Privacy Notice

santamaiko processes personal data solely for the purpose of running a Secret Santa exchange. This page explains what data is stored and how it is used.

Data Controller

PASSION4IT GmbH, Postackerweg 9, 94234 Viechtach, Germany. Represented by the Managing Director Christian Kirsch. Contact: info@passion4it.de, phone +49 (0) 9942 – 46 593 0.


What data we store

We store the following personal data for participants: name, email address, and optional fields such as wishlist, interests, and department. Participants' email addresses were entered by the organiser (Secret Santa coordinator) who created the exchange.


Legal basis

Processing is based on legitimate interests (Art. 6(1)(f) GDPR): organising and running a workplace or private Secret Santa exchange. Without this data the service cannot function.


Retention period

All data is automatically and permanently deleted approximately 30 days after the draw. Early deletion on request is possible.


Newsletter and HubSpot

Contact data is shared with HubSpot only if a participant has explicitly consented to receiving a newsletter on the invitation page. This consent is entirely voluntary and has no bearing on participation in the Secret Santa. HubSpot then processes the data according to its own privacy policy and handles the double opt-in confirmation for the newsletter subscription.


Your rights

You have the right to access, rectification, and erasure of your stored data, as well as the right to object to processing. Please contact the data controller listed above.