This is a courtesy translation. If the English and the Greek versions differ, the Greek version applies.

Privacy policy

Last updated: 9 November 2026

EventQ sends an email every week, on the day you choose (Thursday unless you choose another), with ideas for the weekend with your kids. To do that it needs a few details. Here we say which, why, for how long, and what rights you have. We keep as little as we can: about your children we only know which age group they are in, never a name or a date of birth.

Who is responsible

The controller is Γιάννης Σταματελάτος (EventQ), VAT ID 125286748, Κορίνθου 270, 26222 Πάτρα, Greece. For anything about your data write to johnstam1314@hotmail.com. We reply within one month, usually much sooner.

What we keep and why

If you sign up for the weekly email

Your email and, if you give it, your first name.
Your area and how many kilometres you are willing to travel. If you pick an area from the list, we keep its centre. If you give an address or share your phone’s location, we keep only a point rounded to about 100 metres, not the address.
Your children’s age groups (e.g. ages 4–6) and what you like (theatre, workshops, outdoors, etc.).
When we sent you an email, so we don’t send the same one twice.
If you have Pro and save events (the star on an idea), which events you saved. Only you see the list, and it is deleted with your account.

Before we start, we send you a confirmation email, to be sure the address is yours. Until you press it we send nothing else, and if you don’t press it within 7 days we delete the request. The same applies when you change your settings.

The legal basis is your consent, given with the box at sign-up (article 6(1)(a) GDPR). We keep when, and under which version of this page, you agreed. You can withdraw it any time with the link at the bottom of every email.

If you get EventQ Pro

Payment is handled by Stripe. Your card details never pass through us. We keep only Stripe’s customer and subscription IDs, the plan and how long it is valid.

The legal basis is our contract with you (article 6(1)(b)) and, for payment records, tax law (article 6(1)(c)).

If you promote an event (businesses)

Business name, contact email, website and the event details. Payment is handled by Stripe, as above.

The legal basis is the contract (article 6(1)(b)) and tax law (article 6(1)(c)).

If you send us an event (free listing)

Name or business name, email, website and the event details. We use the email to confirm, to tell you when it is published and to suggest promotion once. The event details are published, the email is not.
If you don’t press the confirmation within 7 days, the listing is deleted. The legal basis is your request (article 6(1)(b)).

If you add a picture to an event (free listing or promotion)

We re-encode the picture ourselves (it is shrunk and all its metadata, such as GPS location, camera and names, is removed) and store it in our database. We don’t accept pictures with recognisable faces of children or with personal data (phone numbers, number plates). If adults are visible, you need their consent.
To check this, the picture goes through an automatic check by an AI system (Claude, by Anthropic). We send it only the picture and a fixed instruction, not your name or email. The owner of EventQ also approves every picture before it appears.
An approved picture is public: it appears on the event’s card on the site and, for promoted events, in the weekly email to parents.
Pictures you uploaded that were never attached to an event are deleted after 36 hours, and rejected ones after 7 days. An approved picture stays as long as the event does and is deleted with it, or sooner if you ask at johnstam1314@hotmail.com.

The legal basis is your request or the contract (article 6(1)(b)). By sending it you confirm that the picture is yours or that you have permission for us to publish it.

Businesses and organisers who find us online

When we find an event for kids, we keep the organiser’s public details as they publish them (name, website, the business’s contact email). We may send them one message about promotion on EventQ. Every such message has a link to stop further messages, and then we keep only the email as a note not to write again. The legal basis is our legitimate interest in informing businesses about a service that concerns them (article 6(1)(f)). You may object at any time.

If you tell us what you’d like (“More often!”, “It was full”, “Something missing?”)

What you asked for (kind, day, time, maximum price, how many kids were left out), which event, the age groups and your area rounded to about 1 kilometre, and anything you write in the optional comment.
From an email, it is linked to your sign-up, so we count one vote per family. From the home page, without signing up, we keep a “salted” form of the radar_vid cookie for the limit of 5 ideas a day and delete it after 2 days (a week at the latest).
To venues, organisers and municipalities we give, and may sell, only totals (e.g. “32 families with children aged 4–6 in Nea Smyrni want theatre on Sunday morning”), and only when they cover at least 10 families. Never an email, name, comment or anything that shows who you are.

