GDPR Policy

Last updated:

This GDPR Policy explains how ShowHub complies with the General Data Protection Regulation (EU) 2016/679.

1. Data Controller

ShowHub is the data controller for personal information collected through our platform.

2. Legal Basis for Processing

We process your personal data based on:

• Consent: When you register an account or use our services
• Contract: Processing necessary to provide our services to you
• Legitimate Interest: Improving our services and user experience

3. Your Rights Under GDPR

Right to Access (Article 15)

You have the right to request a copy of the personal data we hold about you.

Right to Rectification (Article 16)

You can request correction of inaccurate personal data.

Right to Erasure (Article 17)

Also known as "right to be forgotten", you can request deletion of your personal data.

Right to Restriction (Article 18)

You can request that we restrict processing of your data.

Right to Data Portability (Article 20)

You can request your data in a structured, machine-readable format.

Right to Object (Article 21)

You can object to processing based on legitimate interests.

4. Data We Collect

• Account information (name, email)
• Profile information you provide
• Content you create (shows, announcements, media)
• Usage data and analytics

5. Purpose of Processing

We process your data to:

• Provide our services
• Communicate with you
• Improve our platform
• Comply with legal obligations

6. Data Retention

We retain personal data only as long as necessary:

• Account data: While your account is active
• Activity data: Up to 2 years after last activity
• Legal requirements: As long as required by law

7. Data Security

We implement appropriate technical and organizational measures to protect your data:

• Encryption of data in transit and at rest
• Access controls and authentication
• Regular security audits
• Staff training on data protection

8. Data Transfers

If we transfer data outside the EEA, we ensure adequate protection through:

• EU-US Privacy Shield or equivalent
• Standard contractual clauses
• Explicit consent

9. Automated Decision-Making

We do not use automated decision-making that significantly affects you.

10. Children's Data

Our services may be used by children with parental consent. If you are a parent or guardian and wish to exercise your child's rights or request deletion of their data, please contact us at [email protected].

11. Complaints

If you believe your data rights have been violated, you have the right to lodge a complaint with a supervisory authority (e.g., your local Data Protection Authority).

12. Changes to This Policy

We may update this policy. We will notify you of material changes.

12. Contact

For GDPR questions or to exercise your rights, contact us at [email protected].