With this Privacy Policy, we—FAMFAM AG (“FAMFAM,” “we”) and the FAMFAM Foundation (“FAMFAM Foundation”)— you, as a user (“User,” “you”), about the processing of your personal data in connection with your use of the FAMFAM App (“App”) and its features, as well as your rights under data protection law.
The data controller within the meaning of Article 4(7) of the GDPR for the processing of your personal data in connection with the App is:
FAMFAM AG Schollenmatt 2 8832 Wollerau Switzerland Email: hello@famfam.app
The entity responsible for processing your personal data when you make a donation to the FAMFAM Foundation, as defined in Article 4(7) of the GDPR, is:
FAMFAM Foundation Grossmannstrasse 30 8049 Zurich Switzerland Email: hello@famfamfoundation.com
Joint Control In certain cases (e.g., when processing donation data), FAMFAM AG and the FAMFAM Foundation may act as joint controllers in accordance with Article 26 of the GDPR. In such cases, they have entered into a joint controller agreement that transparently defines their respective roles and responsibilities regarding the processing of your personal data.
FAMFAM AG and the FAMFAM Foundation have not appointed a data protection officer. This decision is based on the following considerations:
Under Article 37 of the GDPR, there is an obligation to appoint a data protection officer if any of the following conditions are met: (1) the processing is carried out by a public authority or public body, (2) the core activity of the controller consists of the extensive, regular, and systematic monitoring of data subjects; or (3) the core activity consists of the extensive processing of special categories of personal data pursuant to Article 9 of the GDPR.
None of these conditions are met: FAMFAM AG and the FAMFAM Foundation are organized under private law. Their core activity consists of operating a music and culture platform and promoting nonprofit projects. Special categories of personal data within the meaning of Article 9 of the GDPR are not processed.
Since FAMFAM AG is headquartered in Switzerland, Swiss data protection law (revDSG) must also be observed. According to Art. 10 revDSG, there is no general obligation for data controllers under private law to appoint a data protection officer; such an obligation applies exclusively to federal agencies. A voluntary appointment is nevertheless possible and is reviewed on an ongoing basis.
For inquiries regarding data protection, please contact: hello@famfam.app
When you use the app and its features, we automatically process the following data in particular:
• IP address • Operating system
• Device models • Geographic
• Time zone • Account and profile data
• Payment data • Device and usage information
• Order and ticket information
To use the app, you must create a personal FAMFAM user account (“User Account”). You can manage your settings in your User Account. To create a User Account, we ask that you provide the following information:
• Name • Email
If you purchase tickets through the app, we also need:
• Date of birth • Address
After you register a user account, we process your email address every time you log in to the app. You can also add optional information such as a username and a personal profile picture
Note: When you download the app, information is also processed by the respective app store (e.g., Apple App Store, Google Play Store), specifically the username, email address, and customer number of your respective app store account, the time of the app download, payment information (if applicable), and the unique device identifier. In addition, the respective app store independently collects various data. We have no influence over this data processing by the app stores and are not responsible for it.
We process users’ personal data exclusively in accordance with applicable data protection laws, in particular the GDPR. Processing takes place only to the extent necessary to provide a fully functional app, to process orders and payments, to send notifications, or to improve our services. The collection and processing of your personal data is necessary to provide you with the app and its features. The legal basis for processing the data is Article 6(1)(f) of the GDPR (legitimate interest). Our legitimate interest consists in providing a fully functional app and ensuring its stability and security. In addition, processing is carried out in particular for the following purposes:
Purpose: Provision of the app and its features Legal Basis: Article 6(1)(b) of the GDPR
Purpose: Payment processing Legal Basis: Article 6(1)(b) of the GDPR
Purpose: Sending Push Notifications Legal Basis: Art. 6(1)(a) GDPR
Purpose: Analysis and Improvement of the App Legal Basis: Art. 6(1)(a) GDPR
Purpose: IT security and error analysis Legal Basis: Art. 6(1)(f) GDPR
Purpose: Compliance with legal obligations Legal Basis: Art. 6(1)(c) GDPR
Where consent is required, we obtain it in advance. Consent that has been given may be revoked at any time with future effect.
We use external service providers to make the app available.
We use Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855, Luxembourg, and Google Cloud EMEA Limited, 70 Sir John Rogerson's Quay, Dublin 2, Ireland, as technical service providers for the provision and operation of the app, including hosting, databases, backups, email delivery, and technical infrastructure. In doing so, technical usage data, log data, and content data may be processed. Processing takes place primarily within the European Union. In individual cases, data may be transferred to third countries, particularly the United States.
