This Privacy Policy is designed to ensure compliance with the General Data Protection Regulation (GDPR), to which Slovenia adheres. It outlines how we manage personal data at the Flat Out Days MTB Festival.
Types of Data: We collect personal information such as names, contact details (email addresses, phone numbers), billing information, and potentially special category data for accessibility or dietary requirements when necessary. Method of Collection: Data is primarily collected through ticket purchase forms, event registration, and direct communications with attendees.
Event Coordination: To manage ticket sales, entry, and provide event-related services. Marketing: With your consent, for sending you information about future events, promotions, or updates related to the Festival. Security: To ensure the safety and security of all attendees by verifying identities or in case of emergencies. Legal Compliance: To comply with legal obligations, such as tax laws or for fraud prevention.
Contractual Necessity: Necessary to perform a contract with you, such as selling you a ticket. Consent: For marketing or where we need your explicit permission, e.g., for special category data. Legitimate Interest: Where processing is in our interest but does not override your rights, such as improving event services. Legal Obligation: Where we are required by law to process your data.
Right of Access: You can request a copy of the personal data we hold about you. Right to Rectification: If your data is incorrect or incomplete, you can ask for it to be updated. Right to Erasure: You have the right to have your data deleted in certain circumstances. Right to Restrict Processing: You can request to restrict how we use your data. Right to Data Portability: You can ask for your data to be transferred to another organization or directly to you. Right to Object: You can object to our processing of your data where we rely on legitimate interests or for direct marketing. Right to Withdraw Consent: If we rely on consent, you can withdraw it at any time, affecting only future processing. Right to Complain: You may lodge a complaint with the Slovenian Information Commissioner if you feel your data rights are not being respected.
Storage: We keep your data only for as long as necessary to fulfill the purposes for which it was collected or as required by law. Security Measures: We use technical and organizational measures to protect your data from unauthorized access, loss, or alteration, including encryption, secure server environments, and access controls.
Your information may be shared with third parties involved in event management, like payment gateways, security services, or marketing partners. We ensure these parties comply with GDPR through contractual agreements.
If data is transferred outside the EU/EEA, we ensure GDPR compliance through mechanisms like Standard Contractual Clauses or by transferring to countries with an adequacy decision.
We may update this policy. Changes will be posted on our website. Please review this policy periodically.
For questions or to exercise your rights, contact us via e-mail: [email protected].