privacy.
Last updated: 29 October 2026. SIAPP, Lda. (controller) processes your data to run a members-only events club. This notice follows the GDPR.
What we collect and why
| Data | Why | Legal basis | Kept |
|---|---|---|---|
| Email, name, date of birth, home city | Your account; the 24+ rule | Contract | Account lifetime |
| Selfie | Shown to door staff when your ticket is scanned, so a ticket can't be passed on | Contract | Until replaced or the account is deleted |
| ID photo (tourist pass only) | Checking a visitor's identity and age | Legitimate interest (fraud prevention) | Encrypted, deleted after 30 days |
| Payments | Handled by Stripe; we store a card fingerprint, never the number | Contract; legitimate interest (fraud) | Accounting retention (10 years, PT) |
| Device fingerprint | Detecting accounts that share one device | Legitimate interest (fraud prevention) | Account lifetime |
| Redemptions, scans, attendance | Running the door and the key ledger; settling with producers | Contract | Accounting retention |
| Pre-registration (founder list): email, first name, city, how you found the page | Inviting you when we open and honouring the founder deal | Consent (withdraw with the unsubscribe link) | Until you unsubscribe or create your account; unconverted leads deleted 12 months after launch |
| Referral and partner-community data | Referral bonuses; partner promotions (e.g. ELL) | Contract | Account lifetime |
Who sees it
Door staff see your name, your selfie and your +1's name when your ticket is scanned — nothing else. Producers get a settlement statement listing scanned discounted tickets by member name; they never get your contact details. Processors: Stripe (payments), Resend (email), Vercel and Neon (hosting, EU region). Partner communities only learn that a token they issued was used.
Your rights
Access, rectification, erasure, restriction, portability and objection, plus the right to complain to the CNPD (Comissão Nacional de Proteção de Dados). Delete your account yourself in Profile → Delete account; for anything else write to privacy@siapp.club. We answer within a month.
Automated decisions
A redemption may be held for human review when our fraud rules fire (shared device or card, unusual speed). A human decides; nothing is refused automatically except overlapping tickets for events starting within 3 hours of each other, which you can simply cancel.
Transfers and security
Data lives in the EU (Frankfurt). ID photos are encrypted at rest; everything travels over TLS. Email sign-in links expire in 15 minutes and work once.