A D.C. Computing Services community project
Privacy and cookies
What's On Castlemilk is a D.C. Computing Services community project. Contact us with questions about your information.
D.C. Computing Services is responsible for deciding how this project's personal information is used (the data controller). You can contact us through our contact page. This notice covers this website, rather than the separate services linked from it.
Why we use information
We use relevant organiser details to provide useful local listings, account details to manage authorised access, correction reports to keep listings accurate, and technical records to protect and maintain the service. Our lawful basis for these uses is legitimate interests: providing reliable community information and operating a secure website. We limit the information used and consider people's privacy and objections alongside those interests.
Browsing and cookies
You do not need an account to browse. Session cookies support sign-in, form security and confirmation messages. The reviewed website does not include advertising trackers or an audience-analytics service.
The calendar software, fonts and other site assets are served by this website. You do not need to accept advertising or analytics cookies to use the site.
Listings and organiser accounts
Event and organisation details are stored so we can review and publish community information. Approved listings can contain organiser contact details, links and images. Information may come from submissions or publicly available organiser sources. Please only submit information you have permission to share publicly.
Organiser accounts store a username, a password hash and the organisation the account belongs to. Access is restricted according to the account's role.
Please do not submit children's personal details or sensitive information. Public event information should describe the activity and its organiser, not individual attendees. We do not use the reviewed service to make automated decisions about people or build advertising profiles.
Correction reports
A correction records the event, any selected session date, category, message and submission time. Contact details are optional and private. A security fingerprint helps limit repeated submissions.
Read the detailed correction-report notice, including how fingerprints and reports are retained.
Technical records
The server records requests and errors to help operate and protect the website. These records can contain requested addresses, connection information and browser details. They are separate from the public listings and correction-report database.
Keeping and sharing information
The website and its database are hosted by Hetzner on a server in Nuremberg, Germany. The project administrator manages the website and access to its records.
Germany is covered by the UK's adequacy regulations for international transfers. A data-processing agreement is in place with Hetzner.
- Public listings are kept while they remain useful community information. Older event pages may remain available as historical records; ask us to correct or remove personal information that is no longer needed.
- Organiser accounts are kept while needed for access. We review inactive accounts at least yearly and remove unnecessary accounts.
- Open correction reports are reviewed monthly. Resolved reports, including contact details, are deleted in daily maintenance once they have been resolved for 90 days. A documented legal or security need may require a specific report to be kept longer and reviewed separately.
- Correction-report security fingerprints expire after 24 hours and are cleared by daily maintenance, or sooner when another report is accepted after expiry.
- Routine technical logs and recovery backups are kept for up to 30 days. A specific recovery copy needed for an unfinished deployment or incident is restricted and reviewed monthly until it can be removed.
Deleting a live record does not instantly remove it from a recovery copy. Routine copies expire within the backup period. If we restore a backup, we check and reapply relevant deletion requests. Contact us so the administrator can consider your request across live records and recovery copies.
Administrators and the services used to host and maintain the website handle information needed to run it. Booking links and the D.C. Computing Services contact page open separate services with their own privacy information.
Your information
You can ask for access to information relating to you, request correction or deletion, request a restriction on its use, or object where we rely on legitimate interests. Rights depend on the circumstances. We may need to check your identity and will explain any information we need to retain. You can also raise a concern with the Information Commissioner's Office.
Privacy policy reviewed: 12 October 2026.