Creatives Who Walk

Data Policy

Last updated: May 2025

Who we are

Creatives Who Walk (operated by [Name], Vienna, Austria) runs the membership platform at creativeswhowalk.com. This policy explains what personal data we collect, why, and how you can exercise your rights under the General Data Protection Regulation (GDPR).

Data we collect

When you create an account and use the platform, we collect:

  • Account data: first name, last name, email address
  • Profile data: city, profession, bio, phone number, avatar photo, social links — all optional, provided by you
  • Walk data: walks you host or join, RSVP history, walk descriptions and meeting points
  • Payment data: subscription status, payment timestamps, invoice records. Card details are processed exclusively by Stripe and are never stored on our servers.
  • Technical data: authentication session cookies, login timestamps

Why we use it

  • To provide and manage your membership (legal basis: contract)
  • To match you with walks in your city and notify other members (legitimate interest)
  • To issue invoices and fulfil our accounting obligations (legal obligation)
  • To send transactional emails about walks you host or join (contract)

We do not use your data for advertising, profiling, or sale to third parties.

Third-party services

We use the following processors. Each is bound by a data processing agreement:

Supabase

Database and authentication. Data is stored on AWS infrastructure (EU region where possible). Privacy policy

Stripe

Payment processing. Stripe stores payment method details. We only receive status and amount. Privacy policy

EasyBill

Invoice generation. Receives your name and email for billing purposes. Data stored in Germany. Privacy policy

Vercel

Website hosting and CDN. May process IP addresses and request metadata. Privacy policy

Cookies

We use a single authentication cookie to keep you signed in. This cookie is strictly necessary for the service to function and contains only a session token. No tracking or advertising cookies are used.

Data retention

We retain your account data for as long as your membership is active. If you delete your account, we remove your personal profile data within 30 days. Invoice data is retained for 7 years to comply with Austrian accounting law. Walk attendance records are anonymised after account deletion.

Your rights

Under GDPR you have the right to:

  • Access — request a copy of the data we hold about you
  • Correction — correct inaccurate or incomplete data
  • Deletion — request deletion of your account and personal data
  • Portability — receive your data in a machine-readable format
  • Objection — object to processing based on legitimate interest
  • Complaint — lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde)

To exercise any of these rights, contact us at hello@creativeswhowalk.com. We respond within 30 days.

Changes to this policy

We may update this policy from time to time. Material changes will be communicated by email. Continued use of the platform after such notice constitutes acceptance.