Terms of Service and Data Processing Agreement

Last updated: 2025-05-01

Part I — Terms of Service

1. Service description

FisEvents is a platform that allows organizers ("you", "the organizer") to publish events and collect registrations from participants. The platform is operated by Christian Zanchetta (fisevents@fiscet.it).

2. Account and eligibility

You must be at least 18 years old and acting in a professional or associative capacity to create an account. You are responsible for keeping your credentials confidential and for all activity under your account.

3. Pricing and payment

One event publication per calendar month is free of charge. Additional publications are subject to a fee, which is displayed before payment and processed securely via Stripe. All prices are exclusive of VAT where applicable.

4. Acceptable use

You agree not to publish events that are illegal, fraudulent, discriminatory, or violate third-party rights. We reserve the right to suspend or remove content that breaches these terms without prior notice.

5. Intellectual property

You retain ownership of any content you upload. By publishing an event you grant FisEvents a limited, non-exclusive licence to display that content to the public for the duration the event is active.

6. Limitation of liability

FisEvents provides the platform on an "as is" basis. We are not liable for any loss of revenue, data, or goodwill arising from use or unavailability of the service, except where required by mandatory law.

7. Governing law

These terms are governed by Italian law. Any disputes shall be submitted to the competent court of Treviso, Italy.

Part II — Data Processing Agreement (Art. 28 GDPR)

This Data Processing Agreement ("DPA") forms part of the Terms of Service and governs the processing of personal data in connection with your use of FisEvents, in accordance with Regulation (EU) 2016/679 (GDPR).

1. Roles

You, as the organizer, are the Data Controller with respect to the personal data of your event participants (name, email, phone). FisEvents acts as the Data Processor, processing that data solely on your instructions to provide the registration service.

2. Nature and purpose of processing

FisEvents processes participants' personal data to: store event registrations, send confirmation and reminder emails, and enable organisers to manage check-in and attendance. No personal data of participants is used for any other purpose.

3. Categories of data and data subjects

Data subjects: participants who register for your events.
Categories: full name (required), email address (required), phone number (optional).
No sensitive data (Art. 9 GDPR) is collected or processed.

4. Your obligations as Data Controller

Ensure you have a valid legal basis to collect participants' data (e.g. contract performance).
Provide participants with a privacy notice before or at the point of registration.
Respond to data subject requests (access, deletion, etc.) within GDPR deadlines.
Notify FisEvents promptly if you receive a data subject request that requires our assistance.

5. FisEvents obligations as Data Processor

Process personal data only on your documented instructions.
Ensure persons authorised to process the data are bound by confidentiality.
Implement appropriate technical and organisational security measures.
Assist you in fulfilling data subject rights requests.
Notify you without undue delay (and within 72 hours where feasible) of any personal data breach.
Delete or return all personal data upon termination of the service, at your choice.

6. Sub-processors

FisEvents uses the following sub-processors. By accepting these terms you authorise their use:

Sanity.io (Belgium, EU) — database storage of event and registration data.
Vercel Inc. (USA) — application hosting. Data transfers are covered by Standard Contractual Clauses.
Stripe Inc. (USA) — payment processing. Data transfers are covered by Standard Contractual Clauses.
Aruba S.p.A. (Italy, EU) — transactional email delivery.

7. Data retention

Participant identifying data (name, email, phone) is automatically anonymised 1 month after the event ends. Anonymous statistical records (check-in status, payment status) are kept for the duration of the organiser's account.

You may delete individual events or your entire account at any time from the admin dashboard, which permanently removes all associated registration data before the automatic schedule.

8. Contact

For any question regarding this DPA, contact: fisevents@fiscet.it