Last updated: 11 September 2026
This page explains how personal data submitted through the RSVP form on this website (the “Site”) is collected, used, and protected, in accordance with the EU General Data Protection Regulation (GDPR) and applicable Portuguese data protection law (Lei n.º 58/2019).
The data controller responsible for this Site and the personal data collected through it is:
Matthias Spott
Contact: Matthias.Spott@gmail.com
When you submit the RSVP form, the following personal data is collected:
If you proceed to payment, PayPal processes your payment details directly on its own platform. This Site does not receive, see, or store your card or bank details — only PayPal (Europe) S.à r.l. et Cie, S.C.A. processes that information, under PayPal’s own privacy policy.
Your data is processed solely to organise and manage attendance for a private birthday event (“Operation 42”). The legal basis for this processing is your consent (Article 6(1)(a) GDPR), given by voluntarily submitting the form, and the legitimate interest of the organiser in planning the event (Article 6(1)(f) GDPR).
RSVP responses are recorded in a Google Sheet for event planning purposes (processed by Google Ireland Limited). Payment, if made, is processed directly by PayPal. Website hosting is provided by Hostinger. No data is sold or used for marketing.
Google and PayPal may process data on servers located outside the European Economic Area. Where this occurs, appropriate safeguards are relied upon, such as the European Commission’s Standard Contractual Clauses.
RSVP data is retained only for as long as necessary to organise the event and will be deleted no later than 30 days after the event date (7 November 2026), unless a longer retention period is required by law.
Under the GDPR, you have the right to request access to, rectification of, or erasure of your personal data, to restrict or object to its processing, and to data portability. To exercise any of these rights, contact Matthias.Spott@gmail.com. You also have the right to lodge a complaint with the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt.
This Site, hosted on WordPress via Hostinger, may use strictly necessary technical cookies required for the site to function. No advertising or third-party tracking cookies are used.
Reasonable technical and organisational measures are in place to protect your data against unauthorised access, loss, or misuse.
No automated decision-making or profiling is carried out using your data.
This privacy notice is provided for a private, non-commercial event and does not constitute legal advice. If in doubt, consult a qualified data protection lawyer in Portugal.