Privacy Policy
Information pursuant to Art. 13, 14 GDPR
1. Controller
MZK Media Ltd.
Lordou Vyronos 61-63
6023 Larnaca, Cyprus
Company number: HE 483959
VAT: CY60275907F
Email: hello@cytec.app
Web: www.cytec.app
2. General data processing
We process our users' personal data only to the extent necessary to provide a functional website and our content and services. Legal bases are in particular Art. 6 (1) (a) (consent), (b) (contract performance), (c) (legal obligation) and (f) (legitimate interest) GDPR.
3. Server log files
When you access our website, your browser automatically transmits information to our server and stores it temporarily in log files: IP address, date and time, requested page, referrer URL, browser and operating system. Legal basis: Art. 6 (1) (f) GDPR (stability and security). Retention: max. 30 days.
4. Customer account & ticket purchase
When you register and buy tickets, we process: first and last name, email, phone (optional), date of birth, city/country and order and ticket data. We use this data to fulfil the contract and run the event (e.g. door check). Legal basis: Art. 6 (1) (b) GDPR. Retention according to commercial and tax law (up to 10 years).
5. Guest checkout
For guest purchases we only process data needed for the order (name, email, optionally phone). Legal basis: Art. 6 (1) (b) GDPR.
6. Payment processing (Stripe)
Payments are processed by Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Dublin, Ireland. Payment and transaction data is sent directly to Stripe; we ourselves do not store full payment-method data. Legal basis: Art. 6 (1) (b) GDPR. Details: stripe.com/privacy.
7. Newsletter
We use a double opt-in for our newsletter. Data processed: email, sign-up and confirmation time. Legal basis: Art. 6 (1) (a) GDPR. You can withdraw your consent at any time via the unsubscribe link in each email or by writing to hello@cytec.app.
8. Contact form & email
When you contact us, we process the data provided (name, email, message) to handle your request. Legal basis: Art. 6 (1) (b) or (f) GDPR. Stored until the request is fully handled, at most until you withdraw consent.
9. Affiliate / partner programme
For partner applications and payouts we process master, contact and billing data. Legal basis: Art. 6 (1) (b) GDPR and tax obligations.
10. Processors & hosting
Hosting, database and authentication run on Lovable Cloud (based on Supabase, servers in the EU). Transactional email and newsletter delivery uses Resend or comparable services. Data processing agreements pursuant to Art. 28 GDPR are in place with all providers.
11. Cookies & local storage
We use technically required cookies and localStorage to store session, language and checkout information. Legal basis: Art. 6 (1) (f) GDPR. No tracking or marketing cookies are set without explicit consent.
12. Your rights
You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), objection (Art. 21) and to withdraw consent (Art. 7 (3) GDPR). Please send requests to hello@cytec.app.
You also have the right to lodge a complaint with a data protection authority, in particular the Office of the Commissioner for Personal Data Protection (Cyprus).
13. Data security
We use TLS encryption and technical and organisational measures pursuant to Art. 32 GDPR to protect your data against loss and unauthorised access.
14. Updates
This privacy policy is updated when our services or legal requirements change. Last updated: June 2026.
