Privacy Policy

Privacy Statement — event-app.com

Last updated: August 2026

This Privacy Statement explains how Seabiscuit Software BV, operating www.event-app.com, handles personal data when you visit our website, contact us or use services for which Seabiscuit Software BV (Seabiscuit) determines the purposes and means of processing.

Because our event technology is also used on behalf of event organisers and other clients, this statement also explains the important distinction between data for which Seabiscuit is the controller and event participant data that we process on behalf of a client.

1. Who we are

event-app.com is an activity of Seabiscuit Software BV
Groothandelsgebouw
Stationsplein 45
3013 AK Rotterdam
The Netherlands
For personal data that Seabiscuit collects for its own purposes through www.event-app.com, Seabiscuit acts as the data controller.

2. What personal data we collect directly

When you visit www.event-app.com or contact us, we may process:
•    Your name;
•    Email address and telephone number;
•    Company name, job title and other business contact information;
•    Information submitted when requesting information, a quotation or demonstration;
•    Communications between you and us;
•    Technical information such as IP address, browser and device information and website usage data;
•    Cookie and analytics information, where applicable.

3. Why we use this information

We may process this personal data to:
•    Respond to enquiries;
•    Arrange demonstrations;
•    Prepare quotations and proposals;
•    Communicate with prospective and existing customers;
•    Enter into and perform agreements;
•    Operate, secure and improve our website and services;
•    Maintain our business administration;
•    Comply with legal obligations;
•    Carry out appropriate business-to-business marketing activities.

Depending on the circumstances, the legal basis for processing is consent, performance of a contract or steps requested before entering into a contract, compliance with a legal obligation, or our legitimate interests in operating and developing our business and services.

4. Event participant data

Our services include event apps, online registration, digital check-in, participant interaction, networking and related event technology. Depending on the configuration selected by an event organiser, these services may process participant information such as names, contact details, registration information, personalised agendas, ticket or badge information, attendance information, profile information, networking information, messages, responses, feedback and other event-related data.

In most cases, this information is processed on behalf of the organisation responsible for the event. That organisation determines why participant data is collected and how it is used and is therefore generally the data controller. Seabiscuit then acts as a data processor and processes the information on the client's instructions.

The privacy statement or other privacy information provided by the relevant event organiser applies to that processing. If you are an event participant and have a question about your data or wish to exercise a privacy right, you should normally contact the event organiser first.

5. Data processing for clients

Where Seabiscuit acts as a processor, we process personal data in accordance with our client's instructions, the applicable agreement and data-processing arrangements, and applicable data protection legislation.

We may use appropriate technology and service providers to deliver the event services. Where subprocessors process personal data on our behalf, we take appropriate contractual and organisational measures to protect the data.

6. Sharing personal data

We do not sell personal data.
For data for which we are the controller, we may share information with service providers that support our website and business, such as hosting and cloud providers, IT suppliers, communications providers, analytics providers and professional advisers.

We may also disclose information where required by law or where necessary to establish, exercise or defend legal rights.

7. International transfers

Some technology or service providers may process personal data outside the European Economic Area (EEA). Where this occurs, we use appropriate safeguards required under applicable data protection legislation, such as an adequacy decision or approved contractual safeguards.

For event participant data processed on behalf of a client, applicable international-transfer arrangements may also be governed by our agreement with that client.

8. Cookies and analytics

www.event-app.com may use cookies and similar technologies for essential website functionality, security, preferences and, where applicable, analytics or marketing.
Where consent is legally required, non-essential cookies will only be used after consent has been obtained. Further information may be provided through our cookie banner or a separate Cookie Statement.

9. Retention

Personal data for which Seabiscuit is the controller is retained only for as long as necessary for the purpose for which it was collected and to meet applicable legal, accounting, contractual and security requirements.

Where we process event participant data on behalf of a client, retention and deletion are generally determined by the agreement and instructions of that client.

10. Security

We use appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

11. Your rights

Where Seabiscuit is the data controller, subject to the conditions of the GDPR you may have the right to access, correct or delete your personal data, restrict or object to processing, receive or transfer certain data, and withdraw consent where processing is based on consent.

Where we process your data on behalf of an event organiser, please direct your request to that organiser. We will assist our clients in responding to data-subject requests where required.

You also have the right to lodge a complaint with a supervisory authority. In the Netherlands, this is the Autoriteit Persoonsgegevens.

12. Third-party services and links

Our website and event solutions may contain links to or integrations with third-party services. Where a third party processes information for its own purposes, its own privacy terms apply.

13. Changes to this statement

We may update this Privacy Statement when our website, event services or legal obligations change. The latest version will be published on www.event-app.com.