The legal basis is your consent: we record nothing unless you press “Send” (article 6(1)(a) GDPR). The totals are anonymous and are not personal data.

If you simply visit the site

The quick search on the home page allows a few searches a day, to prevent abuse. To count them we set the radar_vid cookie (a random number, valid 12 months) and keep an irreversible, “salted” form of it and of the IP address for 2 days. In the same way we count how many sign-ups and promotion bookings come from the same connection, so nobody can mass-send confirmation emails or grab slots. This is necessary for the site to work and is not used for anything else.
We count visits anonymously with Vercel Web Analytics: page, country, device and browser type, and where you came from. It sets no cookies and does not keep your IP address. To avoid counting someone twice, it uses an irreversible form of it that changes every day, so we can’t recognise you. The legal basis is our legitimate interest in knowing which pages are used (article 6(1)(f)).
When you open your weekend (after signing up or pressing a sign-in link), we set the radar_session cookie: a random code that keeps you signed in for 60 days. We store only an irreversible form of it in our database. It is necessary for signing in, is not used for anything else, and is deleted when you sign out or it expires. Sign-in links work for 15 minutes and once.
When you press “Book” or “Details” on an event, we count one anonymous click for that event on that day, with no cookie, IP address or anything else that shows who clicked.
We use no advertising or statistics cookies and we don’t track you on other sites.
When you pay, Stripe’s payment page sets its own cookies for security and fraud prevention.

Features coming later

Saved searches and alerts (“tell me when something comes up for a 5-year-old in Glyfada”): we keep the search until it expires or, if it finds nothing, for 30 days at most.
Chat with the AI assistant about events: messages are deleted after 90 days. Please don’t write personal details about your children there.

We will tell you before they open. We never import data from LinkedIn or other profiles on third-party services.

Artificial intelligence

An AI system (Claude, by Anthropic) reads the event descriptions and classifies them: which ages they are for, whether they are indoors or outdoors, what they cost. We don’t send it your details. The same system checks the pictures organisers upload (see above). What you see is chosen by simple rules (distance, ages, weather) and has no legal or other significant effect on you.

Who else processes it

We use these providers, under data processing agreements:

Supabase: database, on servers in Frankfurt.
Vercel: hosting of the site and anonymous visit counting.
Resend: sending the emails, from servers in Ireland.
Stripe: payments and receipts.
GitHub: runs the scheduled jobs (collecting events, sending), with access to the database.
Anthropic: the event texts, the pictures organisers upload (only for the check described above), and later the chat messages if you use it.

Some of them are US companies. Transfers rely on the European Commission’s standard contractual clauses or the EU-US Data Privacy Framework. We don’t sell or give your details to anyone else, including the businesses that are promoted. To businesses we give only the anonymous totals described above.

How long we keep it

While you have an account. When you press “Stop the email” (at the bottom of every email or on the Account page) we stop only the emails: your account, area and ages stay so you can see the ideas on the site. When you delete your account (on the Account page, or with “I want to be deleted completely” after “Stop the email”) we delete everything about you right away, except payment records if you have paid.
Sign-ups that were not confirmed: 7 days.
When we sent you an email: 12 months, or until you delete your account.
Payment records: as long as tax law requires, usually 5 years.
Promotion bookings that were not paid: 7 days.
System logs (for finding errors): 90 days.
Data for the search and sign-up limits: 2 days.
What you told us you’d like: while you have an account. When you delete your account, we delete your comment and the link to you, and it remains only as an anonymous count.

Your rights

You can ask to see your data, correct it, delete it, receive it as a file, restrict or object to its processing, and withdraw your consent, by writing to johnstam1314@hotmail.com. If you believe something is not done correctly, you have the right to complain to the Hellenic Data Protection Authority (1-3 Kifisias Ave., 115 23 Athens, www.dpa.gr).

Age

EventQ is meant for parents and adults. We don’t accept sign-ups from minors.

Changes

If something important changes, we will write it here with a new date and tell you by email before it applies. If the change needs new consent, we will ask for it.