Privacy Policy

Last updated: 20 June 2026

Data Controller

In compliance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), the entity responsible for processing your personal data is:

Legal name: AppXpert Solutions SL
Tax ID (CIF): B56200264
Registered address: Calle Alejandro Dumas 17, Entresuelo, 29003, Málaga, Spain
Legal representatives: Álvaro Alonso López (Director) and Cristian Alberto Sánchez Salido (Director)
Contact email: it.support@enjoytheclub.es
Contact phone: +34 611 900 557

At Enjoy the Club, operated by AppXpert Solutions SL, we want you to enjoy the best possible nightlife experience. To do this, we collect and use certain personal data when you use our services. Below we explain clearly and simply what data we process, why we process it and how you can manage your privacy.

If you have any questions, contact us at it.support@enjoytheclub.es.

About our service

Enjoy the Club enhances the nightlife experience by letting users interact in real time with the music session and with the screens at the venue or event (song requests, messages and photographs). Our platform makes it easier for guests, managers, organizers and DJs to interact. We do not transmit or distribute music, nor do we manage music licenses; we provide a request management and interaction system that helps venues, organizers and DJs personalize their sessions dynamically.

1. What information we collect and why

We only process your personal data when we have a valid legal basis, as required by the GDPR. The legal bases we rely on are:

Consent → When you explicitly agree to receive promotional communications, to provide optional data (such as gender) or to use optional features (such as uploading photos).
Contractual necessity → To provide the services you request (managing your account, processing payments, handling your requests).
Legal compliance → When required by law, such as keeping financial records.
Legitimate interest → To improve our services, ensure security, prevent fraud and moderate content, without affecting your rights and freedoms.

When we process data based on legitimate interest, you can object at any time (see section 8).

📌 Data you provide directly

Name and email address → To create your account and send you important notifications.
Phone number → To make verification and account recovery easier.
Date of birth → To confirm you are over 18.
Gender (optional) → When signing in we may ask for your gender for demographic and trend analysis. This is optional: the default is "Prefer not to say" and you decide whether to provide it. It does not condition use of the service and its processing is based on your consent. This data is not used to infer sexual orientation or any other special category under Art. 9 GDPR.
Music preferences → To improve recommendations and personalize your experience.
Photographs (optional) → If you take part in events with screen or collaborative album features, we process the images you upload (see section 2).
DJs — additional profile information → DJs can include biography, music genres, social media links (Instagram, SoundCloud, Spotify, Facebook, TikTok), stage name and public images. Their profile is always public, but they can control the visibility of certain elements (ratings, social links, contact details).
Stripe Connect for payouts → DJs and managers must complete Stripe Connect onboarding to receive payouts. All financial and tax information is collected and processed directly by Stripe. Enjoy the Club does not access or store this information.

Enjoy the Club does not collect or process special categories of personal data under Article 9 GDPR (ethnic origin, political opinions, religious beliefs, health data, biometric data, etc.). In particular, we do not perform facial recognition or any biometric processing on photographs.

📌 Data we collect automatically

Usage history → We store information about the songs you request and your interaction with the app. We also use this data to generate anonymous, aggregated reports (see section 2).
Session/device identifier → We assign a technical identifier to each user (including unregistered / anonymous users, via Firebase) to link your requests and photographs to your session and allow you to manage them (for example, to delete your own photos).
Indirect location (via QR codes) → When you scan a QR code at a venue or event, we know the request comes from that location, but we do not access your GPS location.
Diagnostic logs (desktop app) → The screen-display application may automatically send us technical logs when an error occurs, in order to detect and fix issues. These logs may include technical device and application data. We do not use analytics tools or build profiles from them. Legal basis: legitimate interest in the stability and security of the service.
Analytics and performance data → We may use Google Analytics and Firebase to process and analyze data. These services are provided by Google, which applies GDPR-compliant safeguards for transfers outside the European Economic Area (EEA).

📌 Payment information

Secure payments with Stripe → We use Stripe as our payment processor. We do not store or access your card data. Stripe handles all payment methods (PayPal, Google Pay, Apple Pay, Link, Revolut Pay, cards and bank transfers).

📌 Social sign-in

If you sign up with Google ID or Apple ID, we receive your name, email and profile photo (if applicable). This information is used solely for authentication and to personalize your account. When an anonymous user signs up, the data linked to their anonymous session (requests, photographs) is then tied to the newly created account.

📌 Communication platforms

Email communications → We may use platforms such as Mailchimp or similar to send emails. You will only receive promotional communications if you have given your explicit consent, and you can unsubscribe at any time.

2. Photographs, Photo Wall and collaborative album

Some events let you upload photographs to be shown on the event screens ("Photo Wall") and/or added to a collaborative event album. As this feature involves image processing, we explain in detail how it works.