For ticketing, checkout, and ordering processes, we use services provided by See Tickets and Paylogic, B.V., De Ruijterkade 113, 1011 AB Amsterdam, The Netherlands. In particular, the following data is processed: ticket and order data, payment information, event data, and communication data.
Payments are processed via Stripe, Stripe Technology Company Limited (STC), One Wilton Park, Wilton Place, Dublin 2, D02 FX04, Ireland. Stripe processes, in particular: payment data, billing data, transaction data, and fraud and compliance data.
Data processing may also take place outside the European Union, specifically in the United States. Stripe uses appropriate safeguards for this purpose in accordance with Art. 44 et seq. of the GDPR.
We use Shopify for merchandising and store functions. Shopify International Ltd. c/o Intertrust Ireland, 2nd Floor, 1-2 Victoria Buildings, Haddington Road, Dublin 4, D04 XN32, Ireland. Shopify may transfer data to affiliated companies and subprocessors in third countries, particularly in Canada and the United States. For transfers to the United States, we rely on the Standard Contractual Clauses (SCCs) approved by the European Commission pursuant to Article 46(2)(c) of the GDPR. For transfers to Canada, there is an adequacy decision by the European Commission pursuant to Article 45 of the GDPR. Shopify is also certified under the EU-U.S. Data Privacy Framework (DPF). The data processed includes, in particular: order and shipping data, billing data, shopping cart and product data, and customer communications.
We use Sentry to improve the stability and security of the app. Sentry Software Netherlands B.V., Schiphol Boulevard 359, 1118 BJ, Amsterdam Schiphol, Netherlands. This may involve the processing of technical error data, device information, performance data, and log data. Personal data is minimized or pseudonymized whenever possible.
For push notifications, we use services from Apple (APNs), Apple Inc., One Apple Park Way, Cupertino, CA 95014, USA, and Google (FCM), Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. In particular, push tokens and technical delivery data are processed. Specifically, the following may be processed: push tokens, technical delivery data, device information, and the content of push notifications. Push notifications are limited to what is strictly necessary.
To analyze and improve the app, we use Firebase Analytics, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. In particular, the following data may be processed: device identifiers, usage events, app instance IDs, technical metadata, and app interactions. Where necessary, processing is based solely on consent.
Additional technical service providers may be used to manage content and technical deployment processes (content management and infrastructure), in particular:
• Contentful • Expo Application Services (EAS)
• GitHub • Linear
These services primarily process technical development, build, or content data. The legal basis is Article 6(1)(f) of the GDPR.
To analyze the use of our app, we use Google, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The following data may be processed: device identifiers, usage events, app interactions, and technical metadata. Where required, processing takes place only with your consent.
The app does not use cookies in the technical sense. Instead, it uses app-specific tracking and analytics mechanisms that serve functionally comparable purposes. Specifically, we use the following technologies:
Device Identifiers and App Instance IDs: The app processes device-specific identifiers, specifically the Firebase App Instance ID and—if provided by the operating system and not disabled by the user—the device’s advertising ID (IDFA on iOS, Android Advertising ID on Android). These identifiers make it possible to associate app sessions and usage events with a device without permanently identifying the individual.
Push tokens: To send push notifications, Apple (APNs) and Google (FCM) generate device-specific push tokens. These tokens are stored on our servers and used exclusively for delivering push notifications. They are deleted as soon as you disable push notifications or uninstall the app.
Analytics and Usage Data (Firebase Analytics): We use Firebase Analytics to statistically analyze usage patterns within the app. This involves collecting usage events (e.g., screens viewed, interactions, session duration) as well as technical metadata (device type, operating system version, app version) and analyzing them in a pseudonymized form. This data is not combined with other personal data.
Payment and Transaction Tracking: As part of order and payment processes, Stripe and See Tickets / Paylogic process technical identifiers (e.g., session IDs, transaction IDs) for fraud prevention and transaction security. This processing is technically necessary to complete the payment transaction.
Technology: App instance ID, device identifiers (technically necessary) Purpose: Operation and stability of the app Legal Basis: Art. 6(1)(b) GDPR
Technology: Advertising ID (IDFA / AAID) Purpose: Analysis and improvement Legal Basis: Art. 6(1)(a) GDPR (Consent)
Technology: Push token Purpose: Delivery of push notifications Legal Basis: Art. 6(1)(a) GDPR (Consent)
Technology: Firebase Analytics Purpose: Usage analysis Legal Basis: Art. 6(1)(a) GDPR (Consent)
Technology: Session and Transaction IDs Purpose: Payment Processing, Fraud Prevention Legal Basis: Art. 6(1)(b) GDPR
To the extent that the use of the above-mentioned technologies is based on your consent, we will obtain this consent via a corresponding notice the first time you launch the app. Your consent is voluntary; refusal will not affect the basic usability of the app.
