Privacy and cookies

Who is responsible

The controller of your data is:

For any question about your data: info@wize.be.

Which data, and what for

We only ask for what the feature you are using needs.

Browsing the site

Nothing is recorded under your name. Your favourites stay on your device. When you open the page of a public event, your device also counts the category of that event, for the “to my taste” sort on the home page. None of this is sent to us, and the “Clear my favourites and preferences” button erases it all. If you use “Near me”, your position is rounded to two decimals (about one kilometre) before it leaves your device; it is used to sort the events and we do not store it in our database.

Publishing an event

Your e-mail address: to send you the publication link and the management link, to recognise you as the organiser and to tell you what concerns your events (a booking request, a wall about to be deleted). It is never displayed. It is stored with the draft of the event as soon as you send the form, even before you confirm through the link. The content of the event (title, date, place, address) is public for a public event, and visible only to people who have the link for a by-link event.

Opening the management of an event

An organiser has no password. The publication link received by e-mail is valid for 30 minutes. The management link stays valid until 90 days after the end of the event or the series, unless the organiser revokes it. Each of them opens a session of 30 days on the device, which records the IP address and the browser that opened it.

Replying to an invitation (“Who's coming?”, “Who's bringing what?”)

On a by-link event: your first name or nickname, your reply, the number of people, an optional note that only the organiser reads, and what you are bringing. No e-mail address, no account. Before you send, the form tells you whether the other guests will see your first name.

Booking

Your first name, your e-mail address, the number of people and, if you give it, your phone number. They are passed to the organiser of this event, for this booking only. News about your booking and the reminder only go out once you have confirmed your address.

Following an organiser or a series

Your e-mail address and your language. No e-mail goes out before you confirm, and every e-mail lets you unsubscribe in one click. The organiser only sees a number of followers; they see your address only if you tick the box that passes it on. If you ask to stop all e-mails, we keep a fingerprint of your address, not the address itself, to honour that refusal.

Saying “I'm interested”

No name, no e-mail address. A cookie on your device remembers your choice, and a fingerprint of your connection stops endless clicking. The organiser only sees a number.

Posting a message or a photo on a wall

The nickname you choose, your message or the caption of your photo, and the photo. We never keep the original file: the photo is re-encoded and its metadata (EXIF, including where it was taken) is removed. Every photo goes through an automatic filter before it appears. Published posts are shown on the wall of the event, and the organiser can download the published photos (the album).

Reporting content

We ask for neither your name nor your address. We record the reason, your optional note and two fingerprints, of your browser or of your connection, used to count distinct reporters. The organiser only sees how many reports are open on a post on their wall, never the reason or your note.

Statistics for organisers

The organiser of a public event sees numbers per day: views, clicks on “Directions”, bookings, follows, “I'm interested”. One person counts once a day, thanks to a fingerprint of their connection that changes every day and is erased the day after. No cookie, no stored IP address: nothing says who looked.

Protecting the service

To limit bursts of requests, we count requests per IP address or per e-mail address: in memory while the limit runs, then as salted fingerprints, never the address itself, erased after 48 hours.

On what basis

• Publishing and managing an event, replying to an invitation, booking, posting on a wall: we handle your data to provide the service you ask for.
• Following an organiser or a series, passing your address on to an organiser: with your consent, which you can withdraw whenever you like.
• Counting visits and “I'm interested” clicks without identifying anyone, noting the IP address and browser of a session to keep access secure, limiting abuse, moderating and handling reports: our legitimate interest in running a safe service.

For how long

Deletion is done by an automatic clean-up, at most 6 hours after the deadline. On a wall, the page gives the exact deletion date. The organiser can also erase their whole wall before that date.

Who receives your data

• The organiser of the event: your replies as a guest, your booking, your posts on their wall and, only if you chose to, your address as a follower.
• The site team, for moderation and support.

Our processor is Microsoft Ireland Operations Ltd (Microsoft Azure), in European data centres:

• the application, in the West Europe region;
• the database, in the France Central region;
• the private storage of wall photos;
• Azure Communication Services, to send e-mails (data in Europe);
• Azure Web PubSub, to update walls live;
• Azure AI Content Safety, which automatically checks every photo sent to a wall;
• Azure Maps, which places the address of an event on the map when it is published.

In some cases Microsoft may process data outside the European Economic Area; such transfers are then covered by the standard contractual clauses of its data protection addendum.

We neither sell nor rent any data. The site has no advertising, no third-party audience measurement and no trackers.

Map, places and links to other sites

The map background is served by our own site: no map provider receives your IP address. Its data comes from OpenStreetMap.

Searching by postcode or town uses a table built into the site, taken from GeoNames: nothing is sent to GeoNames.

Some links lead elsewhere: “Directions” opens Google Maps, and an organiser can point to their ticket shop. Those sites apply their own rules as soon as you click.

Cookies

Opening a page sets no cookie. The only cookies on the site are strictly necessary for something you do yourself: that is why no consent banner appears. No advertising cookies, no audience measurement cookies, no third-party cookies. The local storage at the end of the list is not a cookie: your device writes to it as soon as you open the page of a public event, and its content never leaves the device.

• Nameguest_key_frguest_key_nlguest_key_en

  What it is for

  Recognising your browser after a guest reply, an “I'm interested” or a post on a wall, so that you can change or remove what you sent. Limited to the pages of that event.

  Duration

  30 days after the event ends

• Namebetter-auth.session_token__Secure-better-auth.session_token

  What it is for

  Keeping the session of an organiser or an administrator open after a sign-in or management link.

  Duration

  30 days

• Nameadmin_device

  What it is for

  For the site's administrators only: recognising a device that has already signed in.

  Duration

  180 days

• Nameprefs.v1(local storage, not a cookie)

  What it is for

  Your favourites, the sort order you chose and the number of public events you opened in each category, for the “to my taste” sort. Kept on your device, never sent.

  Duration

  Until you erase them with the “Clear my favourites and preferences” button

Your rights

At any time you can:

• get a copy of your data (access);
• have inaccurate data corrected (rectification);
• have your data deleted (erasure);
• ask for its processing to be restricted;
• object to processing based on our legitimate interest;
• receive your data in a reusable format (portability).

Write to info@wize.be: we reply within one month. Many features work without an account: tell us which event it is about and, depending on the case, the e-mail address or nickname you used, so that we can find your data.

Without writing to us, you can already withdraw your participation or your posts from the browser that sent them, cancel a booking or unsubscribe through the link you received by e-mail.

Complaint

If you think your data is not handled properly, you can lodge a complaint with the Belgian Data Protection Authority (Autorité de protection des données, Gegevensbeschermingsautoriteit), on its website.

Updates

We update this page when the service changes. The date at the top is that of the last change.