Privacy Policy

• Account and profile: email address, password (kept in hashed form by our sign-in provider; we never see it), account type (member, vendor, artist, admin), stage or display name, and what you add to a profile: description, photos, links, genres and the contact details you choose to show.
• Inquiries and forms: name, email, phone/WhatsApp and the details of the booking, production or event (date, place, budget, notes, poster and images) in the artist-booking, vendor, publish-an-event and join-the-Crew forms.
• Carpool: ride details and the name and phone/WhatsApp you choose to post; edit tokens are kept in your browser. If you give a Facebook or Instagram profile link, we read its public name and photo (on our server) to show with the ride.
• Activity and preferences: favourites, ratings, your inquiry list or cart, language, accessibility settings, radio volume and reminders.
• Notifications: if you turn on push notifications, the subscription your browser issues (its push-service address and keys) and your reminder choices.
• Technical data: IP address, browser and device type, language, pages viewed and times, referrer, error and performance logs, and security and rate-limit signals.
• Correspondence: what you write to us by email or WhatsApp.
• Public sources: public information from SoundCloud, YouTube and Instagram/Facebook (releases, videos, posts) to show content, and public event information from ticketing platforms (prices and links).

We do not intentionally collect sensitive information (such as health or religion); please don’t send it. Photos from events may show people; if you appear in one and want it removed, tell us and we will remove it.

We do not make automated decisions that have legal or similarly significant effects on you.

You are not legally required to give us any information, and providing it is up to you and depends on your consent. Without some of it (for example an email address for an account, or contact details for an inquiry) we cannot provide the related feature.

We do not sell personal information and we do not share it with advertisers. We share information only as follows:

• Service providers (processors) acting for us: Supabase (database, sign-in and file storage; our project is hosted in Frankfurt, Germany); Vercel (website hosting and cookieless aggregate analytics); Cloudflare (Turnstile human verification on forms); Sentry (error monitoring); Upstash (request rate limiting); Zoho Mail (sending email); and your browser’s push service (Google, Apple, Mozilla) to deliver notifications.
• Artists, vendors and organisers: when you send an inquiry, its details go to the people it concerns so they can reply to you.
• Publication on the Site: event listings and artist and vendor profiles are visible to every visitor and may be copied or cached by others.
• Embedded services and links: SoundCloud and YouTube players, ticket windows, maps and WhatsApp links are run by third parties, who can see your visit when they load or when you use them; their privacy policies apply.
• Authorities and advisers: where the law requires or to protect rights, to professional advisers, and, in a business transfer, to the acquirer.

Our database is hosted in the European Union (Frankfurt). Some of our service providers may also process information in the United States and other countries. Israel is recognised by the European Union as providing an adequate level of protection, and transfers of information out of Israel are made in line with the Israeli law that governs them and the providers’ commitments to protect it.

For visitors in the EEA and the UK: where information goes to a country without an adequacy decision, the transfer relies on safeguards the providers offer (such as standard contractual clauses or the EU–US Data Privacy Framework). You can ask us for more information.

• Account and profile: while the account exists, and a short time after it is closed.
• Inquiries and bookings: while they are relevant to the event or booking, then a reasonable time for records and any claims.
• Event listings and profiles: while published; past events may be kept in an archive.
• Error and security logs: short periods, following our providers’ defaults.
• Push subscription: until you turn it off or your browser revokes it.
• Cookies: as listed in the cookies section.

We use reasonable safeguards: encrypted transport (HTTPS), role-based access and database-level permissions, human verification (Cloudflare Turnstile) and rate limiting on public forms, and separated administrator permissions. No system is completely secure. If a serious security incident occurs we will act as the law requires, including notifying Israel’s Privacy Protection Authority and affected people where required.

Under Israel’s Privacy Protection Law, 5741-1981, you may inspect the information about you held in our databases and ask us to correct or delete information that is not correct, complete, clear or up to date. In the EEA and the UK (GDPR) you also have the right to receive a copy, to data portability, to restrict processing, to object to processing based on legitimate interests and to withdraw consent at any time (withdrawal does not affect the lawfulness of earlier processing). Residents of other places, such as California, may have rights under local law; contact us.

To exercise a right, write to contact@untz.co.il from the email address registered with us or with identifying details; we may ask you to verify your identity. We will reply promptly and in any event within 30 days (extendable where the law allows). If you are not satisfied you may complain to Israel’s Privacy Protection Authority, or to the supervisory authority where you live in the EEA or the UK (in the UK, the ICO).

We send marketing messages, newsletters or marketing push notifications only with your clear prior consent, as section 30A of Israel’s Communications Law (Telecommunications and Broadcasting), 5742-1982 requires. Every message gives a simple way to opt out (or write to us), and push notifications can be switched off at any time in your browser or device settings. Service messages (for example about an inquiry you submitted) are not marketing.

Cookies are small files stored on your device; we also use your browser’s local storage. We use only the cookies and settings needed to run the Site, and the Site has no advertising or marketing-tracking cookies. Our aggregate measurement (Vercel Analytics) uses no cookies. Because the Site sets no non-essential cookies of its own, choosing “Decline” in the cookie notice is recorded as your preference and does not change how the Site works; embedded third-party content is subject to your browser settings and to their own policies.

Managing them: you can change your choice at any time with “Cookie Preferences” at the bottom of the Site, and in your browser settings (blocking cookies may break features such as signing in).

The Site is not intended for anyone under 18 and we do not knowingly collect information from minors. If we learn that we have, we will delete it. A parent or guardian who believes we hold information about their child should contact us.

We link to sites and services run by others (ticketing platforms, social networks, music services) and are not responsible for privacy there. Please read their policies.

We may update this policy from time to time. We will publish the new version with a new date and, for material changes, tell you on the Site or by email. Using the Site after the update means you accept it.

For questions, access, correction or deletion requests, or any privacy matter:

• Email: contact@untz.co.il