GDPR & Data Protection

Overview

Recs ("we," "us," or "our") is committed to protecting the personal data of all users, including those in the European Economic Area (EEA), United Kingdom, and Switzerland. This page explains how we comply with the General Data Protection Regulation (GDPR) and the rights you have over your data.

Data Controller

Recs is the data controller responsible for your personal data. If you have questions about how your data is processed, you can contact us at [email protected].

Legal Basis for Processing

We process your personal data only when we have a lawful basis to do so. Depending on the context, we rely on the following:

• Contractual necessity — to provide the services you signed up for (e.g., creating an account, managing events and calendars)
• Consent — where you have given explicit consent (e.g., location data, marketing communications)
• Legitimate interests — to improve our services, prevent fraud, and ensure security, provided these interests do not override your rights
• Legal obligation — to comply with applicable laws and regulations

Your Rights Under GDPR

If you are located in the EEA, UK, or Switzerland, you have the following rights regarding your personal data:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate or incomplete data
• Right to erasure — request deletion of your personal data ("right to be forgotten")
• Right to restrict processing — request that we limit how we use your data
• Right to data portability — receive your data in a structured, commonly used format
• Right to object — object to processing based on legitimate interests or direct marketing
• Right to withdraw consent — withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us at [email protected]. We will respond to your request within 30 days.

Data We Collect

For a full description of the personal data we collect and how it is used, please see our Privacy Policy. In summary, we collect:

• Account information (name, email, profile details) when you register
• Content you create (events, calendars, curator profiles, images)
• Device and usage data (device type, pages visited) to improve our services
• Location data, only with your explicit consent

International Data Transfers

Your data may be transferred to and processed in the United States, where our servers are located. When we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. When you delete your account, we will erase your personal data within 30 days, except where we are legally required to retain it.

Third-Party Processors

We use third-party services that may process your data on our behalf. Each processor is bound by data processing agreements that comply with GDPR requirements. See our Privacy Policy for the full list of third-party services.

Cookies

We use essential cookies to keep you signed in and to remember your preferences. We do not use tracking or advertising cookies. For more details, see our Privacy Policy.

Supervisory Authority

If you believe we have not adequately addressed your data protection concerns, you have the right to lodge a complaint with your local data protection authority. A list of EEA supervisory authorities is available on the European Data Protection Board website.

Contact Us

For any GDPR-related questions or to exercise your data rights, contact us at [email protected].