PERSONAL DATA PROCESSING
The protection of personal data is of the utmost importance to us, thus we strive to ensure that all collected data complies with the principles set out in data protection legislation applicable in Romania, including Regulation (EU) 2016/679 on the protection of individuals regarding data processing and on the free movement of such data and repealing Directive 95/46 / EC (“GDPR”). As an operator, Luna Fest has implemented numerous technical and organizational measures to ensure the complete protection of personal data.
WHAT KIND OF DATA DO WE PROCESS AND FOR WHAT PURPOSE?
Through the Site, we process the following categories of personal data: identification data (name, surname) and contact data (e-mail address, telephone number). Moreover, through the Site you can provide us with other needed information about you , as specified below.
Thus, we process your personal data for the following purposes:
- Communicating with you
You may ask for our assistance or send us comments, suggestions or questions about our site, as well as the processing of your personal data.
You can apply for press accreditation or to become a volunteer at Luna Fest.
In these cases, we use the contact details to communicate with you about your requests. The purpose of processing in this case is to fulfill the agreement as a reason for processing , and, if necessary, to analyze and answer your requests.
- Data processing as an obligation imposed by the law
We may utilize some of your data in order to provide products and services based on obligations imposed by law (for example, the obligation to comply with tax laws). In this case, the basis of the processing is the fulfillment of a legal obligation.
- Sending newsletters
We may use your contact information to provide you with electronic newsletters about events, conferences, contests and/or promotions organized by us. However, this type of data processing is enabled only if you subscribe to the above mentioned service and, therefore, you express your consent regarding the use of your data. You can withdraw your consent at any time and choose not to receive newsletters in the future by clicking “Unsubscribe” when you receive that email or contact us at firstname.lastname@example.org.
- Contests and tombolas
Should you sign up for the contests and/or tombolas we organize, we process the personal data with which you provide us when signing up for them. In this case, we rely on your agreement to participate in the events we organize.
- To monitor traffic, improve the functionality and features of our website
This type of data processing is based on our legitimate interest to ensure the proper functioning of our website, as well as its future improvement.
The categories of data processed in this situation are the time and date of accessing the website and the IP address from which our site was accessed.
We use cookie technology on our website, which allows us to facilitate your browsing experience, create statistics and improve our website. Moreover, we use Google Analytics to analyze the information collected from the website’s visitors. This information allows Adstream to better understand the users of the site and how they use it. For further details, read our Cookies Policy.
In addition, we use your personal data to analyze and evaluate your personal interests and preferences, to personalize your experience on the site and in the mobile application, to improve our services and to offer you services tailored to your own interests and preferences. The data are used for statistical purposes, the operator does not do individual profiling and uses only aggregated information.
TO WHOM DO WE DISCLOSE YOUR PERSONAL DATA?
Your personal data will be stored on our servers in Romania, however we will be able to store them on cloud platforms operated by providers of such services in the European Union.
Your personal data will be transmitted to the ticketing platform iabilet.ro, exclusively for the purpose of providing you with tickets / season tickets for the festival.
The platform belongs to IA BILET S.R.L. Company, headquartered in Bucharest, Calea Vitan, no. 6-6A, Phoenix Tower, Building B, 4th floor, Room 4, no. 21, sector 3, with a unique registration code RO30394071, registered in the trade register under no. J40/7745/2012.
Your personal data can be transmitted to public authorities in case of a legal formal request.
Moreover, we will transmit your personal data whenever the law requires us to do so.
The transmission of your personal data to accountants or auditors, lawyers or other such external advisers of the operator, whenever it is necessary to achieve / protect a right or legitimate interest of the operator, is NOT a processing of personal data.
HOW LONG DO WE STORE YOUR PERSONAL DATA?
We will be storing your personal data for a reasonable period of time, determined by the purpose for which we process the above mentioned data.
Certain data may be retained for a longer period of time should we investigate fraud or other illegal activities.
Personal data collected and used to subscribe to our newsletter will be deleted immediately after you unsubscribe from our newsletter service.
Cookies are files sent by a web server to a person’s computer for archiving purposes. Cookies are used by most websites and help simplify your continuous access and usage of a specific website.
Cookies do not cause any damage to the computer’s operating system or files. In addition, only the website that sent a specific cookie can read, modify or delete that cookie.
If you do not want information to be stored by cookies, most browsers have simple methods to allow the deletion of stored cookies, the automatic rejection of cookies or the selection between acceptance and rejection. In any case, you should know that rejecting cookies makes your browsing experience more difficult and some parts of the website become inaccessible.
As the targeted individual, GDPR offers you a number of rights, including:
- The right to be informed
- The right to withdraw consent
If, in the future, you consent to data processing for the purpose of sending commercial communications, you will be able to withdraw your consent at any time by sending an email to email@example.com / by ticking the unsubscribe option from an already received email.
- The right to access
You have the right to obtain confirmation that your personal data are processed, as well as information on the specific nature of this processing (purpose, categories of personal data actually processed, recipients of the data and / or third parties who have access to data, the period for which the data is stored and your specific rights.)
- The Right to erasure( “the right to be forgotten”)
You have the right to erasure if:
-the purpose for which the data were collected and processed was fulfilled
-the individual “withdraws the consent on the basis of which the processing takes place and there is no other legal basis for the processing”;
-the individual opposes the processing of data (the right of opposition provided by the GDPR Regulation in art. 21);
-the data were illegally processed;
-there is a legal obligation on the part of the operator under European Union law or national law to delete this data;
-personal data have been “collected in order to offer the informational society’s services mentioned in Article 8 para. 1.” Article 8 para. 1 refers to the processing of data of children of the minimum age of 16 (legal processing) and those under 16 (processing is legal if the legal guardian consents to it, otherwise it is illegal).
- The right to rectification
You have the right to obtain from the operator the rectification and updating of your personal data should they be incomplete and/or inaccurate.
- The right to restriction
You have the right to request the operator to mark certain personal data as restricted during the settlement of complaints / requests regarding the accuracy, timeliness and legality of data processing.
- The right for data portability
You have the right to transfer your personal data to another operator if the processing is based on your consent / the execution of a contract and is automatically completed.
- The right to complain to the data protection supervisory authority
Should you consider that your legitimate rights and/or interests regarding the processing of your personal data have been violated, you can contact the National Authority for the Supervision of Personal Data Processing.
CHILDREN INFORMATION (UNDER 13 YEARS OLD)
One of our priorities is to add child protection while using the internet. We encourage parents and guardians to observe, participate and/or monitor and guide their online activity.
Luna Fest does not knowingly collect any ID information from children under the age of 13. If you believe your child has provided this type of information on our site, we strongly encourage you to contact us immediately and we will make every effort to remove such information from our records.
Should you have further questions regarding our data processing, or should you wish to exercise any of your rights under this policy, please send us a written request using the following contact details: firstname.lastname@example.org.