JOHNNY JONAT / INFORMATION
Privacy
How we handle your data
Controller
SNAPYOURDATE UG (haftungsbeschränkt), represented by its managing director Liroy Johnny Ilian Jonat, Meiendorfer Straße 72, 22145 Hamburg, Germany. General contact: info@monalisaentertainment.com. Phone: +49 40 70 10 28 45.
Data protection contact
Johnny Jonat. Email: info@monalisaentertainment.com. Phone: +49 40 70 10 28 45. Postal address: Johnny Jonat, c/o SNAPYOURDATE UG (haftungsbeschränkt), Meiendorfer Straße 72, 22145 Hamburg, Germany. Please mark correspondence about data protection as personal and confidential.
Website and hosting
We use OpenAI (ChatGPT Sites) for hosting, with Cloudflare providing infrastructure services. IP addresses, request times, requested resources and technical browser information are processed to deliver the website and prevent misuse. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of this website.
Recipients of this technical data are OpenAI and contracted infrastructure providers, including Cloudflare. The data processing agreements applicable to our account govern this processing. Data may be processed outside the European Economic Area. The agreements provide for adequacy decisions or standard contractual clauses for these transfers. Details of these safeguards are available in the linked agreements; you can also request a copy from us.
Images, videos, fonts and scripts are loaded through this website. No marketing pixels, analytics tools or external social media feeds are embedded.
Protected partner access
Invitations are valid for 20 days from issue. Invitation codes and random session identifiers are stored only as hashes in the managed database (D1). The session uses the necessary __Host-jj_partner cookie with Secure, HttpOnly and SameSite=Strict. It is required for the protected access you requested under Section 25(2)(2) TDDDG and expires no later than the invitation code. Signing out removes the browser cookie. Revoking an invitation ends access.
To prevent misuse, we use expiring attempt counters linked to a hash of the IP address. These data are not used for advertising measurement. Owner authentication processes the identifier and email address supplied by the hosting service to check access permissions.
An invitation’s label, creation time, expiry and revocation status remain stored for administration as long as needed for the relevant partner communication, an investigation into misuse or necessary legal records. Expired session records and attempt counters are cleared during subsequent sign-in attempts. Not all data are therefore automatically deleted after 20 days.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interests are protected communication with partners and the prevention of misuse.
Event search
Event search loads a selection of public listings from our own server. Open event data and individually verified organiser information are cached there. Requests to data providers are made by our server and do not transmit your location or search terms. External event images are not loaded. Sources, licence information and links to the relevant event remain accessible.
Date and optional age filters are processed only on your device. After you click “Near me” and grant browser permission, your location is requested once to calculate distances within the listings already loaded. Precise coordinates remain in the memory of the open page and are not transmitted to our server or the event provider. Choosing a city, resetting the filters or leaving the page clears the location from this view. We do not create movement profiles or save these search inputs in browser storage. Your browser or operating system’s location service may process data to determine your location; its own privacy information applies. Search is also available without location access. An event listing does not establish relationship status, age distribution or the presence of particular people.
The optional location request and local distance calculation are based on your consent under Article 6(1)(a) GDPR and Section 25(1) TDDDG. You can clear the selected location using “Reset” and withdraw the permission in your browser. This does not affect the lawfulness of processing carried out before withdrawal.
Weather information
After you choose a supported location, the website requests weather information for that city from our server. With “Near me”, a nearby city is selected on your device. Only its fixed city identifier is sent to our server; your precise coordinates stay on your device. Our server retrieves DWD weather data through Bright Sky for public city centres and caches it temporarily. We do not send visitor data to Bright Sky. Your browser connects directly to the weather provider only if you open its source link. The legal basis is Article 6(1)(f) GDPR, our legitimate interest in helping visitors plan their outing. The consent described above applies to optional location access. Daily values are summarised from hourly data.
Contact by email, phone and post
The website’s contact features do not send messages or provide an upload function. Clicking reveals the contact address. When requesting a code, you can add your company, role and area of work to an email draft prepared locally on your device. The separate Monalisa Technologies enquiry window also prepares only a local email draft. It uses your name, email address, message and optional organisation or areas of interest in the browser. The website does not send these entries to a server or save them in browser storage. The fields are cleared when the window is closed. The email link opens your own email application. A message is transmitted through your email service only when you send it yourself. Your message, contact details and any information, photos, videos or links you include are processed to assess your enquiry and respond to it. Article 6(1)(b) GDPR applies to steps towards a contract requested by you; Article 6(1)(f) GDPR applies to other enquiries. Our legitimate interest is responding to your contact request. You can also contact us by phone or post. We process the information you provide for the same purposes and on the same legal bases.
Email and retention
Our contact email address is info@monalisaentertainment.com. Incoming messages and contact details are handled by the team members responsible for your enquiry. We use contracted email and communications providers to transmit and store messages. Messages are deleted once the matter is closed, unless statutory retention obligations or the establishment, exercise or defence of legal claims require further storage.
Images and interactive explanation
The photographs illustrate places and encounters. The Hamburg photograph shows the Speicherstadt district. The people pictured are not presented as actual participants, app members or product endorsers. The characters are original illustrations, not user profiles. References to possible venues do not imply a partnership. The interactive RunPass explanation illustrates the planned functionality. It does not create profiles, access your location or send real contact requests. The app is not yet available in the stores.
Appearance and external links
Your chosen light or dark theme is saved for the current browser tab in session storage (sessionStorage). This serves only to retain the appearance you selected, under Section 25(2)(2) TDDDG. The animation playback preference is not stored permanently. Social media, music and event organiser pages open as external links only after a click. No external players or social media feeds are embedded. The store icons currently show only an availability notice and send no data to Apple or Google.
Image and font credits
The Hamburg photograph is by Adrian Degner (Unsplash License). Barlow Condensed and Manrope are used under the SIL Open Font License. The café and campus photographs on the SNAPYOURDATE page are by cottonbro studio, Katerina Holmes and Kampus Production and are used under the Pexels license. They illustrate the setting; the people pictured are not presented as app members or product endorsers.
Your rights
Subject to the applicable legal conditions, you have rights of access, rectification, erasure, restriction of processing, data portability and objection. You can withdraw consent with effect for the future. You can object to processing based on legitimate interests on grounds relating to your particular situation. You may contact the controller named above to exercise your rights. You may complain to a data protection authority, in particular the Hamburg Commissioner for Data Protection and Freedom of Information, Ludwig-Erhard-Straße 22, 20459 Hamburg, Germany, email: mailbox@datenschutz.hamburg.de.
Voluntary information
You are not required to send an application, photographs, videos or other personal information. Without sufficient contact details, we may be unable to respond to your enquiry. This website does not make automated decisions about applications. Making initial contact does not grant recording or publication rights.
Updated: 13.10.2026