Privacy Policy

Summary of Key Points

Table of Contents

1. Data Controller and Contact Details
2. What Information Do We Collect?
3. How Do We Process Your Information?
4. Legal Bases for Processing
5. Expressing Interest: Contact Data Shared With Hosts
6. When and With Whom Do We Share Your Information?
7. Communications, Emails, and Notifications
8. Cookies and Tracking Technologies
9. Google Sign-In and Social Logins
10. International Data Transfers
11. How Long Do We Keep Your Information?
12. How We Protect Your Information and Data Breaches
13. Minors
14. Your Privacy Rights
15. No Automated Decision-Making
16. Third-Party Websites and Do-Not-Track Features
17. Updates to This Policy
18. How to Contact Us and How to Complain

1. Data Controller and Contact Details

The data controller for personal data collected via the Platform is Wanderer.

We have not appointed a Data Protection Officer (DPO), as the conditions in Article 37 GDPR are not met. Requests may be addressed to the contacts above.

2. What Information Do We Collect?

2.1 Standard Personal Data

• Full legal name, email address, and city (required for account creation)
• Age declaration made at registration, with date and time
• Profile photo, biography, 'About You' text, and personal website (optional)
• Social and messaging handles you choose to add: WhatsApp, Telegram, Instagram, Facebook, X
• Spoken languages

2.2 Special Category Data — Spiritual Interests (Art. 9 GDPR)

If you choose to select spiritual interests on your profile, this constitutes special category data under Article 9 GDPR. We only process it with your explicit, separate consent, and it is never shown to Hosts or other users — it is used solely to personalise event recommendations shown to you. You may withdraw your consent at any time, which will result in deletion of this data.

2.3 Automatically Collected Information

Device type, browser, IP address, pages visited, and aggregated usage statistics, collected via cookies and similar technologies (see Section 8) and via the technical logs of our infrastructure providers, necessary for service security and diagnostics.

2.4 Event Data From Hosts

Hosts provide event details: title, description, city and (optionally) venue address, images, date and time, language, and any price or donation amount they wish to state. Wanderer does not collect, process, or store any payment made in connection with an event — pricing information is purely informational and settled directly between Host and Participant.

2.5 Location Data

We use the city associated with your profile and with events to power map-based discovery and to select nearby events in periodic communications. We do not track your precise real-time location and do not access device GPS.

To the city selected by the User or by a subscriber we associate the approximate geographic coordinates returned by our geocoding provider, which identify the centre of that locality and not the person's own position. We use them solely to select events within a predefined radius for our periodic communications.

2.6 Language Data

Your selected interface language is stored in a cookie to serve the Platform in your preferred language.

2.7 Invite Programme Data

If you use the invite programme, we process your personal invite code, the link between the inviter and the invited person, and the symbolic points accrued. A person who registers via an invite link is associated with the inviter; the inviter sees the name and progress status of people they have invited, but not their contact details.

2.8 Reviews

If you publish a review of a Host, we process the rating, text, date, and the link to the author's profile, which is displayed publicly alongside the review.

2.9 Google Sign-In

If you register via Google, we receive from Google your name, email address, and profile photo, in accordance with the permissions you grant during sign-in.

2.10 Subscribing to Updates Without an Account

Anyone may subscribe to event updates without creating an account, using the dedicated box on the site. In that case we process the name given, the email address, the selected city and its approximate geographic coordinates, the browsing language, the page the subscription came from, as well as the date, time and IP address of the consent given, as evidence of that consent.

The legal basis is consent, given by explicitly ticking a dedicated box that is not pre-selected. This data is used solely to send the periodic event summary and the optional communications described in Section 7. It is not linked to any public profile and is never disclosed to Hosts.

Every email contains an immediate unsubscribe link. Withdrawing consent stops all sending. If the person later creates an account with the same email address, the subscription is linked to that account and communications are from then on governed by the preferences set in the profile.

