Pukkelpop 2023 - Privacy Statement

The Factory

Privacy Policy Pukkelpop App

We – THE FACTORY (hereinafter: “we”, “us”, “our”) – provide you, the user of our Pukkelpop mobile application (“PKP App”) with this Privacy Policy to inform you about how we process your personal data when you use the PKP app as well as your rights related to such processing. If you want more information on how we process personal data for other purposes, you are kindly referred to our general privacy policy that is available on our website.

The PKP App may contain links to websites, services, or applications of others – such as Spotify. This Privacy Policy does not apply to websites, services, or applications that are not controlled by us, even if they are accessible through our application. We advise to consult their respective privacy policies to learn more about how they process your personal data.

We may modify this Privacy Policy at any time. To see when this Privacy Policy was last updated, please refer to the “Last Updated” date indicated at the bottom of this page. Any changes made to this Privacy Policy will take effect when we make the updated version available on the PKP App.

If you have any questions about this Privacy Policy, please contact us by email at privacy@pukkelpop.be.

  1. Controller
    1. The controller responsible for the processing of your personal data is THE FACTORY, a limited company (“besloten vennootschap”/“société à responsabilité limitée”) under Belgian law, with registered office at Diestersteenweg 152, 3970 Leopoldsburg, Belgium, and registered with the Crossroads Bank for Enterprises under company number 0434.153.588. You can contact us as indicated in section ‎6.10 below.
  2. Processing of your personal data
    1. Usage
      1. Whenever you use the PKP App, we collect technical information associated with the device you use, such as device type, screen resolution, and operating system name and version. Additionally, we collect technical identifiers that identify the device you use and an app-instance identifier to identify a unique installation of the PKP App. We also collect information concerning your browsing behavior and engagement information, such as when you open the PKP App, how long you visit, and how long it takes for you to come back.
      2. We process your personal data collected through the PKP App to enable access to the PKP App and deliver content and functionalities correctly. This processing is based on our legitimate interest.
      3. We process technical information associated with your device and browsing behavior to perform statistical analyses, such as calculating service usage levels, diagnosing server problems, and administering the PKP App, to improve the PKP App and ensure its proper functioning.
      4. Additionally, we may process your personal data to preserve our legitimate interests or the legitimate interests of our partners or others if and when your use of the PKP App or more in general, your interactions with us, can be considered a violation of any applicable terms of use or any right of us or others, a threat to the security or integrity of the PKP App, a danger to the PKP App’s underlying systems, or as inappropriate or illegal behavior. For the processing of your personal data for this purpose, we rely on our legitimate interest of keeping our assets and business, including the PKP App, safe from misuse and illegal activity and to enforce our policies.
    2. User profile
      1. When you use the PKP App you can choose to build a profile which contains basic identification data such as your name and email address. When you provide us with this information, we ask for your consent.
    3. Newsletter
      1. You can request us to keep you informed of novelties, events and services offered by us. When you subscribe to the Pukkelpop Newsletter, we will collect your name, your email address and your personal preferences in terms of favorite music genre. In this case we will obtain your consent in order to send you relevant marketing communications to keep you up to date about our current and future activities. You will of course have the option to opt out from future communications.
    4. Other purposes
      1. In addition to the processing of your personal data for the purposes set out above, we may process all of your personal data for purposes (such as compliance purposes) as described in our general privacy policy that is available on our website.
  3. Sources of your personal data
    1. We obtain all information mentioned above directly from you.
  4. Recipients of your personal data and data transfers
    1. We only share personal data with others if it is legally required or if there is another legal basis for doing so.
    2. Your personal data is processed by third-party processors that operate on our behalf. We use a processor to deliver the PKP App services. We carefully select our processors and contractually require them to maintain the safety and integrity of your personal data. Our processors are only authorized to process your personal data according to our explicit written instructions.
    3. Moreover, we collaborate with others that assist us in delivering and improving our services. For instance, we utilize a third-party service – Google Analytics for Firebase – to follow certain of your actions on the PKP App in order to better understand how the PKP App is used and to support our marketing campaigns. If you require more information about the personal data Google processes about you and makes available to others, you are kindly requested to consult Google’s applicable privacy policies.
    4. In order to process your personal data for the purposes outlined in section 2 above, we may transfer your personal data to others which are located outside of the European Economic Area, such as any country where we have partners or service providers.