2.1. How it works

There are two ways to contribute photos:

Screen-projection request → You take a photo and ask for it to be shown on the event screen. The request reaches the manager/organizer, who accepts or rejects it. If accepted, the photo is projected and saved to the collaborative album. If rejected, it is not shown or saved.
Direct upload to the collaborative album → You can upload photos directly to the event album without prior approval. These images go through automated moderation (see 2.5) and the organizer may remove them afterwards at their discretion.

2.2. What data we process

The image you upload and associated technical data: date, event and your user identifier (account or anonymous session).

2.3. Roles and legal basis

The collaborative album and its content belong to the event organizer, who acts as Data Controller for those photographs for their own purposes, including their distribution on social media as user-generated content (UGC).
AppXpert Solutions SL acts as Data Processor on behalf of the organizer for the technical delivery of the service, under Art. 28 GDPR. For our own purposes (platform operation, security, moderation and anonymized statistics) we act as Controller.
Legal basis: your consent, given when you upload the photo and accept the conditions shown at that moment. By uploading a photo you accept this Privacy Policy and the Terms and Conditions.

2.4. Images of third parties

By uploading a photograph you state that you have the consent of all identifiable people who appear in it, including those in the background. You are solely responsible for the images you upload and for third-party image rights (Spanish Organic Law 1/1982). At the events, the organizer will display signage stating that photographs are taken and projected at the event.

2.5. Content moderation

To protect users, photographs may be analyzed by an automated AI-based moderation system, whose sole purpose is to detect inappropriate or illegal content (for example, explicit or violent content). This system does not identify people or perform facial recognition; it classifies content, not people. The final decision rests with the organizer. Legal basis: legitimate interest in user safety and protection.

For this feature we use Anthropic (Claude) AI services via its commercial API, as a Data Processor. Anthropic applies minimal data retention and does not use API data to train its models. As Anthropic is based in the US, the transfer is covered by Standard Contractual Clauses (SCCs) incorporated into their Data Processing Addendum.

2.6. Retention and deletion

Photographs are kept while the event album remains active or until removal is requested. Deletion can be handled at three levels:

You yourself → If you uploaded a photo, you can delete it from your session (the "My photos" feature), thanks to your user identifier, even as an anonymous user.
Manager / organizer → As owner of the album, they can delete any photo from their event.
Support (AppXpert) → If you cannot delete it yourself, open a ticket at it.support@enjoytheclub.es stating the event; we will pass the request to the organizer for removal.

Scope of removal: deletion of a photo operates going forward. If the organizer had already shared the image on their own channels (for example, social media) before removal, that prior distribution is governed by the organizer's own terms as Controller and may not be reversible from Enjoy the Club.

Important technical limitation: identifying your photos as an anonymous user depends on an identifier stored on your device. If you clear the cache, cookies or browser data, you will lose that identifier and will not be able to delete your photos via self-service; in that case, removal will be handled via a support ticket addressed to the organizer (by event and time slot).

2.7. Desktop application (screen display)

Projection of photos and messages on screen is done through our display application (including a Lite version accessible without download). This application shows approved content and does not collect analytics data; it may only send diagnostic logs when errors occur, as described in section 1.

3. How we use your data

✅ To let you use Enjoy the Club → Manage your account, process payments and handle your song and photo requests.
🎧 To improve your music experience → We analyze your requests to offer recommendations and improve interaction with DJs (legitimate interest; you can object).
📊 To generate anonymous statistics → We build aggregated and anonymized reports on music trends and activity, with no personally identifiable information (see section 4).
🔒 To ensure security and moderate content → We monitor platform usage to prevent fraud and moderate uploaded photos.
📢 To send you news and promotions → Only with your consent.
🎤 For DJs and managers → To show public DJ profiles and provide managers with metrics and venue/event trends.

4. Who we share your information with

We do not sell your data. We only share it in the following cases:

With service providers → Companies that help us with hosting, cloud storage, payments, content moderation (AI), communications and analytics (Google Firebase/Analytics, Stripe, Anthropic, Mailchimp, etc.), always under a data processing agreement.
With event organizers → The content of the collaborative album is shared with the event organizer, who is its Controller (see section 2).
With organizers and music industry partners (anonymous data) → We may share aggregated and anonymized statistical reports (for example, trends by geographic area, age range or demographic gender, most-requested songs) with event organizers and music industry partners, including record labels. These reports are built so that it is not possible to trace the information back to a specific person and we apply minimum aggregation thresholds to avoid re-identification of small groups. We do not share identifiers, names or email addresses. If a future sharing involved non-anonymized personal data, we would inform you and obtain your prior consent.
With Stripe for payments → Enjoy the Club does not store or process financial or tax data.
For legal reasons → When required by law or by competent authorities.

