Privacy Policy

Data Controller

Data We Collect

2.1 Data You Provide

• Registration data: name, email (entered at registration, or obtained from your Apple ID or Google account)
• Password: when you register with email and password, the password is managed by Firebase Authentication; we have no access to it (only a secure hash is stored)
• Email verification: whether you have confirmed your email by clicking the verification link
• Profile data: name, role, bio, websites, social networks
• Profile photo
• Concert content: title, description, program, venue, date, photos
• Communications: messages sent to support and data you voluntarily submit through Concert Companion

2.2 Automatically Collected Data

• Device data: device type (phone, tablet, computer), operating system, app version and build
• Identifiers: account identifier (Firebase Authentication) and, with your permission, a push notification token (APNs / Firebase Cloud Messaging); older app versions also the Firebase Analytics app-instance ID (device identifier)
• Usage data: viewed concerts and app usage statistics — screens and Home sections visited, how long they were shown, scroll depth, actions (e.g. opening a concert, “Going”, starting a search without the query text), app version and session start. For signed-in users the statistics are linked to the account; without sign-in, only to a random identifier of a single session. Comparable data from older app versions is brought into the same statistics. On the website we record the date of a signed-in user’s last visit.
• Location: for a signed-in account, an approximate location for a listener map that only ProMusica administrators can see — in the app, with your location permission, rounded to about 1 km; in the Android app without permission and on the website, estimated on our server from the IP address (usually at city level). The iOS app sends no location without permission. We keep only the last known value. In older app versions, precise location only with your permission; Firebase Analytics may derive approximate location from a masked IP address.
• Diagnostics: server operation and security logs (IP address, time, requested address, browser or app type) kept for 14 days; the new apps do not send crash reports. Older app versions: anonymized crash reports (Firebase Crashlytics).
• Podcast analytics: one anonymous cumulative playback-session summary containing episode ID, platform, broad device class, audio/video mode, position, active time, Play and seek counts, and chapter totals; no account, visitor or device identifier, IP address, user agent, episode title, or free text

2.3 Data from Third Parties

• Apple Sign In: name, email (or relay address)
• Google Sign In: name, email, profile photo

When you register with email and password, we do not receive this data from third parties — you enter your name yourself in the next registration step.

“Today’s Activity” Data (Community Section)

Within the “Today’s Activity” community section (formerly “SvětKomunity”), we collect:

• Posts: text, photos, videos, and shared content
• Comments: your responses to others' posts
• Reactions: emoji reactions and likes on posts and comments
• Mentions: @mentions of other users in posts and comments
• Metadata: creation time, author information

3.1 Content Moderation

App administrators have access to all “Today’s Activity” content for the purposes of:

• moderating and removing inappropriate content,
• handling reported posts and comments,
• ensuring a safe environment for all users.

3.2 Content Deletion

You can delete your content at any time. Administrators may delete any content violating the Terms of Service without prior notice.

3.3 Community Section Data Storage and Retention

• Data is stored in a database on our own servers and on CDN server cdn.promusica.cz (both in the Czech Republic); content created in older app versions is stored in Cloud Firestore (EU, region eur3).
• Photos and videos are processed (max 1600x1600 px, WebP, EXIF data removed).
• Data is retained for the duration of your account or until manually deleted.
• Upon account deletion, all data is permanently removed within 30 days.

3.4 Concert Companion Data

The optional Concert Companion feature is available only to users aged 18 or over and connects listeners solely in relation to a specific concert. We process:

• Public invitation: the specific concert, your display name, profile photo, invitation text, intended group size, and whether you offer an extra ticket. While active, this data is publicly visible only in connection with that concert.
• Private request: the identities of the requester and invitation host, accompanying text, request status, and timestamps. Only the participants and authorized administrators where necessary can access it.
• Private text messages: message content, sender, recipient, and sending time. Messages can be sent only after a request is accepted and are available to accepted participants.
• Safety data: blocking status and information in a report about an inappropriate invitation, request, message, or behavior.

ProMusica does not process payments through this feature. Do not include payment-card details, identity-document data, or other sensitive information in an invitation or message. A ticket may be offered only free of charge or for no more than its original purchase price; this information is used solely for arrangements between users.

