Data handling and integrity
GDPR Consent Document
Introduction
We are committed to protecting your personal data and respecting your privacy. In accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679, this document explains how we collect, use, and protect your personal information when you register for or participate in our events.
1. Data Controller
The data controller for the processing of your personal data is Inner Peace Events, located in Stockholm, Sweden. You can contact us at contact@innerpeaceevents.se for any questions regarding this policy.
2. Personal Data We Collect
We may collect and process the following categories of personal data:
Contact Information: Name, email address, phone number, postal address.
Event Participation Details: Registration data, attendance, dietary preferences, accessibility needs.
3. Purpose of Data Processing
We collect and use your personal data for the following purposes:
To manage event registrations and attendance.
To communicate important information regarding the event (e.g., updates, changes, or cancellations).
To process payments and manage financial transactions.
To understand and accommodate your needs and preferences (e.g., dietary restrictions, accessibility).
To use photographs and videos for promotional materials, with your explicit consent.
4. Legal Basis for Processing
We process your personal data based on the following legal grounds:
Consent: When you provide explicit consent, such as agreeing to receive marketing communications or allowing us to use your photographs or videos for promotional purposes.
Contractual Necessity: To fulfill our obligations under the contract formed when you register for an event.
Legitimate Interests: For activities related to the organization and management of events, provided your interests and fundamental rights do not override these interests.
5. Data Sharing and Transfers
We may share your personal data with:
Third-party service providers who assist in event organization (e.g., venues, caterers, IT service providers).
Payment processors for the secure handling of payments.
Regulatory authorities if required by law.
We do not transfer your personal data outside the European Economic Area (EEA) unless adequate protection measures are in place.
6. Data Retention
We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including any legal, accounting, or reporting requirements. Photographs and videos used for promotional purposes will be retained until you withdraw your consent or request their removal.
7. Your Rights
Under the GDPR, you have the following rights regarding your personal data:
The right to access and receive a copy of your personal data.
The right to request rectification of inaccurate or incomplete data.
The right to request erasure of your personal data ('right to be forgotten').
The right to restrict or object to the processing of your data.
The right to data portability.
The right to withdraw consent at any time, where processing is based on consent.
To exercise your rights, please contact us at [Your Email Address].
8. Security Measures
We have implemented appropriate technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. Our data processing practices are regularly reviewed and updated to ensure compliance with GDPR requirements.
9. Changes to This Policy
We may update this GDPR consent document periodically to reflect changes in our practices or legal requirements. We will notify you of any significant changes and obtain your consent where necessary.
10. Contact Information
If you have any questions about this GDPR consent document or your personal data, please contact us at:
contact@innerpeaceevents.se