You may revoke your consent at any time with future effect:
In the app: Settings → Privacy → Tracking Settings
At the operating system level (iOS): Settings → Privacy & Security → Tracking
At the operating system level (Android): Settings → Google → Ads → Reset or delete advertising ID
By email to: hello@famfam.app
Withdrawal does not affect the lawfulness of processing that took place prior to the withdrawal.
The app may contain links to external platforms, in particular:
• Meta Platforms/Instagram • WhatsApp
• TikTok
When opening external links, only the privacy policies of the respective platform operators apply.
Since we are headquartered in Switzerland, we process your personal data accordingly in Switzerland. In a so-called adequacy decision, the European Commission has determined that Switzerland ensures an adequate level of data protection. If we transfer personal data to countries outside the EEA that do not offer an adequate level of data protection, we take specific measures to ensure that your data is processed securely in these third countries.
If you would like further information regarding international data transfers and existing safeguards, please contact hello@famfam.app.
Some of the service providers we use also process data outside the European Union or the European Economic Area, particularly in the United States. Where this occurs, we ensure that appropriate safeguards are in place in accordance with Art. 44 et seq. of the GDPR, in particular: EU Standard Contractual Clauses, the Data Privacy Framework, and additional technical and organizational measures.
We store personal data only for as long as is necessary for the respective purposes or as required by statutory retention obligations. We process your data for as long as you use the app. However, we may store your data beyond the closure of your user account if we are legally required to do so.
To the extent that we process personal data in connection with the third-party providers mentioned in Section 2.3, the retention period for this data is governed by the respective privacy policies of the providers. We have no direct influence over the retention periods of the service providers we use. The relevant privacy policies of the providers are available at the following addresses:
Provider: Amazon Web Services (AWS) Privacy Policies: https://aws.amazon.com/privacy/
Provider: Google Cloud / Firebase / FCM Privacy Policies: https://policies.google.com/privacy
Provider: 650 Industries Inc. (Vercel) Privacy Policies: https://vercel.com/legal/privacy-policy
Provider: See Tickets / Paylogic Privacy Policies: https://www.seetickets.com/privacy-policy
Provider: Stripe Privacy Policies: https://stripe.com/de/privacy
Provider: Shopify Privacy Policies: https://www.shopify.com/legal/privacy
Provider: Sentry Privacy Policies: https://sentry.io/privacy/
Provider: Apple (APNs) Privacy Policies: https://www.apple.com/legal/privacy/de-ww/
Provider: Contentful Privacy Policies: https://www.contentful.com/legal/privacy-at-contentful/privacy-notice/
Provider: Expo (EAS) Privacy Policies: https://expo.dev/privacy
Provider: GitHub Privacy Policies: https://docs.github.com/de/site-policy/privacy-policies/github-general-privacy-statement
Provider: Linear Privacy Policies: https://linear.app/privacy
We recommend that you regularly review the privacy policies of the respective providers, as these may be updated by the providers independently.
FAMFAM is an innovative platform for music lovers that curates a vibrant mix of music, fashion, and art that embodies the contemporary spirit of our time. At the heart of FAMFAM is our commitment to social responsibility through the FAMFAM Foundation. The FAMFAM Foundation is dedicated to raising funds for sustainable projects that provide underprivileged children and youth with access to a professional environment where they can unleash and further develop their creative potential. You can make a donation to the FAMFAM Foundation via the app. To make a donation to the FAMFAM Foundation, you must enter the legally required personal information in the app (name, address, date of birth, and payment information). You can make the donation directly in the app via a payment interface.
We process your personal data to enable you to make a donation to the FAMFAM Foundation and to forward your data to the FAMFAM Foundation. The FAMFAM Foundation, as the data controller, further processes your data to issue a donation receipt. The legal basis for the processing of your data by FAMFAM is Article 6(1)(b) of the GDPR (performance of a contract, in this case: FAMFAM Terms of Use) and, by the FAMFAM Foundation, is Article 6(1)(f) of the GDPR (legitimate interest), whereby its legitimate interest consists of collecting donations in accordance with the foundation’s purpose.
We and the FAMFAM Foundation will retain your data only for as long as is necessary in connection with the purpose of processing your donation or as long as we are legally required to retain the data.
To process your donations to the FAMFAM Foundation, we use Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Dublin, D02 H210, Ireland, as our payment service provider.
In the FAMFAM app, you can choose to let other members know that you’re going to a show (“See who’s going”) or that you’ve supported a fundraiser (“See who’s supporting”). Both features are initially disabled in the app settings. As long as you don’t enable visibility yourself, you won’t appear on any list—not even anonymously or as a number. You can use ticket purchases, guest list sign-ups, donations, and all other app features without restriction, even if visibility is turned off.