5. Data retention and security

Account data → Stored until the user deletes their account.
Collaborative album photos → While the event album is active or until removal (see section 2.6).
Transaction records → Kept for 6 years in accordance with Spanish commercial law (Art. 30 of the Commercial Code).
Security logs → Kept for 6 months, in line with cybersecurity best practices.
Diagnostic logs → Kept for the minimum time needed to diagnose and fix the issue.
Inactive accounts → If an account stays inactive for more than 2 years, we may delete the associated personal data, unless legally required to keep it. The user will be notified before deletion.

Personal data deletion → When a user deletes their account, their personal data is removed from Firebase, Google Analytics and Mailchimp, unless legally required to be kept. Backups may be retained temporarily in automated systems before final deletion.

Security measures → We apply encryption of data at rest and in transit, strict access controls limited to authorized staff, periodic security audits and incident response protocols.

International transfers → We may process data outside the EEA. To comply with the GDPR we rely on appropriate safeguards: the EU-US Data Privacy Framework where the provider is certified, and/or Standard Contractual Clauses (SCCs) with providers such as Google, Stripe and Anthropic, along with additional technical measures (encryption and access control).

Incident notification → In the event of a security breach affecting your personal data, we will notify the Spanish Data Protection Agency within a maximum of 72 hours where the law requires it, and you directly if the breach poses a high risk to your rights and freedoms.

6. Minors and unauthorized use

👶 Minimum age by action. Enjoy the Club is reserved for users aged 18 and over. Age confirmation is by user declaration at the time of the action, without document verification (a stricter verification would be disproportionate for this type of operation):

Requesting a song and paying (including guest mode) → by doing so you declare you are over 18.
Uploading photos → by sharing a photo you declare you are over 18 (see specific conditions below).
Creating an account → requires you to be over 18.

We do not target the Services at minors. This age declaration does not relieve us of our obligations as Data Controller under the GDPR; if we detect use by a minor, we may void the operation and delete the associated data.

Images of minors

Processing and distribution of a minor's image has enhanced protection (Spanish Organic Law 1/1982). We therefore distinguish based on the photograph's destination:

Events with public or promotional distribution (clubs, festivals, concerts) → we do not project on the public screen or use for user-generated content (UGC) purposes any photos in which identifiable minors appear. No photo is shared on social media without human approval by the organizer, who is prohibited from distributing images of identifiable minors.
Private event albums (e.g. weddings — Enjoy Wedding) → the album belongs to the event organizer (e.g. the couple), who acts as Controller in a private, family context. In this setting minors may appear in the private album; any later public distribution is the organizer's responsibility, and they must obtain consent from the minor's parents or guardians.

In all cases:

If a minor creates an account or performs an action falsifying their age, we accept no liability for the impersonation, without prejudice to our legal obligations as Data Controller.
Anyone can request removal of a photo in which a minor appears by writing to it.support@enjoytheclub.es stating the event. We will handle it with priority.
If a parent or guardian detects unauthorized payments, a fraudulent registration or the presence of a minor in a photo, they can contact it.support@enjoytheclub.es to review the case and, if appropriate, delete the information.

7. Cookies and tracking technologies

We use cookies and similar technologies to operate and improve our services:

Essential cookies → necessary for the platform to function; they do not require consent (legitimate interest).
Analytics and marketing cookies → set only with your explicit consent.

Before setting non-essential cookies we display a settings panel that lets you accept, reject or configure by category. Rejecting is as easy as accepting and does not condition access to the service, although some features may not work optimally. You can change your choice at any time from the cookie settings.

The detail of cookies used (purpose, owner, duration and third parties) is available in our Cookie Policy, in line with the guidance of the Spanish Data Protection Agency.

8. Your rights and options

You have the right to:

Access your data.
Modify or correct inaccurate data.
Delete your account and your data.
Portability → Request a copy in a structured, commonly used format.
Restrict processing in certain situations.
Object to processing based on legitimate interest.
Withdraw your consent at any time (for example, for the gender data, for communications or for your photos).
Unsubscribe from promotional communications.

How to exercise your rights:

Send an email to it.support@enjoytheclub.es with the subject "Privacy request".
Include your full name, the right you wish to exercise and any detail that helps us handle it.
We will reply within 30 days (extendable by 30 more in complex cases, with prior notice).
For security, we may ask you to verify your identity.

If you are not satisfied with our response, you can lodge a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es.

9. Changes to this policy

If we update this policy, we will notify you with an in-app message or by email (if you have consented to receive communications).

If in the future we expand the data we request or the processing purposes, we will notify you. Important: when the new purpose or category of data requires your consent, we will not activate it until we obtain it; notification alone does not replace consent where consent is required.

You can always check the latest version at enjoytheclub.es/en/privacy-policy/.

For any privacy-related question, contact it.support@enjoytheclub.es. 🎶