Your GDPR rights.
WarmInvite is designed so guests can manage event participation without a platform account. Applicable rights still need a reachable, verified process.
Who is responsible?
Sansa Group AB operates the WarmInvite platform. An organisational host may also decide why and how its guest data is used. The exact roles for that event depend on its circumstances and will be explained where applicable.
If someone invited you
The host may have supplied your name and email so the service could send an invitation or restrict event access before you visited WarmInvite. Your reply and optional answers come from you. If the host asks for names of additional guests, the person replying supplies those names. The first invitation should identify the event and link to this privacy information. You can use the invitation or the privacy choices centre to manage the information we hold for that event.
Reasons for processing
Host account and paid-service processing may rely on a contract; security may rely on documented legitimate interests or legal duties; marketing uses the applicable separate permission; and optional sensitive answers require a specific assessment and, where suitable, explicit consent. The final purpose-by-purpose basis will be published before launch.
Your rights
- Ask what personal data we hold and receive a copy.
- Correct inaccurate details or change an RSVP.
- Request deletion when the law allows it.
- Object to certain uses or restrict processing in applicable cases.
- Receive portable data when the right applies.
- Withdraw consent without affecting earlier lawful processing.
- Complain to the relevant data protection authority.
The privacy choices centre lists actions available now and will show the email-verified request form when the staffed reply channel opens. We verify proportionately, using event access or email control where possible. In Sweden, the Swedish Authority for Privacy Protection (IMY) provides a complaint route; you may approach another relevant EEA authority.
Special care for guest answers
Dietary or accessibility answers can reveal sensitive information. They are optional by default, restricted to appropriate event roles, excluded from AI design prompts, and cleared seven days after the event. A guest may instead contact the host privately outside WarmInvite.
International processing
Cloudflare’s EU database jurisdiction does not mean every processor, log, or message remains in the EU. We will document each data flow and the applicable transfer mechanism before launch.