Privacy Statement

1. About this Privacy Statement

This Privacy Statement explains how DLB Ventures processes personal data in connection with Planr, planr.events, Planr Accounts, subscriptions, demonstrations, sales, billing, support, security and related services.

Planr is operated by DLB Ventures, established at Veerstraat 28, 6701 DW Wageningen, the Netherlands, registered with the Dutch Chamber of Commerce under number 42122973. Questions may be submitted to contact@planr.events.

This Statement applies where DLB Ventures determines the purposes and means of processing and acts as data controller. Where DLB Ventures processes personal data solely on behalf of a Planr Customer, the Customer generally acts as controller and DLB Ventures as processor.

2. Controller and processor roles

DLB Ventures generally acts as controller for data required to operate its own business and Planr, including Account administration, subscriptions, billing, sales, demonstrations, support, security and its commercial relationship with Customers.

Customers may use Planr to process information relating to their events, employees, crew, artists, management, suppliers, promoters, guests, visitors, ticket buyers, freelancers, contractors, contacts and other operational persons. Where a Customer determines why and how that information is used, the Customer is controller and DLB Ventures processes it on the Customer's behalf.

Processor processing is governed by a data processing agreement satisfying Article 28 GDPR. Requests concerning Customer-controlled personal data should normally be directed to the Customer.

3. Personal data processed by DLB Ventures

When an Account is created or used, DLB Ventures may process a User's name, business email, organisation, job title, role, permissions, User identifier, Account status, authentication information, login activity and information relevant to Account and platform security.

For Customers and prospective Customers, DLB Ventures may process company and contact information, business addresses, correspondence, quotation and contract information, Subscription information, Account ownership information, support history and information provided during sales enquiries or demonstrations.

For billing, DLB Ventures may process invoice information, billing details, amounts, payment status, payment dates, due dates, transaction identifiers and payment history. Where Stripe processes payment credentials directly, DLB Ventures does not need to receive or store complete card information.

Technical information may include IP addresses, timestamps, browser and device information, operating systems, session information, login attempts, system and audit logs, errors, security events and use of Planr functionality.

4. Customer-controlled information within Planr

The exact Customer Data processed depends on how each Customer configures and uses the Service. It may concern event administration, contacts, companies, artists, artist management, riders, crew, planning, timetables, travel, accommodation, accreditations, access requests, backstage access, guest lists, ticket information, merchandise, stock, financial administration, budgets, settlements, leads, documents, operational notes, communications and related event operations.

DLB Ventures does not independently determine the Customer's purposes for Customer-controlled personal data. The Customer is responsible for lawful collection, legal basis, retention and access controls.

5. Special categories of personal data

Planr is not primarily intended for special categories of personal data under Article 9 GDPR. A Customer may nevertheless decide that accessibility requirements, allergies or dietary requirements are necessary for event operations. The Customer is responsible for determining necessity and lawfulness and for applying appropriate safeguards. DLB Ventures recommends not recording sensitive information unless genuinely necessary.

6. Purposes and legal bases

As controller, DLB Ventures processes personal data where necessary to enter into or perform an Agreement, including creating and managing Accounts, providing access to Planr, administering Subscriptions, processing billing and providing support.

DLB Ventures processes data to comply with statutory obligations, including accounting, tax, administrative and regulatory obligations.

DLB Ventures may rely on legitimate interests such as securing Planr, preventing and investigating fraud or misuse, maintaining reliability, diagnosing technical issues, protecting legal rights, managing Customer relationships and improving stability and usability. Where consent is required, it is requested beforehand and may be withdrawn without affecting prior lawful processing.

7. Sources of personal data

DLB Ventures generally receives personal data directly from Users, Customers, prospective Customers and persons who contact Planr. It may also receive information from a Customer creating an Account, authorised Integrations, payment providers, security and infrastructure providers or other business systems. Where a Customer enters data about another person, DLB Ventures generally receives it from the Customer.

8. Recipients and service providers

DLB Ventures may engage providers for hosting, infrastructure, databases, authentication, payment processing, transactional email, security, monitoring, error detection, support and other technical functions. Access is limited to what is reasonably necessary. Where a provider qualifies as a processor, appropriate contractual arrangements are used. DLB Ventures does not sell personal data to advertisers or provide Customer Data to third parties for unrelated advertising.

