Privacy policy
Last updated 12 November 2026
How Listed uses your personal data, and your rights under the GDPR and the Danish Data Protection Act. We collect as little as we can and never sell your data.
1. Who is responsible
8000 Productions, CVR 44331993, Skovgaardsgade 5C, 8000 Aarhus C, Denmark, is the data controller. For anything about your data, email 8000productionsdk@gmail.com.
2. What we collect
- Your application: name, email, and if you give them, phone number, Instagram handle, referral code and what you wrote about the nights you go to.
- Your account: email, name, role (applicant, member, venue staff, admin) and your referral code.
- Bookings: what you booked, when, the price and fees, the ticket code, and Stripe's reference for the payment. We never see or store your card details; Stripe handles them.
- Check-ins: when your ticket was scanned at the door, and whether it was before the cut-off.
- Help requests: what you write to us, our replies, and the booking details at the time you asked.
- Drop alerts: if you turn them on, a technical address your browser gives us for sending notifications.
- Technical logs: errors and requests, kept briefly to keep the service running and secure.
3. Why, and on what legal basis
- Reviewing applications and running your membership: to enter into and perform our agreement with you (GDPR article 6(1)(b)).
- Selling and delivering tickets, check-in at the door, refunds and help requests: performing the agreement (6(1)(b)).
- Bookkeeping: booking and payment records are kept because the Danish Bookkeeping Act requires it (6(1)(c)).
- Security, preventing misuse and resale, and understanding how the service is used (for example how many members turn up before the cut-off, counted in total, not per person): our legitimate interest in running a safe and working service (6(1)(f)).
- Drop alerts: your consent, which you can withdraw at any time by turning them off (6(1)(a)).
Members are approved by people, not by automated decisions. We don't use your data for advertising and we don't sell it.
4. Who sees your data
- The seller of the event and its door staff: your name and ticket code when your ticket is scanned. Sellers get booking totals and ticket codes for their accounting, not your contact details.
- Stripe: handles payments as an independent data controller (Stripe Payments Europe, Ireland), under its own privacy policy.
- Our suppliers (data processors), under data processing agreements, only to provide the service:
Supplier For Where Supabase Database and login EU (Frankfurt) Vercel Hosting the app EU and US; covered by the EU-US Data Privacy Framework and standard contractual clauses Google (Gmail) Sending login links, tickets and support emails EU and US; Data Privacy Framework and standard contractual clauses Anthropic Drafting replies to help requests, only if that feature is switched on; a person checks every reply before it's sent US; Data Privacy Framework and standard contractual clauses Your browser's push service (Apple, Google, Mozilla) Delivering drop alerts, only if you turn them on Depends on your device We may also share data where the law requires it, for example with the police or tax authorities.
5. How long we keep it
- Declined or withdrawn applications: 6 months.
- Your account: while you're a member. If you haven't used it for 24 months, we close it and delete or anonymise your data.
- Booking and payment records: 5 years from the end of the financial year they belong to, as the Bookkeeping Act requires. After you leave, they're kept without your contact details.
- Help requests: 24 months after they're resolved.
- Drop alert addresses: until you turn alerts off, or your browser stops accepting them.
- Technical logs: up to 30 days.
6. Your rights
You can ask to see the data we hold about you, have it corrected or deleted, restrict or object to how we use it, and get a copy to take elsewhere. Email 8000productionsdk@gmail.com; we reply within a month. Deleting your account doesn't delete booking records we must keep for bookkeeping.
You can also complain to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, datatilsynet.dk.
7. Cookies and storage
We only use what the app needs to work: a cookie that keeps you logged in, and small settings stored in your browser (for example that you dismissed a tip). No tracking, analytics or advertising cookies, so there is no cookie banner. If that ever changes, we will ask for your consent first.
8. Age
Listed is for people aged 18 and over. We don't knowingly collect data about anyone younger.
9. Security and changes
Your data is protected by access controls: members see only their own data and venues only their own events. If a breach puts your data at risk, we report it to Datatilsynet and tell you where the law requires it. We update this policy when how we use data changes and say so in the app. See also our terms.