Privacy Policy

The controller responsible for data processing is NeoxEntertainment GmbH, Am Jägerstuhl 10, 37574 Einbeck, Germany. You can reach our data protection contact at fabian@neoxentertainment.com with the subject "Data protection".

When using PLANITX, we process the following categories of personal data:

• Account data: name, email address, phone number and role of the Customer's authorised users (dispatchers, administrators).
• Staff and crew data: name, contact details, qualifications, certificates, availability, hourly rates and working times of employees and freelancers managed by the Customer.
• Applicant and invitation data: email addresses and availability details of people the Customer invites to shifts.
• Accreditation data: name, photo, role/legal basis (e.g. press, crew, contractor) and access zone of applicants, as well as scan and access logs.
• Event and financial data: visitor numbers, revenue and costs, and billing data insofar as it relates to individuals.
• Usage data: IP address, browser and device data, timestamps and log files used to provide and secure the service.

• Performance of a contract (Art. 6(1)(b) GDPR): creating and managing accounts, shifts, accreditations and billing in order to provide the Platform to the Customer.
• Legal obligation (Art. 6(1)(c) GDPR): retention of records and access logs where legally required.
• Legitimate interests (Art. 6(1)(f) GDPR): ensuring the operation, security and improvement of the Platform, and protection against misuse.
• Consent (Art. 6(1)(a) GDPR): e.g. for photos on accreditation requests or receiving invitations, where obtained.

Data is transferred to processors as part of the technical provision of the service, in particular to the hosting and infrastructure provider operating the Platform. Personal data is processed exclusively in the European Union or the European Economic Area. Where a transfer to third countries takes place, we ensure an adequate level of protection through EU standard contractual clauses.

Data is not passed on to unrelated third parties unless we are legally obliged to do so.

We process personal data only for as long as necessary for the stated purposes. Account data is deleted after the end of the usage relationship, unless statutory retention obligations apply (e.g. ten years under commercial and tax law). Crew and invitation data is deleted as soon as it is no longer needed for the respective shift and billing planning.

PLANITX uses technically necessary storage (e.g. the login session) as well as local storage of settings and offline data in the crew app so the service also works without a network connection. No tracking or advertising cookies are used.

You have the right of access, rectification, erasure, restriction of processing, data portability and objection. You may also withdraw any consent given at any time with effect for the future.

Right to lodge a complaint: you have the right to complain to a data protection supervisory authority. The competent authority is the one at our registered office.

We implement technical and organisational measures to protect personal data against unauthorised access, loss and manipulation. These include encryption of transmission (TLS), access control, separation of tenants and regular security reviews.

People who apply for a pass via the public accreditation form submit their data directly to the respective event organiser. PLANITX processes this data as a technical service provider on behalf of the Customer. The controller for accreditation data is the respective Customer as the event organiser.

PLANITX is not intended for use by persons under the age of 16. The Customer is responsible for deploying minor staff at events and must obtain the required legal prerequisites.

We reserve the right to amend this privacy policy to reflect changed legal or technical circumstances. The current version is always available on this page.