We automatically delete invitations, requests, and ordinary messages no later than 30 days after the relevant concert date. We delete them sooner when the account is deleted. We may retain report or moderation records and the strictly necessary part of a conversation for longer only where required for safety, report handling, legal claims, or compliance with law, and only for as long as needed for that purpose.

3.5 MyPassport — Personal Musical Collection

MyPassport is a personalized collection of your music-related activity and achievements within the ProMusica app.

Data processed in MyPassport:

• Stamps: information about every concert you have attended. The system records which specific concerts you have visited (title, date, venue, composers, orchestra, concert hall).
• Points and Titles: a numeric score based on the number of attended concerts and frequency of attendance (default titles: Visitor → Patron of the Arts → further levels).
• Badges (Achievements): recognitions for reaching certain milestones (e.g. 10 concerts of a given composer, 5 concerts in a single hall, 20 concerts in a month).
• Statistics and overview: automatically derived data — most frequently attended composers, most-visited concert halls, cities visited, musical era, most-played orchestra.
• Travel map: a geographic visualization of the cities and halls you have visited, derived from your concert data.

While Leaderboard display is enabled, other users can see only:

• your display name and profile photo (if set),
• your number of stamps, points and rank for the selected leaderboard period.

Specific attended concerts, badges, titles, derived statistics and the travel map remain private and are not part of the leaderboard response.

Maintenance of MyPassport data: Stamps and their associated data are created when you add a concert to your collection via the “I attended this concert” feature or by linking your tickets (where available). Points and badges are updated automatically. If you remove a concert from your collection, your Points and badges are recalculated (and may decrease); the stamp for that concert is removed. Travel maps and statistics are generated from your stamps and are automatically updated whenever your collection changes.

• Retention of the Passport: Data in MyPassport is retained for the duration of your account. Upon account deletion, your Passport and all associated data (stamps, points, badges, statistics, map) are irreversibly deleted within 30 days and will no longer be available to other users.

3.6 Listeners' Leaderboard

The ProMusica app maintains a public Listeners' Leaderboard, which ranks active users by the number of concerts attended and points earned.

Data displayed in the Leaderboard:

• User name (the display name from your profile)
• Profile photo (your public profile picture)
• Number of stamps (concerts attended in the selected period)
• Points and rank (your score and position in the selected period)

Eligibility: The Leaderboard includes users with at least one stamp unless they explicitly disabled display. A missing setting is treated as enabled; a disabled setting means you do not appear. The Leaderboard can be filtered by period: Week, Month, or All Time. Results are cached briefly and aggregate points may update with a short delay.

3.7 Following Artists and Ensembles (Social Graph)

The app allows you to follow your favorite composers, orchestras, and musical ensembles (“Following”).

Data processed:

• List of followed artists: which composers, orchestras, and ensembles you follow.
• Follow data: when you started following and who you currently follow.

• Retention: Following preferences are retained for the duration of your account. Upon account deletion, your list of followed artists is irreversibly deleted within 30 days.

SvětHudby Data (Magazine)

In the SvětHudby section, we process:

• Articles: text, HTML content, excerpts, tags, and categories
• Media content: cover images, videos (HLS/MP4)
• Metadata: author, publication date, update date, reading time

4.1 Article Data Storage

• Articles are stored in a database on our own servers in the Czech Republic; older app versions display them from Cloud Firestore (EU, region eur3).
• Images and videos are stored on CDN server cdn.promusica.cz in the Czech Republic.
• Article images undergo the same processing as other photos (resizing, WebP conversion, EXIF removal).

4.2 Reader Data

• We do not store per-user article reading history.
• We do not store bookmarks or favorite articles.
• We do not store search text in the database or in usage statistics; it may appear only in server operation logs, which are deleted after 14 days.

4.3 Right to Edit and Remove

• The operator reserves the right to edit, update, or remove any article at any time without prior notice.
• Articles are retained indefinitely until removed by the editorial team.

Photo Processing

Device Permissions

All permissions are optional. You can change them in your device Settings.

The app works fully without location permission. The iOS app then sends no location; for the Android app, the server may estimate a signed-in account’s approximate location from the IP address (see 2.2). For an overview of your choices, see Privacy Choices.

