So W'Happy Festival Privacy Policy

Last update: April 7, 2026

1. Data controller

Ewilsy acts as the data controller for the So W'Happy Festival application.

Privacy contact: privacy@ewilsy.com

2. Data collected, purposes, and legal basis

Account data (email, name/nickname, optional profile picture): account creation, authentication, support. Legal basis: contract performance.

Profile and preferences (language, favorites, notification settings): user experience personalization. Legal basis: contract performance.

Device technical data (device model, OS, app version, technical identifiers, push token): security, compatibility, push delivery. Legal basis: contract performance and legitimate interest.

Network data (IP address, date/time, access logs): security, abuse prevention, fraud prevention. Legal basis: legitimate interest and legal obligation.

Usage data (screens viewed, in-app events, crash/errors): product improvement and service quality. Legal basis: legitimate interest; consent where required by applicable law.

Support data (support requests and email exchanges): request handling and quality follow-up. Legal basis: contract performance and legitimate interest.

3. Processors and third-party services

We only work with processors required to operate the service, under data processing agreements.

Hosting and infrastructure (examples: cloud hosting, managed database).

Analytics and monitoring (examples: performance analytics, crash reporting, technical logs).

Push notifications and communication (examples: push delivery services, email routing).

4. International data transfers

Some data may be processed outside the European Economic Area.

When this happens, we apply appropriate safeguards, including EU Standard Contractual Clauses (SCCs), plus supplementary technical and contractual measures.

5. Data retention

Active account data: kept while the account is active.

After account deletion: deleted or anonymized within a maximum of 30 days, unless legal obligations require otherwise.

Technical and security logs: up to 12 months.

Usage/analytics data: up to 24 months in pseudonymized or aggregated form.

Support requests: up to 24 months after closure.

6. Your GDPR rights

You may request access, rectification, deletion, restriction, objection, portability, and consent withdrawal where applicable.

To exercise rights, email privacy@ewilsy.com with your account details.

We generally respond within 30 days.

You may also lodge a complaint with your local data protection authority (Belgium: Data Protection Authority).

7. Security measures

Encryption in transit (TLS).

Restricted access controls (need-to-know basis).

Security logging and incident monitoring.

Internal confidentiality and organizational safeguards.

8. Account deletion

Official process: /apps/so-whappy-festival/legal/delete-account

Deletion is irreversible once fully processed.