Privacy statement

Slotr is offered by Boost Productions, Stationstraat 293, Nuth, the Netherlands. Contact: ben@boostproductions.nl.

When you register for an event, the organiser of that event is the controller of your attendee data; Slotr processes it on the organiser's behalf. Our data processing agreement (in Dutch) is public at slotr.nl/vertrouwen/verwerkersovereenkomst and follows Article 28 GDPR.

• Organisers: name, email address, organisation name, optionally a bio, logo and branding. With a paid plan also billing details (company name, address, VAT number) and payment status.
• Attendees: name, email address, language, chosen time slot, number of guests and their names, and the answers to the organiser's questions, including any uploaded files (for example a logo).
• Technical: IP address and browser information in our security log (sign-ins, changes by organisers, uploads), a log of sent emails (recipient, subject, delivery status) and cookieless visit statistics (see Statistics without cookies).

• Handling registrations, waiting lists, changes and cancellations.
• Sending confirmations, reminders and notices about a change or cancellation, on behalf of the organiser.
• Providing attendee lists and exports to the organiser of the event.
• Security: detecting abuse and tracing sign-ins and changes.
• Invoicing and subscription management for organisers.
• Improving Slotr based on anonymised usage patterns.

We do not sell data. We do use services that are needed to run Slotr.

All personal data of organisers and attendees is stored by default in the European Union, in Frankfurt am Main (Germany), with Supabase.

The complete list of subprocessors, with country of establishment, processing location and safeguard, is at slotr.nl/vertrouwen/subverwerkers (in Dutch).

Where a subprocessor is based outside the European Union, the EU standard contractual clauses apply.

• Organiser accounts: for as long as the account exists.
• Attendee data: until the organiser deletes it. An organiser can set attendee data to be destroyed automatically 7, 14 or 30 days after an event; uploaded files are removed with it.
• Cancelled registrations: at most 24 months after registration.
• Email log: 12 months. Security log: 24 months. Visit statistics: 13 months.
• Backups: encrypted, 35 days. A deletion therefore reaches the backups within 35 days at the latest.

You have the right to access, correct, restrict or delete your data. Email privacy@slotr.nl and we will respond within 14 days. For an event registration you can also change or cancel it yourself via the link in your confirmation email, or contact the organiser.

If you disagree with how we handle your data, you can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Slotr sets no cookies for statistics or advertising and loads no scripts from Google, Meta or other advertising networks. That is why you see no cookie banner here. The only cookies are strictly necessary: for signing in and your language choice.

To understand how the site is used and which campaigns work, we keep our own statistics. Per visit we store the path visited, the time, the visible time on the page, the device type and browser family, the country, the language, the domain of the referring site and any campaign codes in the link (utm). To link the pages of one visit together, our server computes a hash of your IP address and browser information with a secret key that changes every day. The IP address itself is not stored, and because of the daily change a visit today cannot be linked to you tomorrow. Nothing is stored on your device.

If you create an account yourself, we store with that account the channel you came from (for example a search engine, an AI assistant or a campaign), the page you arrived on and, if you take out a subscription, the origin of that visit. This shows us which channels lead to organisers who actually use Slotr. We do not link earlier visits to your account for this and store no IP address. This data is deleted together with your account.

Legal basis: our legitimate interest in improving the site and evaluating our advertising. Retention: 13 months.

We may update this statement. We inform organisers by email about significant changes.