Legal Basis for Processing (GDPR)

Our processing of your data relies on the following legal bases under Regulation (EU) 2016/679 (GDPR):

Contract performance (Art. 6(1)(b) GDPR)

• Registration and account management
• Displaying concerts
• Operating the “Today’s Activity” community section
• Operating the optional Concert Companion feature, including delivering requests and messages between its participants
• Displaying the SvětHudby magazine
• The MyPassport feature — tracking attended concerts and generating stamps and statistics
• The Leaderboard feature — as a gamification element contributing to user engagement

Consent (Art. 6(1)(a) GDPR)

• Device location processing (with location permission) — nearby concerts and an approximate account location rounded to about 1 km for a listener map that only administrators can see
• Marketing notifications — push messages about new concerts, articles, and community updates
• Publishing your list of followed artists in your profile

Legitimate interest (Art. 6(1)(f) GDPR)

• Improving and personalizing the App — analyzing usage patterns and preferences
• Security and abuse detection — behavioral analysis to prevent fraud and abuse, including manipulation of points and stamps
• Community moderation and safety — addressing breaches of the Terms of Service
• Concert Companion safety — blocking, report handling, and prevention of harassment or fraud
• Usage statistics of the apps and website (screens, sections, actions, app version, date of last visit) to improve and develop the service; for older app versions also Firebase Analytics and anonymized crash diagnostics
• Estimating a signed-in account’s approximate location from the IP address (in the Android app without location permission and on the website) for a listener map that only administrators can see: each account appears on it as a dot at its approximate location (rounded to about 1 km), without name, e-mail or other account details
• Server operation and security logs kept for 14 days
• Separate anonymous podcast playback analytics without an account, visitor ID, or device identifier
• Aggregate cookieless web traffic in our Umami installation, without an Umami local browser identifier

Legal obligation (Art. 6(1)(c) GDPR)

• Data retention required by Czech or EU law (e.g. for tax or consumer-protection purposes)

How We Use Data

• Providing and personalizing services
• Creating and managing accounts
• Displaying relevant concerts
• Operating the “Today’s Activity” community section and displaying posts
• Displaying active Concert Companion invitations and delivering private requests and messages to their participants
• Displaying articles and content in the SvětHudby section
• Moderating user content
• Account-related communications
• Improving and developing the App
• Security and abuse prevention

Data Sharing

International Data Transfer

Transfers to the USA are protected by EU Standard Contractual Clauses (EU SCC) and EU-US Data Privacy Framework certification.

For the website and the new apps, we estimate an approximate location from the IP address on our own server using the IP Geolocation by DB-IP database (CC BY 4.0 licence); the IP address is not sent anywhere. Older app versions use the ipwho.is service for this through the original interface and send it only the IP address — no name, email, or account or device identifier.

Data Security

• Encrypted communication (HTTPS/TLS)
• Regular backups of our own servers; encrypted storage of Firebase services (Google Cloud)
• Secure authentication via email and password, Apple ID, or Google (passwords are managed by Firebase Authentication)
• Regular security audits
• Restricted data access

Data Retention

Data is retained for the following periods:

• Account and profile: for the duration of the account
• Concerts (data about concerts you have followed): 2 years after the event date
• “Today’s Activity” community section (posts, comments, videos): for the duration of the account or until manually deleted
• Concert Companion (invitations, requests, and ordinary messages): automatically deleted no later than 30 days after the relevant concert date or sooner when the account is deleted; a necessary report, moderation, or legal-defense record only for as long as required for that purpose
• SvětHudby (articles): retained indefinitely until removed by the editorial team
• Photos and videos: for the duration of the account/concert/post/article, or 2 years after a concert is removed from the database
• MyPassport (stamps, points, badges, statistics, travel map): for the duration of the account; upon account deletion, irreversibly deleted within 30 days
• Leaderboard (aggregated account data shown in the Leaderboard): while “Show me in the Leaderboard” is enabled; after you disable it, the summary is hidden from the Leaderboard while your MyPassport data is preserved
• Following artists: for the duration of the account
• Anonymous podcast playback sessions: automatically retained for 13 months; not linked to an account, visitor ID, or device identifier
• Usage statistics of the apps (sessions, screens, sections, actions, including data brought over from older app versions): 13 months
• Last known app version, date of last activity, and approximate account location: for the duration of the account; only the latest value is kept
• Server operation and security logs: 14 days
• Backups: max. 30 days after deletion

