The Town-Crier Collective GmbH
Privacy Policy
Last updated: August 2026
1. Who We Are
This website is operated by The Town-Crier Collective GmbH ("TTC", "we", "us"). We are the data controller for all personal data collected through thetowncriercollective.com.
Contact for data protection matters: comms@thetowncriercollective.com — please use the subject line Data Request.
2. What Data We Collect and Why
Account data
When you create an account we collect your email address and, optionally, your name. We use this to provide the service, send transactional emails (booking confirmations, ticket receipts, membership updates), and manage your subscription.
Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
Payment data
Payments are processed by Stripe. We do not store your card number, CVC, or full card details — Stripe handles and stores these on our behalf. We retain a record of transaction amounts, dates, and Stripe payment IDs to fulfil orders and manage disputes.
Legal basis: performance of a contract (Art. 6(1)(b) GDPR); legal obligation for record-keeping (Art. 6(1)(c) GDPR).
Streaming and playback data
Video streams are delivered by Mux. Mux may collect technical data such as your IP address, device type, and playback events (play, pause, buffering) to deliver and monitor stream quality. See Mux's Privacy Policy.
Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
Studio bookings and contact forms
When you book studio time or submit a contact form, we collect the name, email address, and any message or booking details you provide. We use this only to respond to your enquiry or fulfil the booking.
Legal basis: legitimate interests in responding to enquiries (Art. 6(1)(f) GDPR); or performance of a contract where a booking is involved (Art. 6(1)(b) GDPR).
Server logs
Our hosting infrastructure (Vercel) logs standard HTTP request data including IP address, browser type, referring URL, and pages visited. These logs are retained for up to 30 days for security and debugging.
Legal basis: legitimate interests in maintaining security (Art. 6(1)(f) GDPR).
3. Third-Party Processors
We share your data only with the processors listed below, each bound by a Data Processing Agreement. Where processors are based outside the EU/EEA, transfers are covered by the EU Standard Contractual Clauses (SCCs).
| Processor | Purpose | Location |
|---|---|---|
| Supabase | Authentication, database | US (SCCs) |
| Stripe | Payment processing | US (SCCs) |
| Mux | Video streaming | US (SCCs) |
| Resend | Transactional email | US (SCCs) |
| Vercel | Hosting and CDN | US (SCCs) |
4. How Long We Keep Your Data
Account data: retained while your account is active, plus 30 days after deletion to allow for recovery.
Payment records: 10 years, to comply with German commercial law (HGB §257).
Booking and contact form data: 3 years from the date of the booking or enquiry.
Server logs: up to 30 days.
5. Your Rights Under the GDPR
You have the following rights regarding your personal data. To exercise any of them, email comms@thetowncriercollective.com with the subject line Data Request. We will respond within 30 days.
Access (Art. 15): You can request a copy of the personal data we hold about you.
Rectification (Art. 16): You can ask us to correct inaccurate or incomplete data.
Erasure (Art. 17): You can ask us to delete your data where there is no overriding legal basis to retain it.
Restriction (Art. 18): You can ask us to restrict processing while a dispute about accuracy or lawfulness is resolved.
Data portability (Art. 20): You can request your data in a structured, machine-readable format.
Object (Art. 21): You can object to processing based on legitimate interests. We will stop unless we can demonstrate compelling legitimate grounds.
Withdraw consent (Art. 7): Where processing is based on consent (e.g. analytics cookies), you can withdraw at any time without affecting the lawfulness of prior processing.
You also have the right to lodge a complaint with your national data protection authority. In Germany, this is the relevant Landesbeauftragte für den Datenschutz.
6. Changes to This Policy
We may update this privacy policy from time to time. Material changes will be notified by email to registered users and by a notice on this page. The date at the top of this page reflects the most recent update.