Privacy
This notice covers the personal data NightHall holds as a controller. Where NightHall holds an organizer's buyer data, the organizer is the controller and their own notice governs it. Two audiences, two controllers, and this page is written so the two cannot be confused.
Where NightHall is the controller
NightHall is the controller for the accounts of the people who use NightHall. That covers the organizers NightHall contracts with, its own business contacts, and its own invoices. That is the set this section describes.
Where NightHall is the processor
NightHall is a processor for an organizer's buyer data. The organizer is the controller of it, publishes their own privacy notice for it, and answers a buyer's request about it. What NightHall does with it, and under what instruction, is in the data processing agreement.
What NightHall holds as a controller, and why
| Data | Why | Basis | Kept for |
|---|---|---|---|
| An account's name and email address | To sign somebody in and to address them | Performance of the contract | While the account exists |
| Sign-in metadata from the identity provider | To know a sign-in happened and whether a second factor was proven | Legitimate interest in securing accounts | Twelve months |
| An organizer's legal identity, address and tax number | To invoice them and to answer a tax question | Legal obligation | Seven years from the last invoice |
| An audit entry naming who did what | To answer what happened to an organizer's data | Legal obligation and legitimate interest | Seven years |
| Support correspondence | To answer the question asked | Performance of the contract | Two years |
NightHall does not profile anybody, does not advertise, and runs no tracking on its own surfaces beyond what a session needs. No automated decision affects a buyer: every fraud signal stays advisory, and nothing is blocked or refunded automatically.
Where it is held
In the European Union. Every store is pinned to a European region. Who holds it, and which of those providers has a parent company outside the European Union, is set out openly on the sub-processor page. A claim that data never leaves has to survive a list of United States companies rather than assert it.
Who else sees it
The processors in that list, each under a data processing agreement, and nobody else. NightHall sells nothing to anybody.
What a person can ask for
A person may ask what is held about them and ask for a copy. They may ask for a correction or a deletion, and may restrict a processing. They may ask for portability where it applies, and may object to a processing based on legitimate interest. NightHall answers within one month. A deletion NightHall cannot make, because the law requires the record, is refused with the ground stated rather than ignored.
Complaints
A complaint goes to NightHall first, at info@litenova.solutions. A complaint about how NightHall answered goes to the Autoriteit Persoonsgegevens in the Netherlands. A person living in another country goes to the supervisory authority in their own country.
Cookies on this site
This site sets none. The cookie page says so and lists the strictly necessary cookies the rest of the product sets.
Changes
A version of this notice is published and kept, and what changed between two versions is readable because both remain.