MilligatePrivacy policy
Last updated: November 2026 · applies to the Milligate app, Creator Studio and this website
1. Controller
Eren Ketan, sole proprietor
Albert-Schöpf-Straße 76, 4020 Linz, Austria
Email: ketaneren@gmail.com
2. What data we process and why
| Data | Purpose | Legal basis |
|---|---|---|
| Email address, name, password (encrypted) | User account, login, purchase confirmations | Art. 6(1)(b) GDPR (contract) |
| Orders, tickets, seats and parking | Ticket purchase, entry, cancellation, settlement with the organizer | Art. 6(1)(b) (contract) |
| Payment data | Processed by Stripe. Card data is handled exclusively by Stripe. | Art. 6(1)(b) (contract) |
| Receipts and booking records | Statutory retention duties (e.g. § 132 BAO) | Art. 6(1)(c) (legal obligation) |
| Location (only with permission) | Show events near you and distance. Used only during use and not stored. | Art. 6(1)(a) (consent) |
| Push token | Notifications, e.g. about ticket transfers or event changes | Art. 6(1)(a) (consent) |
| Age verification data | Only for age-restricted events, via our provider Didit. We receive only the result, no ID copy. | Art. 6(1)(b) and (c) |
| Advertising ID, device information | Showing ads via Google AdMob | Art. 6(1)(a) (consent) |
| Camera access | Scanning QR codes. No images are stored. | Art. 6(1)(b) |
| Bug reports and feedback | Only when you actively send us something | Art. 6(1)(f) (legitimate interest) |
3. Recipients and processors
- The organizer of the respective event: receives the order data needed for entry and settlement.
- Supabase (database, authentication, servers) – EU data centre (Ireland).
- Stripe (payment processing and payouts to organizers).
- Google Firebase (push notifications) and Google AdMob (ads).
- Didit (age verification, only for age-restricted events).
- Apple Wallet / Google Wallet – only if you add a ticket yourself.
- Vercel (hosting of Creator Studio and this website).
- An email service provider for sending confirmations.
Data processing agreements are in place with all processors, or they act as independent controllers under the GDPR. Transfers to the USA rely on the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses.
4. Retention
We keep account data as long as your account exists. Receipts and booking records must be retained for 7 years under Austrian law.
5. Your rights
You have the right to access, rectification, erasure, restriction, data portability and objection. You can withdraw consent at any time. Get a copy of your data in the app under Account settings → Export my data or by email.
You may lodge a complaint with the Austrian Data Protection Authority: www.dsb.gv.at.
6. This website
This website uses no cookies and no tracking. When you visit, the hosting provider processes technically necessary data (e.g. IP address) to deliver and secure the site. Fonts are loaded from Google Fonts.