Privacy policy

This privacy policy explains how trwn collects, uses and protects personal data when you use the platform, in accordance with the General Data Protection Regulation (GDPR). Please read this policy together with our terms and conditions.

1. Who we are

trwn is operated by trwn, based at Nassaulaan 54, 8071 NB Nunspeet, registered with the Dutch Chamber of Commerce (KvK) under number 42120009. For privacy questions or to exercise your rights, email info@trwn.nl.

2. Scope and roles

This policy covers three groups of data subjects:

• Planners and couples who create an account: for this, trwn is the data controller.
• Guests whose data is entered by a planner or couple, or who submit an RSVP themselves via a wedding website: for this, the planner or couple is the data controller and trwn acts as processor. A data processing agreement is available on request.
• Website visitors who view public pages without an account.

3. What data we collect

4. Why we process this data, and on what legal basis

• To deliver the platform (account management, planning features, RSVP, exports): performance of the contract (Art. 6(1)(b) GDPR).
• To process payments and subscriptions via Stripe: performance of the contract and legitimate interest.
• To send transactional emails (verification, password reset, invoice notifications): performance of the contract.
• To secure the platform (rate limiting, CSRF protection, abuse detection): legitimate interest.
• To comply with legal obligations (tax retention requirements): legal obligation (Art. 6(1)(c) GDPR).
• Guest data and RSVPs are processed on behalf of the planner or couple managing that wedding; we do not determine the purpose ourselves.

We do not use your data for advertising, profiling or marketing emails without separate consent. The platform (portal and wedding websites) contains no third-party advertising or analytics trackers. However, on wedding websites the map under "Location" is provided by Google Maps, through which Google may place cookies; see section 9 for details. On our marketing websites (trwn.eu and trwn.nl) we use Google Analytics to measure visitor statistics; see section 8 for details.

5. Who we share data with

We use the following parties:

• Microsoft Azure (EU region): hosting of the application, database and storage of photos and documents.
• Stripe: payment processing for subscriptions and one-off package purchases.
• Google: optional sign-in with Google (only if you choose to use it) and Google Analytics for visitor statistics on our marketing websites (see section 8).
• Google Ireland Limited: displaying the map under the "Location" section on wedding websites, via Google Maps. See section 9 for what Google receives in doing so.
• TransIP: sending transactional emails.
• OpenStreetMap Nominatim and PDOK Locatieserver: address lookup to convert an entered venue address into coordinates (only the venue address is sent, no guest data). OpenStreetMap also serves as a fallback for the map when Google Maps is not available.

Where these parties process personal data on our behalf, they do so under the data processing terms that form part of their service agreement. We do not sell personal data and only share it with other third parties where legally required.

6. Transfers outside the EU

Our infrastructure runs in the EU (Azure West Europe). To the extent a processor (such as Stripe or Google) transfers data outside the EEA, this takes place on the basis of an adequacy decision or EU standard contractual clauses.

For Google Maps on wedding websites, Google Ireland Limited is our contracting party. Google may transfer data to Google LLC in the United States. This transfer takes place on the basis of the EU-US Data Privacy Framework, the European Commission's adequacy decision under which Google is certified.

7. How long we keep data

• Account and wedding data: for as long as the account is active, plus a reasonable recovery period after termination, after which deletion or anonymisation follows.
• Guest and RSVP data: for as long as the relevant wedding exists in the platform; deleted when the wedding or the guest record is deleted.
• Invoices and financial data: 7 years, in accordance with the statutory tax retention period.
• Session data: automatically deleted after inactivity or on logout.
• Backups: rolling retention period, deleted as part of the regular backup cycle.

8. Cookies and statistics

In the portal and on wedding websites we use a strictly necessary session cookie to keep you logged in and to protect forms. Wedding websites also remember, locally on your device, your preference for dark or light display. The portal and the wedding websites themselves contain no tracking or advertising cookies. Google may, however, place cookies when the map with Google Maps loads on a wedding website; these are listed below and are not necessary.

