1. Introduction
1.1 We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you how we look after your personal data when you visit our website or App and tell you about your privacy rights and how the law protects you.
2. Controller
2.1 The data controller responsible for your personal data is our company (referred to as “we”, “us” or “our” in this privacy policy).
3. Contact Details
3.1 If you have any questions about this privacy policy or our privacy practices, please contact us using the details set out below:
Email: [Insert contact email]
Address: [Insert physical address]
4. What personal data do we collect?
4.1 The personal data we collect includes your name, surname, phone number, email address, and other identification or contact data.
4.2 In addition, we may collect certain data that is automatically sent to us by the device from which you access the website or the App.
5. Why do we collect and how do we use personal data?
5.1 We use the collected personal data for the following purposes:
- 5.1.1 To process your ticket order and grant you access to the festival;
- 5.1.2 To communicate with you regarding important updates about the festival or changes in our services;
- 5.1.3 To ensure the security and functionality of the website and App;
- 5.1.4 To analyze and improve our services.
6. Legal grounds for processing
6.1 We process your personal data based on your consent and for the fulfillment of a contract to which you are a party, or to take steps at your request before entering into a contract.
7. Who do we share personal data with?
7.1 We may share your personal data with service providers that assist us in organizing the festival and providing our services, such as payment processors, IT service providers, and communication platforms. All such third parties are bound by confidentiality and data protection obligations.
8. How long do we store your personal data?
8.1 We retain your personal data only for as long as necessary for the purposes for which it was collected or as required by applicable law.
9. Your rights regarding personal data
9.1 According to the applicable data protection regulations, you have the following rights:
- 9.1.1 The right to access your personal data;
- 9.1.2 The right to rectify incorrect or incomplete data;
- 9.1.3 The right to request the deletion of your data;
- 9.1.4 The right to restrict the processing of your data;
- 9.1.5 The right to object to data processing;
- 9.1.6 The right to data portability;
- 9.1.7 The right to file a complaint with the supervisory authority.
10. Information security
10.1 We are working hard to protect our website, App and users, as well as all personal data collected in accordance with this Policy, from any unauthorized access or from the modification, unauthorized disclosure or destruction of the information we hold.
10.2 We guarantee that we have implemented technical and organizational measures appropriate to the processing activities they perform, in order to protect personal data against accidental or unlawful destruction, loss, alteration, disclosure or unauthorized access to, transmission, storage or processing in any other illegal ways.
10.3 In this regard:
- 10.3.1 We certify that we meet the minimum requirements for the security of personal data, the data being processed in a way that provides protection against unauthorized or illegal processing and against accidental loss, destruction or damage, by taking appropriate technical or organizational measures;
- 10.3.2 For the data collected through the website and the App, in order to ensure access to the festival, we use a cloud service. Therefore, the security settings provided by cloud provider are used. Access to data is done in a whitelist of security groups, which means that data can only be accessed from certain pre-defined IP addresses. Access is based on username and password, and within the organizing entities access to the database is allowed to a limited number of persons.
- 10.3.3 The used data storage systems have implemented back-up mechanisms to ensure the redundancy of the stored data.
- 10.3.4 We are regularly reviewing the practices for collecting, storing and processing information, including physical information, as well as security measures, to prevent unauthorized access to the systems.
- 10.3.5 We are restricting the access of our employees and contractors to your personal information, and the contractual relations with these persons are subject to strict rules regarding contractual confidentiality obligations, including under the sanction of termination of contracts.
11. When does this Privacy Policy apply?
11.1 Our privacy policy applies to all services offered by our company and excludes services that have separate privacy policies and do not contain the provisions of this privacy policy.
12. Amendments
12.1 We will post any privacy policy changes on our page, which will take effect within one day and, if the changes are material, we will provide more prominent notice (including, for certain services, email notification of policy changes of confidentiality).
12.2 We will also keep previous versions of this Privacy Policy on file for your review at any time.