Legal

Delete your data

How to have your data deleted from the Cothena Guest and Cothena Staff apps, published by MergeLabs GmbH.

Email a deletion request

Drafted in good faith and pending review by a qualified lawyer before general availability.

How to ask

If you use Cothena Guest, email us. It takes three steps, below. If you use Cothena Staff, start with your organiser instead.

  1. Email us

    Write to [email protected] from the email address you used in the app, with the subject "Data deletion request". You do not need the app installed.

  2. Tell us which event

    Say which app you used and which event or organiser it was for, so we can find your details.

  3. We confirm and delete

    We confirm we have your request, may ask one question to check it is really you, and delete your data within 30 days. We email you when it is done.

Uninstalling the app or signing out does not delete anything we hold about you; only a request does. If you cannot email from the address you used in the app, write from another one and tell us the original. We will ask a question to confirm it is yours before we act.

What is deleted, and what is kept

Cothena Guest

Deleted

  • Your first and last name
  • Your email address

Kept

  • Your bookings, anonymised so they no longer identify you
  • Invoices for paid bookings, for the legal bookkeeping period

Cothena Staff

Deleted

  • Your sign-in account, which closes it
  • Your first and last name
  • Your email address

How long anything is kept

Your bookings are anonymised rather than deleted. Your name and email address are removed from them, and what remains, such as what was booked and when, can no longer be linked to you. It is kept so the organiser's attendance figures stay correct.

Invoices for paid bookings are kept for as long as German commercial and tax law requires for bookkeeping, currently up to ten years. They are used for nothing else and deleted when that period ends.

Everything else is removed from the live system within 30 days of your request, and drops out of our backups as they expire on their normal cycle.

Who else is told

The apps are run on behalf of the organiser of your event, who decides what is collected; we process it for them. When we delete your data we tell that organiser, so their own records match. You do not need to contact them separately.

Your other rights

Deletion is one of your rights under the GDPR. You can also ask for a copy of your data or have it corrected, at the same address. The privacy policy sets out the rest, and the imprint has our postal address.