On our marketing websites (trwn.eu and trwn.nl) we use Google Analytics 4 to measure how visitors use the site. For this, Google Analytics places cookies (_ga and _ga_<id>). We have configured the measurement restrictively: Google Signals is switched off and ad personalisation is switched off, so your visit is not linked to a Google account and is not used for advertising purposes. Google Analytics 4 does not record the IP address in our reports; Google uses it only to determine approximately which country or region a visit comes from. The statistics are pseudonymous, not anonymous: they contain no name or email address, but Google Analytics does assign your browser a unique number by which returning visits are recognised. We use the statistics solely to improve our website and do not link them to your trwn account. The legal basis for this is our legitimate interest in understanding how our website is used (Art. 6(1)(f) GDPR). If you prefer not to be measured, you can block cookies in your browser or use the Google Analytics opt-out browser add-on. You can also object by emailing info@trwn.nl.

Only with your consent. Since November 2026, Google Analytics is only loaded after you click “Yes, fine” in the notice at the bottom of the page. If you choose “No thanks” or make no choice, nothing is loaded and nothing is measured; no request goes to Google at all. Your choice is stored only locally in your browser (trwn:consent), without a cookie, and you can change it at any time via Cookies in the footer of every page.

Below is an overview of which cookies and similar techniques we and third parties use.

If you do not want Google Maps cookies, you can block third-party cookies in your browser. The map will then not load, or will load only partially; the rest of the wedding website will keep working as normal.

9. The map under "Location" on wedding websites (Google Maps)

A wedding website can show a map under the "Location" section that displays the wedding venue. Since 27 July 2026 we have used the Google Maps Embed API from Google Ireland Limited for this, instead of OpenStreetMap. Visitors currently see the Google Maps map everywhere. If Google Maps is not enabled in an environment, the map falls back to an OpenStreetMap map; in that case, no data is sent to Google.

Where and when. The map only appears on a wedding's wedding website, in the "Location" section, and only if the couple has switched the map on and the entered address has been recognised. If the map is switched off or the address is not recognised, nothing is retrieved from Google. Our marketing websites trwn.eu and trwn.nl do not themselves contain Google Maps.

How it works technically. The map is loaded in a sandboxed frame element (iframe) pointing to google.com/maps/embed/v1/place, using only the coordinates of the wedding venue as the search term. We do not load any Google scripts, Google Analytics or advertising tags on wedding websites. Guest data, RSVPs and messages are never sent to Google.

What Google receives. As soon as the map loads, Google receives the visitor's IP address and data about the page from which the map is loaded (the address of the wedding website, app.trwn.eu). Google may also place cookies and read data from the visitor's device, such as browser and device settings. What Google does with this beyond that is described in Google's privacy policy.

Legal basis. The couple or the planner manages the wedding website and decides whether the map is switched on; trwn provides the feature. The processing is based on the legitimate interest of easily showing guests the way to the wedding venue (Art. 6(1)(f) GDPR). For the cookies Google places in doing so, you can refuse them by blocking third-party cookies in your browser.

Transfer. Google Ireland Limited may transfer data to Google LLC in the United States, on the basis of the EU-US Data Privacy Framework. See also section 6.

The "Open in Google Maps" button. Under each venue there is a plain link to Google Maps. That link does not load anything by itself: data is only sent to Google once a visitor clicks it and, in doing so, visits Google's website.

10. Security

We take technical and organisational measures appropriate to the risk, including encrypted connections (HTTPS), encrypted password storage, access control per wedding, and secured connections to our storage and database.

11. Your rights

Under the GDPR you have the right to access, rectification, erasure, restriction of or objection to processing, and data portability. To exercise these rights, email info@trwn.nl. Are you a guest at a wedding, and does it concern data entered by a planner or couple? Then please contact that couple or planner first. They are the data controller for this, and we assist them where needed.

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

12. Children

The platform is not directed at children under the age of 16. Guest lists may occasionally include the names of guests' children, entered by the planner or couple, who remains responsible for having a valid legal basis for this.

13. Changes

We may change this privacy policy. The current version is always available on this page, with the date of the last update shown at the top.