In case these recipients that process your personal data on our behalf are located in a third country for which the European Commission has not yet decided that it ensures an adequate level of protection and where derogations for specific situations do not apply, we shall implement appropriate safeguards with regard to the processing of your personal data. Such safeguards might be provided by, for example:

Where we rely on appropriate safeguards for the transfer of your personal data, we will assess whether these safeguards can sufficiently protect your personal data so that the level of protection guaranteed in the European Union is not undermined by the transfer. If this is not the case, we will take the additional measures necessary to provide appropriate protection for your personal data. If it is not possible to provide for appropriate protection of your personal data, we will not transfer your personal data to the recipient in a third country, or will transfer your personal data only if and to the extent that another mechanism justifies the transfer of your personal data in accordance with applicable data protection law. To obtain a copy of these data protection safeguards or to obtain information about their applicability, please send a request via email to privacy@pukkelpop.be.

  1. What we do to protect your personal data
    1. We do our utmost to process only that personal data that is necessary to achieve the purposes listed under section 2.
    2. The personal data you provide us will only be processed for as long as necessary to achieve the purposes stated in section 2 above, as required by applicable laws, or, if processing is based on your consent, up until such time you withdraw consent for processing. When deciding on the appropriate retention period, we take into account the purposes for which we process the personal data, the categories of personal data involved, the potential risks associated with a data breach, and any legal obligations (such as accounting obligations) that may require us to retain the data. We will de-identify your personal data when they are no longer necessary for the purposes outlined in section 2, unless there is an overriding interest of us or others in keeping your personal data identifiable, or if there is a legal or regulatory obligation or a judicial or administrative order that prevents us from de-identifying them.
    3. We want you to feel confident about using the PKP App and interacting with us, so we make our best effort to ensure that any personal data we collect is safely kept. We take technical and organizational measures to keep your personal data safe from unauthorized access or theft as well as accidental loss, tampering or destruction. Access by our staff, partners and third-party processors is only on a need-to-know basis and subject to strict confidentiality obligations. You understand, however, that safety and security are best efforts obligations only which can never be guaranteed.
  2. Your rights as a data subject
    1. You have the right to request access to your personal data that we process.
    2. You have the right to obtain the rectification of any inaccurate personal data about you. Your rectification request must be supported by evidence of the inaccuracies in the data you are seeking to have corrected.
    3. Where we process your personal data based on your consent, you have the right to withdraw such consent at any time.
    4. Under the conditions foreseen in the applicable data protection legislation, you have the right to obtain the erasure of your personal data.
    5. Under the conditions foreseen in the applicable data protection legislation, you have the right to obtain the restriction of processing of your personal data.
    6. If you receive our marketing communications, you can change your preferences for receiving such communications by clicking the “unsubscribe” link provided in our communications or object to direct marketing, including profiling to the extent that it is related to such direct marketing, by sending us an email at privacy@pukkelpop.be.
    7. Where we process your personal data based on our legitimate interests, you have the right to object to the processing of your personal data on grounds relating to your particular situation. However, you can always object to processing for direct marketing at any time without any charge or justification.
    8. If we process your personal data with your consent or to fulfill a contract and the processing is carried out by automated means, you have the right to receive the personal data you provided to us in a structured, commonly used, and machine-readable format and to transfer this information to another controller.
    9. We do not use automated decision-making processes that have a legal or similarly significant effect on you.
    10. To exercise any of the rights mentioned above, you can send a request via email to privacy@pukkelpop.be. Please state clearly which right you wish to exercise and provide reasons or proof to support your request if required. We will acknowledge receipt of your request and proceed to review it. If your request is valid, we will honor it as soon as possible. In case we have doubts about your identity, we may request additional information to verify it.

If you are not satisfied with how we handle your personal data, please inform us by sending an email to privacy@pukkelpop.be. You also have the right to lodge a complaint with a supervisory authority. You have the choice of submitting this complaint to the supervisory authority of the EU member state where you normally reside, where you have your place of work, or where the alleged infringement was committed. If you choose the Belgian supervisory authority, this can be done at https://www.dataprotectionauthority.be/citizen/actions/lodge-a-complaint (available in Dutch, French and German).

Last Updated: 6 March 2024