Your Rights (GDPR)

In accordance with Regulation (EU) 2016/679 (GDPR), you have the following rights:

Right of access (Art. 15 GDPR)

You have the right to obtain a copy of all the data we process about you — including registration data, MyPassport data (stamps, points, badges, statistics), community section data, Concert Companion data, your list of followed artists, and any other data. Submit your request to [email protected].

Right to rectification (Art. 16 GDPR)

You have the right to update inaccurate data in the App — you can edit your profile and your posts in the community section. You may also remove specific concerts from your MyPassport collection (which will update your points and badges). Submit your request to [email protected].

Right to erasure — “Right to be forgotten” (Art. 17 GDPR)

You have the right to request deletion of your account and all associated data, subject to the following:

• Account deletion: Settings → Delete Account. All your personal data, including posts in the “Today’s Activity” community section, will be irreversibly removed within 30 days.
• SvětHudby articles created by the editorial team (not by you) will remain, without your name.
• MyPassport (your stamps, points, badges, travel map, statistics) will be completely deleted.
• Your name and photo will no longer be visible in the Leaderboard.
• Your community posts will be deleted, but discussions or comments by other users referencing you may partially remain (shown as “Deleted user”).
• Concert Companion invitations, requests, and messages linked to your account will be deleted; the only exception may be a specific record that we are legally required to retain.

Submit your request to [email protected].

Right to restriction of processing (Art. 18 GDPR)

You have the right to restrict the processing of certain data. For example:

• You can turn off push notifications or location permission in your device settings.
• An overview of your choices is on the Privacy Choices page.

Submit your request to [email protected].

Right to data portability (Art. 20 GDPR)

You have the right to receive your data in a structured, commonly used, and machine-readable format (e.g. CSV or JSON). Submit your request to [email protected]. The export will be prepared within 30 days.

Right to object (Art. 21 GDPR)

You may object at any time to processing based on legitimate interest — in particular account-linked usage statistics and location estimated from the IP address — by writing to [email protected]. When you are not signed in, statistics are not linked to your account.

Right to withdraw consent (Art. 7(3) GDPR)

If you have given consent to processing (e.g. for marketing or location), you may withdraw it at any time:

• Push notifications: device settings → ProMusica → Notifications
• Location: device settings → ProMusica → Location
• Manual withdrawal: [email protected]

Right to lodge a complaint (Art. 77 GDPR)

You have the right to lodge a complaint with the supervisory authority: Czech Data Protection Office (ÚOOÚ), Pplk. Sochora 27, 170 00 Prague 7, www.uoou.cz.

Children and Age Restrictions

Concert Companion is available only to people aged 18 or over.

We do not knowingly collect data from children. If we discover that we have obtained data from a child, we will delete it immediately.

Cookies and Tracking

The mobile apps do not use cookies, cross-app tracking, or a device advertising identifier. The new apps collect their own usage statistics described in section 2.2 and do not use Firebase Analytics. Older app versions use Firebase Analytics: an app-instance ID (device identifier), an approximate location derived from a masked IP address, and after sign-in the analytics data may be linked to the Firebase Auth UID and account.

Podcast playback analytics use a separate anonymous data pipeline and start automatically with playback. We store one cumulative document per playback session, not a raw event log or unique-listener profile, and delete it automatically after 13 months. The web stores neither the playback UUID nor the server token in a cookie or web storage.

Separately, our own cookieless Umami installation measures aggregate web traffic. Umami stores no cookie or local Umami identifier in the browser, and we do not join it to mobile account analytics or podcast playback sessions.

For a signed-in user, the website records the date of the visit and estimates an approximate location from the IP address once per browser session (see section 2.2). The website uses no advertising or marketing cookies; cookies and browser storage are described on the Cookies page (in Czech).

Changes to This Policy

We will notify you of significant changes via push notification and in the App. By continuing to use the App, you agree to the updated Policy.

Contact