YOUR PRIVACY
Privacy notice
Last updated: 10 October 2026.
Who looks after your information
BOSSY BOSSY OFF DUTY is operated by cocoli, the controller of information collected through this website. For questions or requests, email viacocoli@gmail.com.
What you share and why
Our invitation list collects your email address, and optionally your name, Instagram handle and a short note about the gatherings you would enjoy. We use these details to understand interest and contact you about future BOSSY BOSSY OFF DUTY gatherings. Please do not include sensitive personal details in your note. Joining is voluntary, based on the consent you give using the unchecked box on the form, and is not a ticket purchase or confirmed event reservation.
A separate, optional checkbox lets you subscribe to other brand news and updates. You can join the invitation list without choosing this. We do not sell your details, use them for advertising audiences or make automated decisions about you.
Where information is processed
Netlify hosts the website, receives form submissions and filters spam. cocoli can access submissions in the Netlify dashboard. Gmail is used for correspondence; form notifications may be delivered to the operator's Gmail inbox. These providers may process information outside the European Economic Area, including in the United States. Their transfer arrangements and safeguards are described in Netlify's privacy notice and Google's privacy notice. Contact us for information about the safeguards applicable to your data.
Technical request information, such as IP addresses, may be processed by hosting and spam prevention services to deliver and protect the website. Our basis for necessary security processing is our legitimate interest in keeping the service available and preventing abuse.
How long information is kept
Invitation-list details are kept until you unsubscribe or for up to 12 months after your latest sign-up or direct interaction with us, whichever comes first. We review the list and remove expired records from the dashboard, working lists and associated notification emails. Privacy requests are kept as needed to complete the request, then removed within 30 days, unless a legal obligation requires otherwise. Provider backups and technical logs follow the providers' applicable retention schedules.
Your choices and rights
You may withdraw consent at any time, without affecting earlier lawful processing. Reply “unsubscribe” to an invitation, email us, or use the form below. You can also ask to access, correct, delete or receive a copy of your information, or request restriction of processing and object where applicable. We respond to rights requests within one month; if an extension is permitted and needed, we will explain why. We may ask for proportionate verification before disclosing or deleting information.
You can complain to your local data protection authority. In the Netherlands this is the Autoriteit Persoonsgegevens.
Cookies and tracking
We have not added advertising trackers, analytics scripts, third-party embeds or externally loaded fonts. The invitation form does not require a visitor account. Service providers may process technical information necessary for hosting and abuse prevention.
Leave the list or request deletion
This form is for privacy requests only. It does not subscribe you to anything. You can also email viacocoli@gmail.com.