1. Data Controller Identification

The data controller responsible for the processing of your personal data on kwenchr is:

2. Lawful Bases for Processing

In accordance with Article 6 of the GDPR, kwenchr processes personal data only when a recognized lawful basis applies:

• Consent (Art. 6(1)(a)):We request your explicit consent before accessing your device's real-time GPS coordinates to find nearby nightlife venues, and before storing non-essential cookies. You may withdraw consent at any time via the Cookie Preferences footer link.
• Contractual Necessity (Art. 6(1)(b)): Processing necessary to provide you with an account, authenticate your login session, and allow you to submit, edit, or manage drink special listings.
• Legitimate Interests (Art. 6(1)(f)): Processing necessary to maintain platform security, detect fraudulent activities, prevent denial-of-service attacks, and troubleshoot technical errors.

3. Your Individual Rights Under GDPR

As a data subject in the EEA or UK, you are entitled to exercise the following statutory rights without fee:

• Right of Access (Article 15): You have the right to obtain confirmation as to whether personal data concerning you is being processed, and to receive a copy of your data.
• Right to Rectification (Article 16): You may update or correct inaccurate or incomplete profile data at any time through your Account Profile page or by contacting us.
• Right to Erasure / “Right to be Forgotten” (Article 17): You have the right to request the deletion of your account and associated event listings. You can trigger deletion directly from your profile settings or by emailing our DPO.
• Right to Restriction of Processing (Article 18): You may request restriction of data processing if you contest accuracy or the lawfulness of processing.
• Right to Data Portability (Article 20): You have the right to receive your personal data in a structured, commonly used, and machine-readable format (JSON).
• Right to Object (Article 21): You may object at any time to processing based on legitimate interests.

4. Data Minimization & Retention

kwenchr adheres strictly to data minimization principles:

• Geolocation: Raw GPS coordinates are never stored in our permanent database for non-authenticated searches; they reside solely in temporary client-side session storage (5-minute cache).
• Passwords: Passwords are cryptographically salted and hashed using bcrypt; plain-text passwords are never visible or stored.
• Account Deletion: When an account is deleted, personal profile data is purged from our production database within 30 days.

5. How to Exercise Your Rights

To exercise any of your GDPR rights, or if you have questions about our data governance practices, please contact us at:

You also hold the right to lodge a formal complaint with your local EU Data Protection Supervisory Authority (e.g., the Information Commissioner's Office in the UK, CNIL in France, or BfDI in Germany).