Privacy Policy

Controller

Schick Vienna is a private, non-commercial project. The app is free of charge, contains no advertising, and no data is sold or shared for advertising purposes.

1. Data, purposes and features in the app

Account and authentication

We process your authentication identifier, email address, login state and security-related account information to create, secure and manage your account.

Profile and level

We process username, friend code, gender or avatar variant, an optional profile picture, birth year, student status, language, points, level and one-time mission progress. These details are associated with your account on the server. Organisers do not receive your profile or individual demographic values.

Friends and attendance plans

We process friend requests, confirmed connections, nicknames, blocks, mute and close-friend status, and sharing preferences. When you choose “I’m coming!”, we store the event or club and the time. Plans are visible to confirmed friends only when you enable sharing. Suggestions under “People you may know” are based solely on friends of your confirmed friends; no address book is read.

Community statistics

Attendance confirmations are used to compile aggregate statistics about age groups, gender distribution and student share. Demographic results are displayed only once a minimum number of confirmations is reached (currently 2). Organisers receive no attendee lists, profiles or individual values.

Event and club usage

We process daily per-user views, attendance, ratings, artist kudos, favourites, reports and interactions to provide the app, prevent abuse and compile aggregate statistics and community rankings.

Location and maps

With permission, device location is used to show your position and nearby places. It is generally processed on-device and not stored as a movement profile. External map providers apply their own privacy terms when you deliberately open their apps.

Camera and photos

The camera is used only to scan friend QR codes; no images are stored. Photo access serves solely to choose a profile picture, which you can remove at any time.

Technical data and diagnostics

IP address, timestamps, device, platform, app version and technical logs may be processed for security and diagnostics. Crash data may be sent to Sentry. Contents of input fields are not meant to be part of error reports.

Notifications

Push identifiers and settings are processed when notifications are enabled. The app contains no advertising; there is no ad tracking and no sharing of data for advertising purposes.

Host features

Hosts who list events submit event, venue, ticket and image details as well as Instagram references. This content is published in the app and on the website. Hosts receive aggregate figures such as views and confirmations for their own events, but no personal data.

2. Legal bases

Depending on the feature, processing is based on Art. 6(1)(b) GDPR to provide your account and requested app services, Art. 6(1)(a) GDPR for consent-based features such as location, camera, photos and optional notifications, Art. 6(1)(f) GDPR for security, diagnostics, abuse prevention, product improvement and aggregate community statistics, and Art. 6(1)(c) GDPR for legal obligations. Our legitimate interest is to provide a reliable picture of Vienna nightlife; this is balanced by data minimisation, grouped analysis and a minimum number of confirmations before publication. Consent can be withdrawn prospectively at any time.

3. Source and provision of data

Data generally comes from you, your device or your interactions in the app. Account, profile and login data are required for registration, the level icon and community features; without them the profile cannot be fully provided. Location, camera, photos and notifications are voluntary. If permissions are not granted, the app remains usable, but the respective feature is unavailable or limited.

4. Recipients and external services

Access is limited to recipients who need data for the relevant purpose, including hosting, database, authentication, push and security providers. Connected services include Keycloak, Sentry and Expo/Apple/Google push infrastructure. Spotify, Instagram, Apple Maps and Google Maps are contacted only in connection with their respective feature or a link you open. Organisers receive only aggregate results; profiles and individual values are not disclosed. Data is not sold and not shared for advertising purposes.

5. Transfers outside the EEA

For some technical providers, processing outside the European Economic Area, in particular in the USA, cannot be ruled out. Where required, it is based on an adequacy decision or appropriate safeguards under Art. 46 GDPR, in particular EU standard contractual clauses.

6. Retention

Account data is stored until the account is deleted. You can permanently delete your account at any time in the app under “Delete account”. Friendship and attendance data is deleted or decoupled when the connection, entry or account is deleted, unless statutory retention obligations apply. Security and error logs are kept only as long as necessary for analysis and protection. Local settings can be removed by signing out, resetting or deleting the app.

7. Website schick-vienna.at

Server logs

When you visit the website, technically necessary connection data (IP address, time, page requested, browser) may be processed in server log files for operation, security and diagnostics (Art. 6(1)(f) GDPR).

Contact

The contact form prepares an email in your email client. The website does not send the message automatically or store it in a database.

Analytics

Google Analytics 4 is integrated in consent mode. Without your consent in the cookie notice, no cookies are set and no personal measurement data is processed. You can change your decision at any time via the cookie notice.

Local storage

Your browser may store your cookie decision and the state of forms you have started locally. This data does not leave your browser.

8. Your rights

Subject to statutory conditions, you have the right to access, rectification, erasure, restriction, data portability and objection. In particular, you can object to the future use of your profile data for community statistics. Consent can be withdrawn at any time with future effect. No decision with legal or similarly significant effect is based solely on automated processing. Requests go to kontakt@schick-vienna.at. Proof of identity may be required to prevent unauthorised disclosure.

9. Right to lodge a complaint

You can lodge a complaint with the Austrian Data Protection Authority: Barichgasse 40–42, 1030 Vienna, email dsb@dsb.gv.at, web dsb.gv.at.

10. Security and changes

We apply appropriate technical and organisational measures to protect your data. This policy is updated when features, providers or legal requirements change. Material changes are communicated in an appropriate form in the app.