Privacy Policy
Controller
Verantwortlicher im Sinne der DSGVO / Controller under GDPR Art. 4(7):
Jonatan SnydersWeisestr. 58, 12049 Berlin, Germany
E-Mail: hello@switch.berlin
Lawful basis for processing
We process personal data only where a lawful basis under GDPR Art. 6 or Art. 9 applies:
| Purpose | Legal basis |
|---|---|
| Account creation and login | Art. 6(1)(b) — performance of contract |
|
Attendance recording
Attendance on kink/queer events may reveal sexual orientation. Explicit consent is requested before the first attendance record is created. You may withdraw consent at any time from your profile (/me/); withdrawal permanently deletes all attendance records. |
Art. 9(2)(a) — explicit consent |
|
Organizer event publishing
Event listings sourced from public Telegram channels. Berechtigtes Interesse: curating publicly circulated event announcements for a community-serving, searchable directory. Organizer events are already public; curation serves legitimate interest. Organizers may object to inclusion at any time via /takedown/ (Art. 21 GDPR) — no login required. |
Art. 6(1)(f) — legitimate interest (Berechtigtes Interesse) |
| Flag and takedown reports | Art. 6(1)(c) — legal obligation (DSA compliance) |
| Email delivery (transactional) | Art. 6(1)(b) — necessary for the requested service |
Special-category data — attendance (Art. 9 GDPR)
Attendance on kink and queer events constitutes special-category data under Art. 9 GDPR because it may reveal your sexual orientation. We process this data only with your explicit consent (Art. 9(2)(a)). Consent is requested once, before your first attendance record is created.
You may withdraw consent at any time from your profile page (/me/). Withdrawal is immediate and irreversible: all attendance records are permanently deleted (Art. 17 erasure). Withdrawal does not affect your account or other data.
Recipients and processors (Art. 13(1)(e) GDPR)
We share data with the following processors under appropriate data processing agreements (DPAs):
- Hosting — Hetzner Online GmbH, Gunzenhausen, Germany — server infrastructure. EU-based; DPA in place. Your data is processed exclusively within the EU/EEA.
- Email (transactional) — SMTP provider for transactional emails (account notifications). EU or SCC-covered transfer.
- LLM processing — OpenAI (OpenAI OpCo, LLC, USA) and / or Anthropic (Anthropic PBC, USA): large language model (LLM) extraction of event data from Telegram messages. These providers are based in the United States. Transfers are covered by Standard Contractual Clauses (SCC) pursuant to Art. 44ff GDPR. Only public event data (titles, dates, venues) is sent to LLM providers; no user personal data is included.
- Telegram — Telegram Messenger Inc.: ingestion channel for event announcements forwarded by organizers. Telegram is an independent data controller for the source channels; this platform acts as a recipient of forwarded public messages.
- MapLibre / OpenStreetMap — OpenStreetMap Foundation (OSMF): map tile delivery for event location maps. Your IP address is transmitted per map load under the OSM Tile Usage Policy. MapLibre is an open-source rendering library; no data is shared with MapLibre itself.
Retention schedule (Aufbewahrungsdauer)
| Data category | Retention period |
|---|---|
| Attendance records | Until consent is withdrawn; deleted immediately on withdrawal (Art. 17). |
| Ratings and reviews | Until user account is deleted or the review is removed on request. |
| Flag / takedown reports | 3 years (DSA record-keeping obligation). |
| RawMessage (Telegram ingestion) | 90 days after the event date, then purged. |
| EmailFailure | 30 days, then purged. |
| User accounts | Until account deletion is requested by the user or by an administrator. |
| Session cookies | Session duration (browser close) or login expiry. |
Your rights (Betroffenenrechte)
Under GDPR, you have the following rights:
- Access (Art. 15): Request a copy of the personal data we hold about you.
- Rectification (Art. 16): Request correction of inaccurate or incomplete data.
- Erasure (Art. 17): Request deletion of your data ('right to be forgotten').
- Restriction (Art. 18): Request we restrict processing of your data in certain circumstances.
- Portability (Art. 20): Request your data in a structured, machine-readable format.
- Objection (Art. 21): Object to processing based on legitimate interest (Art. 6(1)(f)). For organizers: you have the right to object at any time to the inclusion of your event listings on this platform. Submit a takedown request at /takedown/ — no login required. Objections are processed within 72 hours.
- Withdraw consent (Art. 7(3)): You may withdraw your Art. 9 attendance consent at any time via your profile page (/me/). Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
To exercise rights other than consent withdrawal and organizer objection, contact us at hello@switch.berlin.
Right to lodge a complaint
You have the right to lodge a complaint with the competent supervisory authority (BlnBDI):
Berliner Beauftragte für Datenschutz und Informationsfreiheit (BlnBDI)Alt-Moabit 59–61, 10555 Berlin
E-Mail: mailbox@datenschutz-berlin.de
Tel: +49 30 13889-0
https://www.datenschutz-berlin.de
Automated processing (Art. 13(2)(f) GDPR)
Event data is extracted from Telegram messages using a large language model (LLM). This process is used only for structuring publicly available event information and does not make legally significant decisions about users. A human reviewer approves all published event listings before they are displayed.
No automated decision-making with legal effect (Art. 22 GDPR) is applied to users.
Cookies (TTDSG §25)
This platform uses a single session cookie for the age gate. The age-gate cookie is strictly necessary to provide the service you have explicitly requested — 18+ content access (TTDSG §25(2) Nr. 2). No consent banner is required for this cookie. No tracking, analytics, or advertising cookies are used.
Minimum age (JuSchG)
This platform is restricted to users aged 18 and over (JuSchG §§ 4, 5). By passing the age gate, you confirm you are at least 18 years old. We do not knowingly collect personal data from persons under 18. If we become aware that a minor has registered, the account will be suspended immediately.
Last updated: 2026-04-22