The controller for this prototype is PlaKat (prototype operator). For any privacy question or request, contact oleksii.malikov@gmail.com. See the Imprint for operator identification.

• —Account data: your email address and display name.
• —Uploaded content: poster photographs and the event text extracted from them.
• —Location data: coordinates derived from the venue or address text on a poster.
• —Technical data: server logs (including IP address and request metadata) needed to run and secure the service.

Uploaded photographs may incidentally contain third-party personal data (for example, people or contact details printed on a poster). If that concerns you, use the contact address above to request removal.

RUN THE SERVICE

Providing accounts, uploads, extraction, and the public wall — performance of a contract (GDPR Art. 6(1)(b)).

DEDUP & ABUSE

Duplicate detection, rate limiting, and moderation — legitimate interest in a reliable, non-abusive service (Art. 6(1)(f)).

We use the following third parties to run the service. We do not sell your data.

• SupabaseDatabase, authentication & storage hosting (EU)
  Account email, display name, uploaded photos, extracted event text, coordinates, auth session.
• Mistral AIOCR / structured extraction
  Uploaded poster images, sent for text recognition at upload time.
• Google Maps Platform / Cesium Ion3D map tiles
  When the map renders, tile requests expose your IP address to Google.
• OSM Foundation / NominatimGeocoding
  Venue / address text sent to resolve coordinates at publish time.
• Komoot / PhotonGeocoding (autocomplete & lookup)
  Venue / address text sent to resolve coordinates.

PlaKat runs no advertising and no analytics or tracking cookies. The only cookies are the strictly-necessary ones that keep you signed in.

Published posters and their event data remain on the wall as part of the archive until removed on request or by the operator. Account data is kept while your account exists. Server logs are kept only as long as needed for security and operation, then deleted.

Subject to applicable law, you have the right to:

• —access — a copy of the data we hold about you;
• —rectification — correction of inaccurate data;
• —erasure — deletion of your account and content;
• —restriction and objection to certain processing;
• —portability of data you provided.

You can erase your account and all of your data yourself at any time from the account menu (“Delete account”) — this immediately and permanently removes your profile and every poster and image you uploaded. For any other request, email oleksii.malikov@gmail.com. You may also lodge a complaint with a supervisory authority (in Switzerland, the FDPIC; in the EU, your national authority).

Hosting is in the EU. Some processors (for example, OCR and map tiles) may process data outside Switzerland/the EEA. Where that happens, transfers rely on appropriate safeguards such as the EU Standard Contractual Clauses.