For your board and your data protection contact
Privacy and security
What Scenedata stores, where it lives, who can reach it and how long it is kept, for whoever at your venue signs off on a new system.
Who is responsible
Your venue is the data controller. Scenedata processes the answers on your behalf, under a data processing agreement (databehandleraftale) that we sign with you before your posters are printed, so it is in place before the first answer arrives. It names our two sub-processors:
- Vercel
- Hosts the app. The code that reads and writes your data runs in Frankfurt, Germany.
- Neon
- Runs the database, in Frankfurt, Germany.
What is stored
About the people who answer:
- Stored
- Role, gender, time, which show, and whether the person answered or someone else counted them
- With a group report
- A random id for that send, so a resend over a bad connection counts once
- Never asked for
- Names, phone numbers, email addresses
- On the phone
- The id of its own answer, so it can be corrected
About your staff: their email address, their password as a hash (never the password itself), their role and when they last signed in.
Where it lives
Each customer has a database of its own, never shared with another venue, in Frankfurt. It can be restored to any moment in the last seven days.
Who can see it
Only the accounts your venue holds, and ours. Staff run events, enter counts, print posters and export. Admins can also add and remove accounts and run the calendar import. Our own account is listed on your users screen with the rest, so you can see everyone who has access.
How accounts are protected
- A new account starts with a one-time password, which has to be replaced at the first sign-in.
- A session ends after 12 hours, or when the browser is closed.
- Changing a password signs out every other session on that account.
- Repeated failed sign-ins are slowed down.
- Every Scenedata address is HTTPS only.
What is kept, and for how long
- Answers are never deleted automatically: they are the record your reports are built on. A concert that disappears from your calendar is marked as withdrawn, not removed.
- An event that has answers can only be deleted by us, at your request, and the deletion is recorded with the number of answers it held.
- The record of deletions and account changes is kept for 12 months.
- Our host keeps IP addresses in its logs for a short while. They are never stored with an answer.
On the form
The person scanning the poster sees your privacy notice right above the send button, with a link to your venue's own privacy policy, so it is in front of them when they decide to send. The form needs no app and no account.
This website
scenedata.dk sets no cookies, runs no analytics and loads nothing from another site.
Questions from your IT department?
Write to us for the data processing agreement, or with anything your IT department or data protection contact wants to know.