3. How Do We Process Your Information?

• Operating and maintaining the Platform, including your account and event listings
• Letting you discover events and express interest in attending one
• Sharing your contact details with a Host when you express interest in their event, and vice versa
• Sending transactional emails and in-app notifications (e.g. interest confirmations, host notifications, reminders, review requests, security alerts)
• Sending, with your consent, the periodic event digest and other optional communications, always with immediate opt-out available
• Personalising event recommendations based on your stated interests
• Managing the invite programme and preventing related abuse
• Automatically translating listing content to make it accessible in supported languages
• Handling reports, moderating content, and enforcing our Terms and Community Standards
• Improving and securing the Platform, including fraud and abuse prevention
• Complying with legal obligations and establishing, exercising, or defending legal claims

4. Legal Bases for Processing

5. Expressing Interest: Contact Data Shared With Hosts

EXPRESSING INTEREST IN AN EVENT IS NOT A BOOKING, AN ATTENDANCE CONFIRMATION, OR A PAYMENT. IT IS A CONSENT-BASED ACTION THAT SHARES A SPECIFIC, LIMITED SET OF YOUR CONTACT DETAILS WITH THE HOST SO THEY CAN CONTACT YOU DIRECTLY.

When you click to express interest in an event, we ask you to confirm your consent before any data is shared. Once confirmed, the following fields — to the extent you have provided them on your profile — are shared with the Host of that specific event: full name, email address, WhatsApp, Telegram, Instagram, Facebook, and X. No other profile data (including spiritual interests) is shared as part of this action.

• This sharing happens once, at the moment you express interest, for that specific event only.
• The Host becomes an independent data controller for any further use they make of this data, and is contractually bound (under Section 4.6 of our Terms and the Community Standards) to use it only for purposes related to that event.
• You may withdraw your Expression of Interest at any time by contacting support@wanderer.live; this does not retroactively undo contact already made by the Host, but stops any further platform-side association with that event.
• Because the Host is an independent controller, to obtain erasure of data already in their possession you must also approach the Host directly. On request we will forward the request to the Host and remind them of their obligations.
• Please review Section 14 (Your Privacy Rights) if you wish to object to or restrict this specific processing.

5.1 Circle Management Tools for Hosts

In the 'Circle' area of their dashboard, Hosts have additional tools for organising contacts relating to their events:

• Private notes: the Host may record private notes on each person who has expressed interest (e.g. to track contacts made). Such notes are visible only to the Host and are never shown to the person they refer to; however, that person may request a copy and deletion by exercising their rights.
• Data export: the Host may export in CSV/XLSX format the list of contact details shared by persons who expressed interest in their events, for use in their own management tools outside the Platform. Once exported, this data leaves our technical control and remains under the Host's sole responsibility.
• Manually added contacts: the Host may manually enter their own contacts, including persons not registered on Wanderer (e.g. met offline), to organise their activity. Wanderer stores this data as data processor on behalf of the Host, who remains the sole controller and declares they have an appropriate legal basis for processing it.
• Host communications: the Host may send communications about their events to persons in their Circle. Each communication identifies the Host and contains an opt-out mechanism. Wanderer acts solely as the technical delivery provider and does not determine the content or recipients of such communications.

Anyone who receives an unwanted communication from a Host, or believes their data has been added to a Host's Circle without a legal basis, may write to support@wanderer.live: we will intervene with the Host and, where necessary, remove the data and suspend the functionality.

6. When and With Whom Do We Share Your Information?

6.1 Service Providers (Data Processors)

We use the following providers, who process data exclusively on our behalf under agreements compliant with Article 28 GDPR:

We encourage Hosts not to include personal data of third parties in event descriptions, as such text may be sent to the automatic translation service. We do not use user data to train artificial intelligence models, and our providers are not authorised to do so.

6.2 Other Users

Certain profile fields (photo, city, biography, website) are visible to other users as described in our Terms. Contact details are shared with a Host only when you express interest in their event, as described in Section 5. Participants cannot view the profiles or data of other Participants who have expressed interest in the same event.

