1. Who We Are

Fresqo is operated by ArtPass UG (haftungsbeschränkt), registered in Berlin, Germany. Fresqo is a marketplace where communities and hosts offer creative sessions, classes, and subscription-based experiences.

Our contact details (including address and email) are provided in the Impressum on our website. For any privacy-related queries, or to exercise your rights, see Section 13.

2. Information We Collect

We may collect the following categories of data:

• Account information: name, email, phone number, password, and profile details.
• Marketplace data: classes and subscriptions you host or join, bookings, reviews, communications, community memberships.
• Host data: bank details for payouts, tax information, and business information if required by law.
• Payment information: processed via Stripe; we do not store full card numbers.
• Authentication data: if you sign in with Google, we receive profile details from Google.
• Usage & technical data: IP address, device, browser type, cookies, analytics data (via PostHog for product improvement and error tracking).
• Communications: messages sent to us or between hosts and participants via the platform.
• User-generated content: reviews, comments, or community posts.

3. How We Collect Data

• When you create an account or sign in (via email or Google).
• When you make or accept bookings, subscriptions, or payments.
• When you host or join a session, community, or event.
• When you post reviews, comments, or other user-generated content.
• Through cookies and analytics when you use the platform.
• When you communicate with Fresqo support.

4. Purposes and Legal Bases

We process data for the following purposes, under GDPR legal bases:

• Contractual performance: to create accounts, process bookings, payments, payouts, and subscriptions.
• Legitimate interest: to personalise recommendations, improve the platform, and ensure marketplace trust.
• Consent: for marketing emails, optional personalisation, and analytics.
• Legal obligation: to comply with tax, accounting, and regulatory requirements.

5. User-Generated Content & Community Features

• Reviews, posts, or community discussions you create may be visible to other users.
• You are responsible for ensuring you do not share third-party personal data.
• Fresqo reserves the right to moderate or remove harmful or unlawful content.

6. Subscriptions & Auto-Renewals

• When you purchase a subscription (from Fresqo or a host), payment information is stored securely by Stripe.
• Subscriptions auto-renew unless cancelled. You can manage cancellation through your account.
• We retain transaction records as required by tax law.

7. Marketing & Communications

• We may send service updates, booking confirmations, and platform announcements.
• With your consent, we may send newsletters and promotional emails.
• You can opt out of marketing at any time by clicking "unsubscribe" or adjusting your account settings.
• Hosts may contact participants only in connection with bookings or subscriptions.

8. Profiling & Recommendations

• Fresqo may analyse your activity (bookings, preferences, communities joined) to recommend classes or communities.
• This is considered "profiling" under GDPR.
• You may opt out of personalised recommendations.

9. How We Share Data

We may share personal data in the following ways:

• With hosts/organisers: your name, booking details, and relevant profile information. Your email is not shared unless required.
• With other participants: profile name or comments may be visible in shared spaces.
• With service providers: Stripe (payments), Google (authentication), PostHog (analytics), cloud hosting, and email providers.
• With legal authorities: if required by law.
• During business transactions: in case of merger, acquisition, or restructuring.
• With your consent: where you explicitly allow.

We do not sell your personal data.

10. International Transfers & Data Storage

• Fresqo stores data on cloud infrastructure. Where possible, servers are in the EU.
• If data is transferred outside the EU/EEA (e.g., US-based cloud or Stripe), we use GDPR safeguards such as Standard Contractual Clauses.

11. Data Retention

• We retain account and booking data as long as your account is active.
• Payment and transaction records are stored for statutory periods (e.g., 6–10 years for tax law).
• User-generated content remains until deleted or your account is closed.
• When data is no longer needed, we delete or anonymise it.

12. Your Rights under GDPR

You have the right to:

• Access your personal data.
• Correct inaccurate data.
• Request deletion ("right to be forgotten").
• Restrict or object to processing.
• Data portability (structured, machine-readable copy).
• Withdraw consent at any time.
• File a complaint with the Berlin Data Protection Authority.

We respond to rights requests within one month.

13. Contact

For questions or to exercise your rights, contact: