1. Data controller
TheBoom is the data controller of your personal data under GDPR.
Contact: privacy@the-boom.org
2. Data we collect
When you use TheBoom, we collect the following data:
- •First name — primary identifier within the boom
- •Profile picture and bio — provided voluntarily
- •Email address — optional, used for login and notifications
- •Selected songs, votes and music preferences
- •Posts, comments and reactions on the boom wall
3. Purpose of processing
Your data is used exclusively to:
- •Coordinate and organize the private event (the boom)
- •Build a collective memory shared between members
- •Send login credentials and notifications related to the boom
Legal basis: contract performance (participation in the boom) and legitimate interest (collective memory).
4. Data retention
Your data is retained as long as the boom exists. Our vision is to preserve these memories for life.
Booms inactive for more than 3 years are archived. Members registered with an email receive a notification 30 days before archiving. After archiving, data is permanently deleted.
5. Your rights
Under GDPR, you have the following rights:
- •Access and rectification — directly from your profile in the app
- •Erasure — via the "Delete my account" button in your profile
- •Portability — on request to support@the-boom.org
- •Objection and restriction — on request to privacy@the-boom.org
You may also lodge a complaint with the French CNIL ( cnil.fr ) or your local data protection authority.
6. Subprocessors
Your data may be processed by the following subprocessors, bound to TheBoom by Standard Contractual Clauses (SCC) ensuring an adequate level of protection:
MongoDB Atlas
Database hosting
Cloudinary
Image storage and transformation
Resend
Transactional email delivery
Hetzner
Application server hosting
7. Minors consent
TheBoom may be used with participants under 15. In this case, the MC (boom organizer) declares, when creating accounts, having obtained the consent of a parent or legal guardian for each minor participant.
TheBoom does not knowingly collect data from minors without this prior consent.
8. DPO contact
For any question regarding the protection of your data, you may contact our Data Protection Officer:
privacy@the-boom.org