9. Integrations

Customers may connect Planr with ticketing platforms, ecommerce services, payment providers, APIs, webhooks and other operational services. When an Integration is activated, data may be exchanged to the extent necessary. The Customer is responsible for deciding whether the Integration is appropriate and lawful. Independent third-party providers may process information under their own privacy documentation.

10. International transfers

Some service providers may process personal data outside the Netherlands or European Economic Area. Where the GDPR requires additional safeguards, DLB Ventures relies on a lawful transfer mechanism, such as an adequacy decision, European Commission Standard Contractual Clauses or another legally permitted mechanism.

11. Security

DLB Ventures implements technical and organisational measures appropriate to the nature of Planr, the personal data processed and associated risks.

• Encrypted communications
• Authentication and authorisation controls
• Role-based access and User permissions
• Logical separation of Customer Workspaces
• Logging, monitoring and backups
• Restricted infrastructure access
• Software maintenance and incident response

No online system can provide an absolute guarantee against every security incident. Customers remain responsible for their Accounts, Users, devices, credentials, permissions and connected services.

12. Retention

DLB Ventures retains personal data only as long as reasonably necessary or longer where required or permitted by law. Account and Customer relationship information may be retained during the relationship and afterwards for administration, security, disputes, legal claims and statutory obligations. Financial records follow applicable statutory periods. Technical and security logs are retained proportionately for security, fraud prevention, investigation and troubleshooting.

Customer-controlled data is generally retained for the duration of the Customer Agreement. After termination it may remain temporarily available for export, legal compliance, security or dispute resolution, and residual copies may remain in backups until overwritten. Contractually agreed retention periods prevail.

13. Cookies and similar technologies

Planr and planr.events may use cookies, browser storage and similar technologies necessary for authentication, security, session management, preferences and core functionality. Analytics, marketing or other non-essential tracking technologies requiring consent will not be activated before that consent is obtained. Users may receive cookie or consent controls where legally required.

14. Automated processing

Planr may provide calculations, forecasts, alerts, ticket projections, automated workflows, recommendations or AI-assisted functionality. Unless expressly disclosed otherwise, DLB Ventures does not use these functions as controller to make solely automated decisions producing legal or similarly significant effects within Article 22 GDPR. Future processing will include required information and safeguards.

15. Rights of individuals

Where DLB Ventures acts as controller, individuals may, subject to GDPR requirements and exceptions, request access, rectification, erasure, restriction, certain portable information and object to processing based on legitimate interests. Consent may be withdrawn at any time. Requests may be submitted to contact@planr.events.

DLB Ventures may request information reasonably necessary to verify identity and will not request more than reasonably necessary. Requests are handled within the period required by the GDPR, generally one month, subject to permitted extensions and exceptions. Requests concerning Customer-controlled data should normally be directed to the Customer.

16. Complaints

Questions or concerns may be submitted to DLB Ventures through contact@planr.events. Individuals also have the right to lodge a complaint with the competent supervisory authority. For DLB Ventures in the Netherlands, this is the Autoriteit Persoonsgegevens.

17. Children

Planr is a professional B2B service and is not directed at children as a consumer service. Where a Customer processes data concerning minors, that Customer is responsible for an appropriate legal basis and required safeguards.

18. Personal data breaches

DLB Ventures maintains procedures for assessing and responding to security incidents involving personal data. Where DLB Ventures acts as processor and becomes aware of a breach involving Customer-controlled data, it will notify the Customer without undue delay as required by law and the data processing agreement. As controller, DLB Ventures assesses notification duties to authorities and affected individuals.

19. Changes to this Privacy Statement

DLB Ventures may amend this Statement to reflect changes to Planr, processing activities, service providers, Integrations or applicable law. The current version will be published on planr.events. Where a change materially affects processing, additional notice will be provided where required or appropriate.

20. Contact

Questions, privacy requests and other enquiries may be submitted to DLB Ventures through contact@planr.events.