If you have enabled visibility, we process the following data and display it to others:
See who’s going (on the show details page and in the Ticket Hub):
• Your username and profile picture, • the information that you have a ticket for a specific show or are on the guest list (status “accepted”).
See who’s supporting (for ongoing and completed fundraiser projects):
• Your username and profile picture, • information indicating that you have donated to a specific project.
• Only if you choose this option: the amount of your donation.
Other information, such as email address, real name, payment details, seat number, or ticket category, is not displayed. You cannot open a profile from the lists, and there is no messaging feature.
As long as your visibility is active, you’ll also appear in the lists of past shows and completed projects.
Only registered FAMFAM members who have also enabled their own visibility can see your information. Therefore, anyone who wants to view the lists must be visible themselves. Users you have blocked and users who have blocked you cannot see your information; likewise, you cannot see theirs.
Please note: Other members may capture content they see in the app outside of the app, for example, by taking a screenshot. We have no control over this.
The display is based on your consent (Art. 6(1)(a) GDPR). You provide this consent by enabling visibility in the Privacy Settings or by confirming in the notification window that appears when you open a list. The first time you open a supporter list, we will ask you separately whether the amount of your donation should also be displayed. This constitutes a separate, voluntary consent.
If you do not give your consent, you will not be able to view the lists.
You can withdraw your consent at any time with future effect (Art. 7(3) GDPR) in the Privacy Settings. You will then be removed from all participant and supporter lists, including those from past shows and completed projects.
You can turn the display of the donation amount on or off at any time, regardless of this, as long as visibility is enabled. The lawfulness of the processing carried out up until the withdrawal remains unaffected.
Since your username and profile picture are visible to other members, you can report either one. To do so, long-press an entry in a list and select “Report” or “Block.”
Report: Possible reasons include an offensive profile picture, an offensive or misleading username, impersonation, or inappropriate comments—such as insults—in an accompanying text. In this process, we process:
• Your account as the person filing the report, • the reported account,
• the reason for the report, • the time of the report,
• a screenshot of the profile picture at the time of the report.
You will receive a confirmation of receipt. We will not disclose your identity to the reported person.
Legal basis: Art. 6(1)(b) GDPR (performance of the user agreement, in particular our Community Guidelines) and Art. 6(1)(f) GDPR. Our legitimate interest lies in ensuring a safe and respectful community, protecting the rights of third parties, and complying with the requirements of the app stores.
Even people without an account can report content, for example, if they appear in another member’s profile picture. The email address for this issupport@famfam.app
In doing so, we process the information you provide to us, such as your name, email address, the content of the report, and any supporting evidence. This is necessary to handle your request (Art. 6(1)(f) GDPR). We store this data for 12 months after the matter is resolved.
If your personal data is processed, you are a data subject within the meaning of the GDPR. As a data subject, you have the following rights under the GDPR:
• As a data subject, you have the right to obtain confirmation as to whether we are processing personal data concerning you, and if so, the right to access the personal data we have stored about you and to receive a copy of it (Art. 15 GDPR). If personal data is processed inaccurately, you have the right to have it rectified (Art. 16 GDPR). • If the legal requirements are met, you may request erasure or restriction of processing (Art. 17 and 18 GDPR).
• You also have the right to data portability (Art. 20 GDPR). • You have the right to object to the processing of your personal data at any time (Art. 21, paras. 1 and 2 of the GDPR).
• If you have given your consent, you may revoke it at any time with future effect.
If you wish to exercise your rights as a data subject, please contact: hello@famfam.app
Without prejudice to other administrative or judicial remedies, you have the right to file a complaint with the competent data protection supervisory authority.
The authority primarily responsible for us is:
Federal Data Protection and Information Commissioner Feldeggweg 1, CH - 3003 Bern Phone: +41 (0)58 462 43 95 (Mon. through Fri., 10:00 a.m. to 12:00 p.m.) Fax: +41 (0)58 465 99 96 https://www.edoeb.admin.ch/de
The provision of your personal data is not required by law or contract, and you are not obligated to provide us with personal data. However, without your personal data, we cannot enter into contracts with you or provide you with the app’s features.
We do not process your data as part of automated decision-making within the meaning of Article 22 of the GDPR. If you have given your consent, we use the Firebase Analytics service in the app (see sections 2.3 and 2.4). This data is assigned to a pseudonymous identifier. This identifier can be used to track usage patterns. This may constitute profiling as defined in Article 4(4) of the GDPR. We use these analyses exclusively to improve the app, identify errors, and understand how it is used. We do not link this data to your name, email address, or payment information, and we do not use it to make decisions about you, such as regarding access to tickets, pricing, or account suspensions.
October 2026