving any disputes. Records of failed logins are deleted regularly.

6. Your rights

You have the right of access to your data, rectification, erasure, restriction of processing, data portability and the right to object. Write to us at [email protected]; we will reply without undue delay, at the latest within one month.

If you believe that we process data in breach of the law, you can lodge a complaint with the supervisory authority in the country where you live or work (in the Czech Republic the Office for Personal Data Protection, in the United Kingdom the ICO).

7. Cookies and browser storage

Club Management uses only cookies and storage necessary for login, security and your settings. We do not use analytics, advertising or tracking cookies and do not load third-party content, so we do not ask for consent.

You can delete cookies at any time in your browser settings; you will then be logged out and your settings will return to the defaults.

8. Device location for QR attendance

• Controller: the operator of Club Management, EU CONTACT AG LTD, and the club where you confirm attendance.
• We process: your account, the club, the date and time of arrival and departure, the verification result and the record identifier.
• Device location: when scanning, the browser determines your phone's location once, only to verify that you are at the club. We do not store the location – only the distance from the club and the measurement accuracy are saved. We do not send the location to third parties and do not track it outside the scan.
• Purpose and legal basis: recording shifts worked to perform the engagement contract and the club's legitimate interest in accurate attendance.
• Retention: for the duration of the engagement and then for the period needed for settlement and legal obligations.
• Your rights: access to your data, rectification, restriction of processing and objection. You can see your records on the My shifts and attendance page; please send any questions to the agency.