Effective date 1 October 2025
Version 1.1

1. Controller

Glow Mosaic Co B.V. (hereinafter ‘we’ or ‘us’) is responsible for processing personal data as described in this statement. We can be reached via support@glowmosaic.co.

2. What personal data do we process?

We only process data required for our service to function:

• Hashed device ID (never the original device ID) and operating system, and only from wearable technology connected to our product;
• Location data during events to position your device within the event.

We do not collect your name, email address or contact details, unless you contact us yourself or register to access advanced options or open an account.

3. Purposes of processing

• Running events and synchronising the application;
• Optimising the user experience and technical performance;
• Anonymous analysis after events.

4. Legal basis

We base the processing on:

• Performance of a contract (participation in an event);
• Consent (when using optional features such as route storage or camera use);
• Legitimate interest (optimisation and security of the app).

5. Retention period

• Location data from guest accounts are deleted 30 days after the event;
• Location data from registered accounts are retained for a maximum of 7 years;
• Event attendance based on hashed device ID is retained for a maximum of 7 years.

6. Sharing with third parties

We only share aggregated reports with event organisers and possible service providers, without hashed device IDs. We never share with advertisers.

7. Security

We take appropriate technical and organisational measures (such as hashing, TLS encryption, cache protection) to safeguard your data.

8. Your rights (GDPR)

You have the right to:

• Access your data;
• Rectify or delete your data;
• Delete event location data directly in the app.

You can submit such requests via support@glowmosaic.co.

9. Supervisory authority

If you disagree with how we handle your request, you can file a complaint with AP (Autoriteit Persoonsgegevens), the Dutch Data Protection Authority via their website (also in English).