Privacy Policy

Last updated: 10.11.2025

BandsBuddy d.o.o. ("BandsBuddy", "we", "our", or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our community-based platform for musician networking, event planning, and communication (the "Application" or "App").

1. Personal Data We Collect

Depending on how you use the App, we may collect the following personal data:

Basic account information (required for registration and App use):

• First and last name
• Email address
• Date of birth
• Location (latitude and longitude)
• Musical instruments
• Musical genres

Optional profile information (enhances visibility and networking features, enables posting advertisements):

• Gender
• Biography
• Profile and background photo
• Band memberships
• Event participation (past or upcoming performances)
• Advertisements or posts created by the user
• Links to social media profiles
• Telephone number (for direct contact if you choose to display it)

Automatically collected data:

• App usage data and activity logs
• Device information (type, operating system, IP address)
• Communication data (messages exchanged through the App — stored securely and not publicly visible)

If we intend to further process personal data for a purpose other than that for which they were collected, we will provide you with information about that additional purpose and all other relevant information before such further processing.

2. Purposes and Legal Bases for Processing

We process your personal data based on the following purposes and legal grounds:

Purpose	Data Used	Legal Basis
To create and manage your user account and profile	Basic account data	Performance of contract (to provide App services)
To connect you with other musicians and allow networking and collaboration	Profile data, ads, band memberships, events	Legitimate interest (to enable the platform's purpose)
To facilitate messaging and communication between users	Message content, contact info	Performance of contract
To personalize your experience and improve our services	Usage and technical data	Legitimate interest
To enable posting of advertisements and event listings	Optional profile and ad data	Consent (when you choose to share it)
To comply with legal obligations	Identification and transaction records	Legal obligation

We do not use your data for automated decision-making or profiling that produces legal effects.

3. Data Retention

We retain your personal data only as long as necessary for the purposes for which it was collected or as required by law.

• Data related to your user account will be deleted once you delete your account.
• Backups or server logs may persist for a limited period (up to 90 days) for security and integrity purposes before being deleted.

4. Data Security

We implement appropriate technical and organizational measures for security of your data and protection from unauthorized access, loss, or disclosure. We adhere to strict security procedures to minimize the risk of data destruction, unauthorized disclosure, unauthorized access to your data, and other breaches.

These include:

• Secure servers in controlled environments
• Encryption, pseudonymization, and strong password protection
• Firewalls and antivirus systems
• Access restrictions limited to authorized personnel only
• Our employees are bound by confidentiality regarding all data they learn in the course of their work
• Regular staff training on data protection and confidentiality
• Other appropriate measures as necessary

5. Sharing and Disclosure of Personal Data

We may share your data only in the following cases:

• With other users: Limited profile information (name, musical instruments, musical genres, biography, bands, ads, social links) is visible to other registered users to support networking.
• With service providers: Trusted partners who provide hosting, maintenance, or technical support, bound by confidentiality and data protection obligations.
• When legally required: If mandated by law, regulation, or a court order.

We do not sell, rent, or trade your personal data.

6. International Transfers

We currently do not transfer personal data to third countries or international organizations.

If this changes, we will ensure that appropriate safeguards (such as Standard Contractual Clauses) are in place and notify you before any transfer.

7. Your Rights

You have the following rights under data protection laws:

• Access: Request a copy of your personal data.
• Correction: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your data ("right to be forgotten").
• Restriction: Request limitation of processing in certain circumstances.
• Portability: Request transfer of your data to another data controller.
• Objection: Object to processing based on legitimate interests.
• Withdraw consent: Withdraw consent where processing is based on it (without affecting prior lawful processing).
• Complaint: File a complaint with the supervisory authority at https://azop.hr.

To exercise your rights, contact us via the contact details in Section 13.

We may need to verify your identity before processing your request. We will respond within one month, or up to two months in complex cases (you will be notified of any delay).

If you believe that our processing violates data protection regulations, you may lodge a complaint with the Croatian Personal Data Protection Agency (Agencija za zaštitu osobnih podataka), the competent supervisory authority for data protection matters:

Agencija za zaštitu osobnih podataka
Ulica Metela Ožegovića 16, HR – 10000 Zagreb
Email: azop@azop.hr
Tel: +385 (0)1 4609-000
Fax: +385 (0)1 4609-099
Web: www.azop.hr

8. Delete Account

8.1. Delete account requirements

If you have band profiles with multiple musicians, and you are the only admin in band profile, you must transfer admin rights to another musician before deleting your account, or remove all musicians from band and delete band profile.

8.2. Delete account steps

In order to protect the user's privacy and personal information, if the user no longer uses BandsBuddy account, the user can delete the account in the App. The specific steps are:

• Open BandsBuddy app
• Click on "Settings" at bottom navigation
• In the Settings list click on Account
• On next screen click "Delete account"
• If you fulfilled all requirements from "Delete account requirements" you can delete your account, otherwise you will be navigated through the flow to fulfill them.

After the account is deleted, all the user's data will be deleted.

9. Children's Privacy

Our App is not intended for individuals under the age of 18. We do not knowingly collect personal information from anyone under 18 years of age. If you are a parent or guardian and believe that we may have collected information from a minor, please refer to section 13 for contact details.

10. Child Safety Standards

Bands Buddy is strictly intended for users aged 18 and over. We strongly condemn all forms of child sexual abuse and exploitation (CSAE). Such content and behavior are strictly prohibited on our platform.

Users can report any inappropriate behavior or content directly through the in-app reporting system or refer to section 13 for contact details. All reports are reviewed promptly, and appropriate action is taken, including cooperation with relevant authorities where required.

Bands Buddy complies with all applicable child protection laws and fully supports global efforts to combat online abuse and exploitation.

11. Confidentiality

All information and data related to the Application are considered confidential. Neither BandsBuddy nor any user shall disclose such information to third parties without prior written consent, except as required by law or App Policy/Terms.

"Confidential Information" is understood as any piece of information supplied in writing, verbally or by any other means, by one Party to the other.

Either Party may disclose Confidential Information only in the following circumstances:

• when disclosure is required under mandatory provisions of law, by a court order, or by a decision of a public administration authority, and only to the extent necessary to comply with such requirement;
• when the information was already known to receiving Party before use of App, or is already publicly available;
• when the information is lawfully obtained from a third party authorized to disclose it;
• when disclosure is necessary to engage the services of an auditor or legal advisor, under a duty of confidentiality; or
• when receiving Party has received prior written authorization from disclosing Party to make such disclosure.

All Confidential Information disclosed shall remain the property of the disclosing Party.

If we provide co-branded services — such as promotions, competitions, or events — in partnership with or alongside a third party, we may share the information you submit with that third party. The use of your information by that third party will be governed by their own privacy policy, which we encourage you to review carefully. Their privacy policy may also explain how their service providers handle your personal data.

We require all third parties to protect your information, maintain its confidentiality, and process it only in compliance with applicable laws. We do not permit our third-party service providers to use your information for their own purposes and allow them to process it solely for the specific purposes we define.

12. Updates to This Privacy Policy

We may update this Privacy Policy from time to time. All updates will be published in the App and on our website. The changes take effect upon publication. We encourage you to check this page regularly to stay informed about how we protect your data.

13. Contact Us

If you have any questions about this Privacy Policy or our data protection practices (including DPO contact), please contact us at:

BandsBuddy d.o.o.
Address: Ulica Ferde Rusana 19, 10000 Zagreb, Republic of Croatia
OIB: 27245326867
Email: support@bandsbuddy.com