6.3 Business Transfers

If Wanderer is involved in a merger, acquisition, or asset sale, your data may be transferred as part of that transaction, subject to equivalent confidentiality commitments. You will be informed in advance and may terminate your account.

6.4 Legal Requirements

We may disclose data where required by law, regulation, a competent authority, or a valid legal process, and where necessary to establish, exercise, or defend legal claims.

6.5 No Sale of Data

We do not sell, rent, or transfer users' personal data to third parties for marketing purposes, and we do not engage in behavioural advertising.

7. Communications, Emails, and Notifications

Opting out of optional communications is immediate, free of charge, and does not affect your use of the Platform in any way.

8. Cookies and Tracking Technologies

Analytics and performance measurement tools are not loaded or executed until you have given your consent via the banner. For the detailed list, durations, and management of your choices, see our Cookie Policy.

9. Google Sign-In and Social Logins

When you sign in via Google, that provider's own privacy policy also applies to their processing of your data. We receive from Google only the data necessary for authentication and do not have access to your password.

10. International Data Transfers

Some of the providers listed in Section 6.1 are based in the United States or may process data outside the European Economic Area. In such cases the transfer takes place on the basis of a European Commission adequacy decision (including the EU–U.S. Data Privacy Framework, where the provider participates) or Standard Contractual Clauses adopted by the Commission, supplemented where necessary by additional safeguards. A copy of the applicable guarantees may be requested at support@wanderer.live.

11. How Long Do We Keep Your Information?

At the end of the applicable period, data is deleted or irreversibly anonymised. We may retain for longer periods data strictly necessary to establish, exercise, or defend a legal claim, or to comply with a statutory obligation.

12. How We Protect Your Information and Data Breaches

We apply appropriate technical and organisational measures, including encryption in transit and at rest, provider authentication, the principle of least privilege in access controls, environment separation, and periodic security reviews of our infrastructure providers, to protect your data against unauthorised access, loss, or misuse. No system can guarantee absolute security.

In the event of a personal data breach, we will notify the competent supervisory authority within 72 hours of becoming aware, where the conditions of Article 33 GDPR are met, and will inform affected users without undue delay where the breach is likely to result in a high risk to their rights and freedoms, pursuant to Article 34 GDPR. Security vulnerabilities may be responsibly reported to safety@wanderer.live.

13. Minors

The Platform is not directed at, and may not be used by, anyone under 18 years of age. We do not knowingly collect data from minors. At registration we require an express age declaration. If we become aware that an account belongs to a minor, we will terminate it and delete the associated data without delay. Parents and guardians may report such situations to us at support@wanderer.live.

14. Your Privacy Rights

To exercise any of these rights, write to support@wanderer.live. We respond without undue delay and in any event within one month of the request, extendable by a further two months for particularly complex requests, with prior notice to you. Exercising your rights is free of charge; we may ask for information to verify the identity of the requester.

15. No Automated Decision-Making

We do not make decisions based solely on automated processing that produce legal effects or similarly significantly affect you within the meaning of Article 22 GDPR. Event recommendations and the selection of events in periodic communications are personalised based on city and stated interests, but do not produce effects of this kind and can be disabled by withdrawing the relevant consent.

16. Third-Party Websites and Do-Not-Track Features

The Platform may contain links to third-party websites (including Hosts' social profiles and messaging channels used for direct contact). We are not responsible for the privacy practices of those third parties, and we encourage you to review their respective policies. Our Platform does not currently respond to browser "Do Not Track" signals, as no uniform standard for such signals has been adopted; preferences expressed via the cookie banner are always respected.

17. Updates to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified by email at least 14 days before they take effect. The date of last update is always shown at the top of the document.

18. How to Contact Us and How to Complain

For any request relating to this Policy or to the exercise of your rights, write to support@wanderer.live. If you believe that our processing of your data violates applicable law, you have the right to lodge a complaint with the competent supervisory authority — in Italy, the Garante per la protezione dei dati personali (www.garanteprivacy.it) — or with the authority of the EU member state in which you habitually reside, work, or where the alleged violation occurred. This is without prejudice to your right to seek judicial redress.