Shutdown Festival 2024 - Privacy Statement

This Privacy Policy describes how we use the personal information you provide to us when you use the Application.

We may ask you to provide us with certain personal information, including, but not limited to, your first name, last name, and email address (Identification Data). For certain specific obligations, you may need to provide us with additional data, such as billing or payment information.

For this purpose, we rely on the processing bases of the agreement, the legal obligation, our legitimate interest and in some cases your consent (see also Section 2).

If you do not wish to share personal data with us, you will not be able to use the Application and we recommend that you uninstall it on your mobile device.

The processing of your personal data is subject to this Privacy Policy. If you have any questions or comments about this policy, please contact us at info@shutdownfestival.at.

By providing your personal data, you will be deemed to have acknowledged the use of your personal data in accordance with this Privacy Policy. 

Purposes and legal basis

Customer data 

As part of the application process, we collect and process the identification and contact data of our customers. The data may be processed for the purposes of contract performance with our customers, customer administration, accounting and direct marketing activities such as sending promotional or commercial information. The legal bases for this processing are the performance of the contract, the fulfillment of a legal obligation to which we are subject (including the Belgian Accounting Act), our legitimate interest and in some cases your consent.

In particular, we may use the personal data we collect for the following purposes:

The confidentiality of your personal data

Each time you submit personal information as a user, we treat that information in accordance with the terms of this Privacy Policy and the legal obligations under the Personal Data Processing Regulation, including the General Data Protection Regulation (GDPR).

We establish reasonable measures and procedures to secure and protect the personal data we collect through the Application or via electronic correspondence. In this way, we are committed to preventing, as far as can reasonably be expected, the unlawful processing of personal data and the accidental loss or removal of your personal data.

We strive to optimize the security of your personal data by limiting access to your personal data to individuals who have a "need to know" (e.g., only our employees, associates, affiliates or subcontractors who have a need to know your personal data). the purposes as described in Section 2 obtain permission to access the data).

How do we collect your personal data and how long is it kept?

Collection of data

We collect your personal data - without any claim to completeness - in the following cases:

We avoid collecting personal information that is not relevant for the purposes set forth in Section 2.

We may combine the personal data we collect through the Application with information you provide to us in other ways or that third parties provide to us.

Retention of data

Personal data is stored and processed by us for the period necessary for the purposes of processing. 

Customer data will be removed from our systems one year after your last application login, except for personal data that we need to keep longer due to specific legal obligations or in case of pending litigation. 

We avoid collecting personal data that is not relevant for the purposes stated in section 2.

Transfer of personal data?

We will not transfer your personal data to third parties outside the European Economic Area unless we have in place standard contractual clauses as provided by the European Commission. 

In addition, we will not transfer your personal data to third parties within the European Economic Area without your consent, except:

Any transfer of personal data to any of the third parties mentioned in the above list will be in accordance with the provisions of the General Data Protection Regulation (GDPR).

We ensure that measures are taken to ensure that third parties cannot use your personal data for purposes other than and in accordance with the purposes listed in Section 2 and that these third parties have taken the necessary technical and organizational measures to protect the data concerned.

We have data processing agreements with the above third parties and, where applicable, standard contractual clauses as provided by the European Commission to ensure the security of personal data. 

We will take all necessary precautions to ensure that our employees and collaborators who have access to personal data process that personal data only in accordance with this Privacy Policy and our obligations under the General Data Protection Regulation.

Use of the Wallet Function

At our events we use a system of the company Global Event Technologies (www.get.systems) for access control and (cashless) payment systems. In the course of this, personal data is collected (first name, last name, date of birth, e-mail address) in order to enable you to charge your NFC medium (wristband, card) before the respective event and processed. Your data will be passed on to payment providers for the re-transfer of your remaining balance upon your request.

ANALYSIS AND DISPLAY

We use third-party programs to make the ads we show you on our website or our partners' websites more relevant and interesting to you. To this end, we use cookies, web beacons or similar technologies to collect data about your usage patterns and to provide you with interest-based advertisements.

We also use third-party tools, including Facebook Custom Audience as well as similar tools offered by Meta, to advertise on other websites (including on social networks such as Facebook). Facebook Custom Audience is a tool offered by Facebook that matches a customer/visitor from the Festival to a Facebook user in order to advertise on the Facebook platform. For this purpose, we share your data with the relevant providers (e.g. Facebook, Instagram, TikTok,Snapchat, Twitter) and use cookies or similar technologies on our website to analyze how effective our advertising presence is on other websites. For more information about Facebook's use of data, please see the following link: https://www.facebook.com/privacy/explanation. You can withdraw your consent to the use of your data for these purposes at any time by contacting us by email: info@shutdownfestival.at

Rights of the data subject

Based on data protection legislation, you have the following rights. If you wish to exercise the rights set out below in relation to your personal data, you must send us a written request and send a copy of the front of your identity card to info@shutdownfestival.at

The right of access to personal data

You have the right to direct us to provide you with any personal data we hold about you, provided that the rights of other data subjects are not prejudiced.

The right to rectify personal data

We ask you to help us ensure that the personal information in our records is as accurate and current as possible. If you believe that the personal information you have provided to us is incorrect or incomplete, please notify us as described above. We will correct or amend your personal information as soon as possible.

The right to erasure of personal data

In certain circumstances, you have the right to have your personal data deleted immediately. 

These circumstances include:

However, there are certain general exclusions to the right to erasure. These general exclusions include when the processing is necessary: 

The right to restrict the processing of personal data

You have the right to restrict the processing of your personal data in the following circumstances:

If processing has been restricted on this basis, we may continue to store your personal data. However, we will only process them with your explicit consent, for the assertion, exercise or defense of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest.

The right to object to the processing of personal data

You have the right to object to our processing of your personal data in the following circumstances:

The right to data portability

If you wish to exercise your right to data portability, we will send the personal data to a data controller of your choice in a structured, commonly used and machine-readable format.

The right to withdraw consent

Insofar as the legal basis for our processing of your personal data is consent, you have the right to revoke this consent at any time. However, the revocation does not affect the lawfulness of the processing prior to the revocation

Geolocation

Your personal data is used to determine your location while you are using the application. We store this information for the limited duration of 36 months maximum. We will only use your personal data for this purpose if you have explicitly agreed to it by opting out. You have the unrestricted right to opt out at any time by sending an email to info@shutdownfestival.at or by contacting us the "Geolocation" button in the Application.

Links to third parties

The Application may contain links to other websites that are not controlled by us. Although we will do our best to ensure that links in the Application lead only to websites that have appropriate security and confidentiality standards, we are not responsible for the protection and privacy of any data, including personal data, that you submit to other websites after you leave the Application. 

Before submitting personal data on other websites, we recommend that you proceed carefully and consult the privacy policy applicable on the website in question before submitting personal data.

Changes 

We have the right to change this Privacy Policy at any time by posting a new version in the Application. 

We recommend that you consult the Application periodically to verify that you agree with any changes to this Privacy Policy. 

In any case, you will be notified of changes to this Privacy Policy by email.