Privacy Policy
Last updated: August 2026
This Privacy Policy explains how What’s The Situ ("WTS", "we", "us", or "our") collects, uses, stores, and protects your personal data in accordance with the EU General Data Protection Regulation (GDPR) and the Dutch General Data Protection Regulation Implementation Act (Algemene verordening gegevensbescherming - AVG).
1. Data Controller
What’s The Situ (WTS)
Based in Amsterdam, Netherlands
KvK Number (Chamber of Commerce): 42134075
Contact Email: hello@wts.network
2. Personal Data We Collect
When you interact with our web application, vote on upcoming event formats, or register your interest, we collect the following personal information:
Identity & Contact Data: Full name, email address, and city.
Preferences & Engagement Data: Preferred event formats, voting selections, event suggestions, and attendance frequency (e.g., monthly, occasionally).
Technical & Anti-Spam Data: IP address, browser type, and interaction verification tokens processed via Cloudflare Turnstile to prevent automated bots.
3. Legal Basis and Purposes of Processing
We process your personal data under the following legal bases pursuant to Article 6(1) of the GDPR:
Consent (Art. 6(1)(a) GDPR): To send you priority event announcements, community invites, and updates regarding upcoming situations in Amsterdam and other cities when you opt in or join our mailing list. You can withdraw your consent at any time via the unsubscribe link in our emails.
Legitimate Interest (Art. 6(1)(f) GDPR): To analyze community preferences, curate event programming based on member votes, maintain website security, and prevent spam or malicious submissions.
4. Data Sharing and Third-Party Processors
We do not sell, rent, or trade your personal data to third parties. We share data only with trusted third-party service providers (Data Processors) that enable our web application to function under strict data protection agreements:
Database Infrastructure: Supabase Inc. (Encrypted database hosting with Row Level Security enabled).
Anti-Bot & Security: Cloudflare, Inc. (Cloudflare Turnstile widget used for non-invasive bot verification).
Email Communication: Resend / Postmark (Transactional email API used solely to deliver updates and confirmations).
All data transfers to service providers outside the European Economic Area (EEA) are governed by Standard Contractual Clauses (SCCs) to ensure an adequate level of data protection.
5. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including community updates and event planning. If you request the removal of your data or unsubscribe from our communications, your information will be deleted within 30 days.
6. Your Rights Under the GDPR / AVG
As a data subject located in the EU or Netherlands, you hold the following rights regarding your personal data:
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete personal data.
- Right to Erasure ("Right to be Forgotten"): Request the complete deletion of your personal data from our databases.
- Right to Restrict Processing: Request that we temporarily halt processing your personal data.
- Right to Data Portability: Receive your personal data in a structured, commonly used, and machine-readable format.
- Right to Withdraw Consent: Withdraw your consent for email marketing at any time.
To exercise any of these rights, send an email to privacy@wts.network.
7. Data Security
We implement appropriate technical and organizational security measures to protect your data against loss, unauthorized access, or disclosure. All data transmissions across our platform are encrypted via Transport Layer Security (TLS/HTTPS). Database access is restricted to write-only permissions for public users through Row Level Security (RLS) policies.
8. Complaints & Dutch Data Protection Authority
If you believe we are processing your personal data in violation of GDPR regulations, please contact us first so we can resolve the issue. You also have the right to lodge a complaint directly with the Dutch Supervisory Authority:
Autoriteit Persoonsgegevens (AP)
Bezuidenhoutseweg 30
2594 AV Den Haag, Netherlands
Website: autoriteitpersoonsgegevens.nl
9. Cookie Management
We only set essential security cookies for Cloudflare Turnstile bot verification and Supabase session handling. You can review or change your choice at any time.
