Policies and information
GDPR and your rights
The General Data Protection Regulation gives you control over your personal data. Seating Chart Generator processes very little of it, because your seating plans never leave your device. Here is what we do process, why, and how to use every one of your rights.
- Minimal data Only technical request data and the emails you choose to send us.
- Plans stay with you Guest and class lists are processed on your device, never by us.
- Answer within a month We reply to rights requests within one month, as the GDPR requires.
- Free of charge Using your rights costs nothing.
Who is responsible
The controller for the personal data described here is the team that runs seatingchartgenerator.org. You can reach us about anything on this page at our contact page. The privacy policy describes the same data in everyday terms.
What we process and why
| Purpose | Data | Legal basis | Kept for |
|---|---|---|---|
| Delivering the website and keeping it secure | IP address, page requested, time, referring page, browser user agent | Legitimate interests in running a secure, working website (Art. 6(1)(f)) | A limited period under our host’s log policy |
| Answering your messages | Email address, name if given, your message | Steps at your request (Art. 6(1)(b)) and legitimate interests in helping you (Art. 6(1)(f)) | Until your question is resolved and any follow-up done |
| Handling data protection requests | Your contact details and the request | Legal obligation (Art. 6(1)(c)) | As long as needed to show we answered it |
We don’t use consent as a legal basis because we run nothing that needs it: no cookies, analytics or advertising. Our hosting provider, Hostinger, processes this data on our behalf, as described in the privacy policy.
Data that never reaches us
The names, tables, rules and notes in your seating plans, the files you import and the files you export are processed only by your own browser, on your own device. We don’t receive them, so we are neither the controller nor a processor of that data, and we can’t see, change or delete it. You can delete it yourself at any time: see how to clear it.
Your rights
- Access Ask whether we hold personal data about you and get a copy (Article 15).
- Rectification Have inaccurate data corrected or incomplete data completed (Article 16).
- Erasure Have your data deleted, for example the emails you sent us (Article 17).
- Restriction Ask us to limit how we use your data while a question is settled (Article 18).
- Portability Receive data you gave us in a common machine-readable format (Article 20).
- Objection Object to processing based on our legitimate interests (Article 21).
- No automated decisions Smart arrange runs on your own device and decides nothing about you (Article 22).
You can also withdraw any consent you have given, though we don’t ask for consent anywhere on the site.
How to make a request
- Write to our contact page and say which right you want to use. A subject line such as “GDPR request” helps.
- We may ask you to confirm that the request comes from you, for example by replying from the email address you used to write to us. We only ask for what is needed.
- We answer within one month. If a request is complex, the GDPR lets us extend this by up to two more months; we will tell you within the first month if so, and why.
Requests are free. We can only refuse or charge for requests that are clearly unfounded or excessive, and we would explain why.
Complaints
Please tell us first if something is wrong, so we can put it right. You also have the right to complain to a data protection supervisory authority, in particular in the country where you live or work. The European Data Protection Board lists them: EU data protection authorities. In the United Kingdom, it is the Information Commissioner’s Office.
Schools and organisations
Teachers, schools, companies and event planners often enter other people’s names. Your organisation stays the controller of that data. Because the names are processed only in your browser and never sent to us, we don’t act as a processor for them, and you don’t need a data processing agreement with us to use the tool. Share links and QR codes contain the names in them, so share those only as your own policies allow.
Other privacy laws
- United Kingdom: the UK GDPR gives you the same rights, and you can use them the same way.
- California (CCPA/CPRA): we don’t sell or share personal information, and don’t use it for targeted advertising.
- Brazil (LGPD), and everywhere else: whatever law applies to you, you can ask us what we hold about you, to correct it or to delete it, at our contact page.